Updated:
Schellman & Company
Schellman & Company offers IT compliance and cybersecurity services to various sectors. The company provides services such as SOC audits, ISO certifications,...
Schellman & Company
Schellman & Company offers IT compliance and cybersecurity services to various sectors. The company provides services such as SOC audits, ISO certifications, and cybersecurity assessments. It serves clients including cloud service providers, financial institutions, and government agencies.
General information
Firm type
Asset Manager
Year founded
2002
Location
Region
North America
Country
United States
City
Tampa
Corporate office
Tampa, FL, United States
Principals
Avani Desai
CEO
Sector focus
Frequently asked questions
Who runs Schellman & Company?
Avani Desai serves as CEO, a role she has held since 2017. She joined the firm in 2013 and led the strategic pivot that narrowed the firm's focus exclusively to IT compliance and attestation services, shedding traditional CPA tax and audit practices.
What compliance frameworks does Schellman assess?
The firm's core assessment portfolio includes SOC 1, SOC 2, and SOC 3 examinations under AICPA standards; ISO 27001 certification; HITRUST CSF validation; PCI DSS assessments; and FedRAMP advisory services. This scope covers the primary frameworks enterprise buyers require from SaaS vendors.
Why does Schellman not perform advisory work alongside attestation?
The firm maintains a strict independence model by performing only attestation engagements. Under AICPA and PCAOB auditor independence rules, providing advisory or implementation services to an attestation client creates conflicts that can impair the objectivity of the assessment. This structure appeals to companies preparing for IPO or subject to audit committee oversight.
Does Schellman operate internationally or only in the United States?
Schellman's headquarters is in Tampa, Florida, with assessment personnel distributed across the United States. The firm primarily serves North American technology companies. No international office locations are publicly disclosed.
Profile maintained by Altss using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.
Need institutional-grade insight on asset managers?
Altss delivers:
Prefer a guided tour?
We’ll walk you through: