Proof & Track Record
Every number TCSA publishes — 1,000+ audits, 300+ SOC 2 engagements, zero first-time audit failures, our ratings — is explained and sourced on this one page. For each claim you will find what it counts, where the figure comes from, and how to check it without taking our word for anything.
Last reviewed: June 2026 Figures reflect internal engagement records and public review platforms as of June 2026
Key Takeaways
- TCSA has delivered 1,000+ audits since 2017, for clients headquartered in India, the US, the UK, Australia and the UAE.
- 300+ of those engagements are SOC 2 readiness and attestation programs, with zero first-time audit failures across engagements to date — a record of outcomes so far, not a guarantee.
- Ratings are triangulated from three labeled sources: a 5.0-star Google Business Profile (public client reviews), 5.0/5 on AmbitionBox (3 employee reviews), and 4.9/5 across 150 responses of internal client engagement feedback.
- Every engagement is led by a named auditor — Surendra Pal Singh, Parth Chauhan, or Saundhi Chauhan — whose credentials are published below. You can meet your auditor before signing.
The numbers, explained
Headline statistics are easy to publish and hard to check. So we apply the standard we hold clients to in audit work: a claim is only as good as what it counts and the record behind it. Here is each number we use, defined.
| Claim | What it counts | Source / verification |
|---|---|---|
| 1,000+ audits to date | Completed audit, certification, and compliance engagements across all frameworks — ISO 27001, SOC 2, SOC 1, VAPT, DPDP, and others — for clients in fintech, SaaS, logistics and cargo, staffing, go-to-market (GTM) and sales-tech, healthtech, and AI. | Internal engagement records to date. Client references available on request, subject to each client’s confidentiality consent. |
| 300+ SOC 2 engagements | SOC 2 readiness and attestation programs TCSA has supported, from gap assessment through to the issued report. | Engagement records. Final SOC 2 reports are issued by independent CPA firms, not by TCSA — our count is the programs we prepared and supported. |
| 100+ SOC 1 engagements | SOC 1 (SSAE 18 / ISAE 3402) attestation programs supported for service organizations whose controls affect client financial reporting — common for fintech, payroll, staffing, and logistics platforms. | Engagement records. Final SOC 1 reports are issued by independent CPA firms, and our count is the programs we prepared and supported. |
| Zero first-time audit failures | Certification and attestation outcomes for engagements TCSA has prepared and supported: no client has failed a certification or attestation audit on the first attempt. | Certification and attestation outcomes across engagements to date. This is a record of results so far, not a guarantee of future outcomes. |
| 5 markets | Client headquarters locations across engagements — India, the US, the UK, Australia and the UAE. | Engagement records to date. |
We deliver CERT-In audits, end to end, with our CERT-In empanelled partners. See how a CERT-In audit runs with us.
Independent ratings
A single rating is easy to cherry-pick, so we triangulate three sources and label what each one actually measures. They are different instruments: public client reviews, employee reviews, and our own engagement-close feedback.
| Source | What it measures | Rating | Sample |
|---|---|---|---|
| Google Business Profile | Public client reviews of TCSA, posted by reviewers on their own Google accounts. Fully public — readable without contacting us. | 5.0★ | Public reviews. Check the profile directly. |
| AmbitionBox | Employee reviews of TCSA as a workplace — a signal of how the firm treats its own people, not client feedback. | 5.0 / 5 | 3 reviews — a small sample, and we say so. |
| Client engagement feedback (internal) | Post-engagement feedback collected by TCSA at the close of engagements. Collected by us, not independently audited — labeled accordingly wherever it appears. | 4.9 / 5 | 150 responses. |
Check them yourself: the Google Business Profile and AmbitionBox pages are public — search “Tranquility Cybersecurity” on either platform and read every review directly. The 4.9/5 figure used across this site is the third row: based on client engagement feedback collected by TCSA across 150 responses, and labeled as internal wherever it appears.
What clients say
The quotes below are from TCSA's public Google reviews, reproduced verbatim — including reviewer names exactly as posted — and grouped by the service each review describes. Every one of them can be found on our Google Business Profile.
“Got our ISO 27001 and SOC 2 done, and we breezed through the audit.”
“SOC 2 Services were excellent”
“Got our ISO 42001 Certification done with Tranquility, Smooth Experience”
“Great VAPT service with a highly professional and knowledgeable team and strong focus on manual testing. The team went beyond automated scans to uncover deeper, real-world vulnerabilities that tools often miss.”
“We reached out to TCSA for help with DPDP compliance, and they made the whole process feel much easier. Their guidance was clear, practical, and easy for our team to follow.”
“Had a great experience with TCSA! The team is knowledgeable, supportive…”
The auditors behind the work
Numbers describe volume. These are the people accountable for it. Every TCSA engagement is led by one of the named auditors below — not routed to an anonymous pooled team — and each credential listed is one you can challenge us on.
| Name | Role | Credentials | Profile |
|---|---|---|---|
| Surendra Pal Singh | CISO & DPO | CISA · MCSE · ITIL · ISO 27001, 27701 & 42001 Lead Auditor | |
| Parth Chauhan | Chief Compliance Officer & Co-Founder | ISO 27001, 27701 & 42001 Lead Auditor · CEH · BE, BITS Pilani | |
| Saundhi Chauhan | Lead Auditor | ISO 27001, 27701 & 42001 Lead Auditor |
Anonymized engagements
Audit work is performed under NDAs, so the engagement write-ups below are anonymized for client confidentiality. Each one gives the industry, the frameworks and what we did, but no client names. Named stories appear only with the client’s written permission. Everything else stays anonymized.
Healthcare SaaS — HIPAA + SOC 2
A healthcare SaaS company building its HIPAA safeguards and its SOC 2 Type II readiness on one control set, in a single coordinated program.
Read the engagementAnonymized case studyFintech — ISO 27001 + RBI + DPDP
A fintech aligning ISO 27001 certification with RBI regulatory expectations and DPDP obligations, run as one concurrent program on a single control set.
Read the engagementAll published engagement examples live at tcsa.in/case-studies.
Verify us
We tell prospective clients to verify every vendor they shortlist, including us. Three ways to do that, none of which require taking this page at its word:
- 1. Ask for references on a callDuring your scoping call, ask to speak with past clients — we arrange reference conversations, matched to your industry or framework where possible, subject to each client’s confidentiality consent.
- 2. Check the reviews yourselfOur Google Business Profile and AmbitionBox pages are public. Read every review, including any critical ones, without ever talking to us.
- 3. Meet the named auditor before signingAsk to meet the lead auditor who will actually run your engagement — not a salesperson — and check their credentials against the table on this page and their LinkedIn profiles.
Tranquility Cybersecurity (TCSA) —
- Gurugram (HQ): 7th Floor, Worxspace, Welldone Tech Park, Sector 48, Gurugram 122018
- Bengaluru: By appointment, across the city
- info@tcsa.in
- +91 98715 79705
Both offices are real, staffed locations — you are welcome to visit either before engaging us. Nothing on this page is published that you cannot check from the outside.
Proof & Verification FAQs
Direct answers about how TCSA's numbers are produced — and how to check them yourself.
