Helping clients build trust with their customers
Schellman is a leading provider of attestation and compliance services, operating as a top 100 CPA firm specializing in IT audit and cybersecurity. They perform SOC examinations, ISO certifications, FedRAMP assessments, HITRUST, PCI DSS validations, and more for global clients. Renowned for practical expertise and independence, they enable multiple compliance goals through unified assessments.
Peer review: AICPA peer-reviewed (pass). Firm tier: Mid-tier firm.
Services: SOC 1, SOC 2 Type I, SOC 2 Type II, ISO 27001, HIPAA, PCI DSS, HITRUST, FedRAMP, CMMC, GDPR.
Offices: Tampa FL; Columbus OH; Atlanta GA.
Industries served: SaaS, Technology, Fintech, Healthcare, Managed services.
Schellman audits SOC 1, SOC 2 (Type 1 and Type 2), SOC 3, SOC for Supply Chain, ISO 27001, ISO 42001, ISO 27701, PCI DSS, FedRAMP, HITRUST, HIPAA, CMMC, GDPR, and many more. The firm holds accreditations as an AICPA-licensed CPA, ISO Certification Body, PCI QSA, FedRAMP 3PAO, HITRUST CSF Assessor, and CMMC C3PAO.
Schellman does not publish SOC 2 prices; quotes are scoped. Its site describes an outcome-based, fixed-fee pricing model with no hidden fees. For context, Vendr's buyer data shows a median Schellman contract of $36,135 per year (low $17,833, high $67,867); those are observed contracts and may include services beyond SOC 2. Checked 2026-11-04.
Schellman & Company, LLC is a licensed CPA firm. The AICPA peer review public file lists it with a Pass rating for its review covering April 1, 2023 to March 31, 2024 (accepted October 15, 2024). Checked 2026-11-04.
Schellman typically delivers draft SOC 2 reports within 2–3 weeks of completing fieldwork, per the auditor record. The full engagement including an observation period (the AICPA sets no fixed minimum; 3 months or more is common) runs approximately 5–7 months for mid-sized SaaS clients.
Schellman's strategic partnerships page shows Drata, Secureframe and Anecdotes. Secureframe joined Schellman's Strategic Alliance Program in June 2024. Vanta lists Schellman in its audit partner finder, Drata lists it in its Audit Alliance directory (Advanced), and TrustCloud's community SOC 2 audit-partner list names it. We found no Hyperproof partnership. Checked 2026-11-04.
Schellman's most frequently compared alternatives are A-LIGN, BDO USA, and Moss Adams (now part of Baker Tilly). A-LIGN is Schellman's closest direct competitor as a compliance-specialist firm; BDO USA and Moss Adams are broader national accounting firms.