Schellman
Schellman is a top-50 CPA firm focused on IT audit and compliance. It states that it is 100% independent with no consulting agenda, does not charge by the hour, and never uses interns or contractors on engagements.
At a glance
| Headquarters | Tampa, Florida |
|---|---|
| Founded | 2002 |
| Firm type | Top-50 CPA firm (Schellman & Company, LLC) + accredited assessment firm |
| Type 2 planning range | $20K–$100K (published planning range (Sept 2026)) |
| Typical fieldwork window | 3–12 wk |
| Frameworks (per firm) | SOC 1, SOC 2, ISO 27001, PCI DSS, FedRAMP, HITRUST, CMMC, ISO 42001 |
| Official website | schellman.com |
Best fit
Regulated or enterprise-adjacent companies that value auditor independence and senior teams.
Before you engage
A premium positioning — smaller startups should compare quotes against boutique firms.
Questions about Schellman
Is Schellman a licensed firm that can issue SOC 2 reports?
Schellman is listed here as a Top-50 CPA firm (Schellman & Company, LLC) + accredited assessment firm. SOC 2 reports must be issued by a licensed CPA firm under AICPA attestation standards — confirm the firm's current license status and which legal entity will sign your report before engaging.
What frameworks does Schellman support?
Per the firm's public materials: SOC 1, SOC 2, ISO 27001, PCI DSS, FedRAMP, HITRUST, CMMC, ISO 42001.
How do I get pricing from this firm?
Audit fees are scoped per engagement and not published by most firms. Use our quote request to get a scoped fee from Schellman and comparable firms.
Get a scoped quote
Audit fees depend on your size, scope, and readiness. Get comparable quotes from Schellman and similar firms.
Request quotesFree · No obligation · Takes 2 minutes
Compare with similar auditors
Zero Day CPA
Zero Day CPA is a Michigan-based boutique accounting firm focused on SOC 1, SOC 2, and HIPAA audits for B2B SaaS and service organ…
Thoropass
Thoropass pairs an auditor-led assurance practice with compliance technology. The SOC 2 report is issued by its licensed CPA entit…
Prescient Assurance
Prescient Assurance, founded in 2021, positions itself as the security-testing-led SOC 2 auditor for SaaS companies, pairing audit…
← All auditors · SOC 2 cost guide · How to choose an auditor