Tax Planning & Preparation
Federal and California filings for corporations, partnerships, S-Corps and LLCs, planned across the year, not assembled in April.
Tax planning services
CPA, Governance, Cybersecurity and Finance Technology Services
Seventeen service lines across four pillars, from tax filings to SOC 2 attestation to AI-enabled continuous audit.
The practice is organised in four tiers. The lower tiers are the licensed foundation, tax, accounting and attestation. The upper tiers are where it is distinctive.
Governance and risk, security and privacy compliance, and the finance technology that produces the numbers in the first place.
They are listed in that order deliberately. Most engagements begin in one tier and reveal that the actual problem sits in another, a company asking for SOC 2 readiness that turns out to need its access management fixed first, or a company asking for close acceleration that needs its chart of accounts rebuilt before automation is worth attempting. Being able to move across the tiers without changing firms is the point of the structure.
Financial & CPA Services
The licensed CPA foundation: tax, accounting, financial leadership, and the attestation work only a CPA firm can sign.
Accounting, Bookkeeping & Outsourced CFO
A close that finishes on time and reporting a board can rely on, from ledger design through to fractional CFO support.
Accounting & CFO servicesAudit & Attestation
Audits, reviews, compilations, agreed-upon procedures and benefit plan audits, work that only a licensed CPA firm can issue.
Audit & attestationSOX 404 Compliance
Scoping, control design, testing and remediation for Section 404, including the first-year programmes that decide whether year two is manageable.
SOX 404 supportPayroll & Sales/Use Tax
The filings that accrue penalties quietly, payroll withholding, multi-state registration, and sales tax for online sellers.
Payroll & sales taxGovernance, Risk & Transaction Advisory
Board-level governance design, risk and control frameworks, IT general controls, and the diligence work that decides whether a deal is priced correctly.
Corporate Governance Advisory
Governance frameworks, board and committee structure, delegation of authority and the reporting a board needs to oversee management credibly.
Governance advisoryEnterprise Risk & Internal Controls
Where the business can fail, whether the control that should catch it works, and what to fix first.
Risk & controlsIT Audit & ITGC
Access, change and operations controls tested by someone who can read both an access listing and a general ledger.
IT audit & ITGCTransaction Advisory & Due Diligence
Quality of earnings, working capital, and the IT and privacy exposure that now decides deal terms as often as the numbers do.
Deal advisoryCybersecurity, Cloud & Data Privacy Compliance
SOC 2, cybersecurity risk, cloud platform compliance and privacy law, assessed and attested by one licensed firm rather than split across two vendors.
SOC 1 & SOC 2 Readiness
Readiness, remediation and the attestation itself, held by one licensed firm instead of split between a consultancy and a remote auditor.
SOC 2 servicesCybersecurity Risk Assessment
NIST, ISO 27001, PCI DSS and CMMC assessment, with findings expressed as business exposure rather than a severity count.
Security assessmentCloud Security Compliance
Architecture review, IAM and configuration assessment, and FedRAMP or FISMA readiness across the three major cloud platforms.
Cloud securityData Privacy (CCPA, GDPR, HIPAA)
Data mapping, consumer rights processes, vendor terms and privacy programme design across California, EU and health-sector requirements.
Privacy complianceTechnology & Engineering Deployment
The build tier: AI-enabled continuous audit, ERP programmes, robotic process automation and FinOps, specified and deployed, not just recommended.
AI & Agentic Audit Automation
Full-population testing, anomaly detection and continuous controls monitoring, built so an auditor will actually rely on the output.
AI audit automationERP Advisory & Implementation
Specification, selection, data reconciliation and cutover assurance, from someone who has closed books on an ERP and audited the output of many more.
ERP advisoryRPA & Finance Automation
Reconciliations, close tasks and repetitive processing automated, with change control and evidence built in from the start.
Finance automationCloud Cost Optimization & FinOps
Tagging, allocation, commitment strategy and unit economics, turning an unforecastable invoice into a managed cost line.
FinOps & cloud costEvery service, across the full service area
On site across Ventura County; on site and remote across Los Angeles County.
Choosing an engagement: common questions
Not answered here? Ask Javed directly
How do I work out which of these services I need?
Describe the problem rather than picking a service. "Our customer is demanding a SOC 2 report" or "we got a payroll notice from the EDD" identifies the engagement faster than reading four pillar pages, because most triggers map to one obvious starting point and one or two things that turn out to matter later.
Can one engagement cover more than one of these services?
Usually, and that is the point of holding the CPA licence alongside CISA, CISM, CDPSE and CCSE. A SOX programme needs ITGC work. A SOC 2 needs both the readiness and the attestation. A transaction needs the numbers tested and the IT and privacy exposure assessed. Splitting those across vendors is what creates the handoff the client ends up managing.
Do you take one-off projects, or only ongoing work?
Both. Assessments, readiness reviews, diligence and attestation engagements are finite by nature. Accounting, close support and tax are continuing. A one-off assessment does not commit you to anything ongoing, and it is often the right way to find out whether ongoing support is needed at all.
What does an engagement cost?
There are no published rates, because the honest answer depends on scope and the scope is what the first conversation establishes. What can be said in advance: the scoping conversation is not billed, the fee is agreed before work starts, and you will be told if the work you asked for is larger than the problem you have.
Will you tell me if I do not need the work?
Yes, and it happens regularly. A company convinced it needs a SOX programme sometimes needs three controls documented. A company asking for a full privacy programme sometimes needs a data inventory and nothing else that year. Declining work that is not needed costs one engagement and is the reason the next one arrives.
Organisations we have worked with
Three decades of audit, controls and finance leadership across banking, card, mortgage, insurance, staffing and semiconductor.
Get in touch
Describe the problem, not the service
Tell us what is happening and the right engagement usually identifies itself.
Have a deadline, or just a question?
Send the shape of it. The first call is diagnostic, not billed, and it regularly ends with a smaller engagement than the one you asked about.
Javed Peeran CPA
Request a consultation
Not sure which of these you actually need?
That is the most common starting point, and the diagnostic conversation that resolves it is not billed. It regularly concludes that a client needs less than they came for.
Schedule a Consultation
Or speak to Javed directly (310) 980-3958 Message on WhatsApp