Schellman
The largest CPA-firm-based cybersecurity assessor in the US. Unique in holding FedRAMP 3PAO, PCI QSA, HITRUST, ISO 27001, and SOC attestation authority simultaneously.
- Based in
- Tampa, United States
- Founded
- 2002
- Size
- 500+ staff
- Ownership
- Owned by Goldman Sachs Alternatives since 2026
- Certifications
- ISO/IEC 27001
About Schellman
Schellman provides IT compliance attestation and audit services. It helps organisations demonstrate security and compliance through independent examinations. The company serves cloud computing and data centres, financial services and fintech, healthcare, payment card processing, US government, and higher education and research laboratories. It also works with companies that need to meet various compliance mandates. Schellman offers a suite of services including SOC examinations, federal assessments, AI services, payment card assessments, healthcare assessments, ISO certifications, penetration testing, privacy assessments, cybersecurity assessments, crypto and digital trust, training, and sustainability. It is the first ISO 42001 ANAB accredited certification body and the top FedRAMP service provider. The company operates through practice leaders and specialists who tailor services to industry needs.
Ownership and deals
Companies owned by Goldman Sachs Alternatives lists both in the directory.
- Schellman acquired Connor ConsultingReport on Schellman buying Connor Consulting (opens in a new tab)
- Schellman acquired INSYTEReport on Schellman buying INSYTE (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.