Schellman Compliance, LLC logo

Schellman Compliance, LLC

Tampa, FL·Founded 2002·FedRAMP-recognized since 2012
High Impact
2002Year founded
2012FedRAMP-recognized since
211Products currently assessing
#1 of 48Rank by active volume

About Schellman Compliance, LLC

Schellman Compliance, LLC was one of the first authorized 3PAOs and has performed hundreds of FedRAMP assessments. Due to its status as an independent certification body for ISO 27001, Schellman is a Type A FedRAMP 3PAO and only performs assessment services, and no consulting services. Schellman stands as a leading global provider of attestation, compliance, and certification services. Operating under two distinct entities per AICPA guidance, Schellman & Company, LLC (a top 50 CPA firm) and Schellman Compliance, LLC (a globally accredited compliance assessment firm), the organization offers a comprehensive range of services. These encompass operating as a CPA firm, an ISO Certification Body, a PCI Qualified Security Assessor Company, a HITRUST assessor, a FedRAMP and StateRAMP 3PAO, and being among the first CMMC Authorized C3PAOs. Many clients leverage Schellman's services to meet more than one compliance objective with a single vendor who can deliver integrated assessments for multiple frameworks.

With 211 active assessment engagements, this firm holds the #1 spot by current assessment volume — one of the busiest firms in the entire Marketplace.

Frameworks and adjacent accreditations

Beyond FedRAMP, the Marketplace export lists this firm as offering assessment or certification services for:

CMMC 3PAO (C3PAO)StateRAMP 3PAOSOC 1, 2, and 3 ExaminationsPCI DSSPCI SSFPCI P2PEISO 27001 (including ISO 27018/19 and 27701)ISO 22301ISO 20000ISO 9001HITRUSTHIPAANIST/FISMAPrivacy (GDPR, EuroPrivacy, CCPA, etc.)Cloud Security Alliance (CSA) STAR (Attestation and Certification)