Updated:
Schellman & Company
Schellman & Company offers IT compliance and cybersecurity services to various sectors. The company provides services such as SOC audits, ISO certifications,...
Schellman & Company
Schellman & Company offers IT compliance and cybersecurity services to various sectors. The company provides services such as SOC audits, ISO certifications, and cybersecurity assessments. It serves clients including cloud service providers, financial institutions, and government agencies.
General information
Firm type
Asset Manager
Year founded
2002
Location
Region
North America
Country
United States
City
Tampa
Corporate office
Tampa, FL, United States
Principals
Avani Desai
CEO
Sector focus
Frequently asked questions
How does Schellman & Company source its deal flow?
Schellman does not source investment deal flow. The firm generates revenue through professional services engagements — recurring compliance assessments, certifications, and attestation examinations for technology companies. Clients typically engage Schellman directly or through procurement-driven vendor risk management processes at enterprise buyers.
Who runs Schellman & Company?
Avani Desai serves as CEO, a role she has held since 2017. She joined the firm in 2013 and led the strategic pivot that narrowed the firm's focus exclusively to IT compliance and attestation services, shedding traditional CPA tax and audit practices.
Is Schellman a family office or an investment firm?
Schellman & Company is neither a family office nor an investment manager. The firm is a professional services company structured as a CPA firm that performs cybersecurity and compliance attestation. It does not manage outside capital or invest in operating companies. In May 2025, private equity firm Lightyear Capital acquired a majority stake.
What compliance frameworks does Schellman assess?
The firm's core assessment portfolio includes SOC 1, SOC 2, and SOC 3 examinations under AICPA standards; ISO 27001 certification; HITRUST CSF validation; PCI DSS assessments; and FedRAMP advisory services. This scope covers the primary frameworks enterprise buyers require from SaaS vendors.
Why does Schellman not perform advisory work alongside attestation?
The firm maintains a strict independence model by performing only attestation engagements. Under AICPA and PCAOB auditor independence rules, providing advisory or implementation services to an attestation client creates conflicts that can impair the objectivity of the assessment. This structure appeals to companies preparing for IPO or subject to audit committee oversight.
What was the significance of the Lightyear Capital investment?
The May 2025 majority investment from Lightyear Capital represented the first external capital in Schellman's 23-year history. It signaled a transition from a founder-led partnership model toward an institutionalized ownership structure, intended to fund service expansion and geographic growth.
Does Schellman operate internationally or only in the United States?
Schellman's headquarters is in Tampa, Florida, with assessment personnel distributed across the United States. The firm primarily serves North American technology companies. No international office locations are publicly disclosed.
Profile maintained by Altss using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.
Need institutional-grade insight on asset managers?
Altss delivers:
Prefer a guided tour?
We’ll walk you through: