Asset Manager

Updated:

Schellman & Company

Schellman & Company offers IT compliance and cybersecurity services to various sectors. The company provides services such as SOC audits, ISO certifications,...

Schellman & Company

Schellman & Company offers IT compliance and cybersecurity services to various sectors. The company provides services such as SOC audits, ISO certifications, and cybersecurity assessments. It serves clients including cloud service providers, financial institutions, and government agencies.

General information

Firm type

Asset Manager

Year founded

2002

Location

Region

North America

Country

United States

City

Tampa

Corporate office

Tampa, FL, United States

Principals

Avani Desai

CEO

Sector focus

CybersecurityEnterprise Software

Frequently asked questions

How does Schellman & Company source its deal flow?

Schellman does not source investment deal flow. The firm generates revenue through professional services engagements — recurring compliance assessments, certifications, and attestation examinations for technology companies. Clients typically engage Schellman directly or through procurement-driven vendor risk management processes at enterprise buyers.

Who runs Schellman & Company?

Avani Desai serves as CEO, a role she has held since 2017. She joined the firm in 2013 and led the strategic pivot that narrowed the firm's focus exclusively to IT compliance and attestation services, shedding traditional CPA tax and audit practices.

Is Schellman a family office or an investment firm?

Schellman & Company is neither a family office nor an investment manager. The firm is a professional services company structured as a CPA firm that performs cybersecurity and compliance attestation. It does not manage outside capital or invest in operating companies. In May 2025, private equity firm Lightyear Capital acquired a majority stake.

What compliance frameworks does Schellman assess?

The firm's core assessment portfolio includes SOC 1, SOC 2, and SOC 3 examinations under AICPA standards; ISO 27001 certification; HITRUST CSF validation; PCI DSS assessments; and FedRAMP advisory services. This scope covers the primary frameworks enterprise buyers require from SaaS vendors.

Why does Schellman not perform advisory work alongside attestation?

The firm maintains a strict independence model by performing only attestation engagements. Under AICPA and PCAOB auditor independence rules, providing advisory or implementation services to an attestation client creates conflicts that can impair the objectivity of the assessment. This structure appeals to companies preparing for IPO or subject to audit committee oversight.

What was the significance of the Lightyear Capital investment?

The May 2025 majority investment from Lightyear Capital represented the first external capital in Schellman's 23-year history. It signaled a transition from a founder-led partnership model toward an institutionalized ownership structure, intended to fund service expansion and geographic growth.

Does Schellman operate internationally or only in the United States?

Schellman's headquarters is in Tampa, Florida, with assessment personnel distributed across the United States. The firm primarily serves North American technology companies. No international office locations are publicly disclosed.

Profile maintained by using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.

Need institutional-grade insight on asset managers?

Altss delivers:

Principals with verified direct contactsAllocation history by asset classOSINT-derived deal signals
Book a demo

Prefer a guided tour?

We’ll walk you through:

Interactive funding timelinesCustom mandate & allocation filters
Book a demo

More Tampa Asset Manager profiles