Apologies, but when an "audit" firm lists its corporate headquarters at a mail drop box address, it tends to corroborate IGlow's posts rather than suggesting the audit is coming from a legitimate organization.
Bottom line, listing one's mailbox as a corporate office would suggest they are not dealing with a standup auditor. I'll let others be the judge.