The Schellman Blog

As AI agents move into production and regulatory pressure grows, organizations face a widening gap between governance confidence and operational readiness.

Schellman, a leading provider of cybersecurity attestation and compliance services, announces that Sachin Bansal has joined the firm as Chief Operating Officer. Bansal leads global operations, global expansion, strategy, and transformation, partnering closely with Chief Executive Officer Avani Desai and the executive leadership team to support the firm’s next phase of growth.

Schellman, the nation's No. 1 FedRAMP Independent Assessor, breaks down the most significant restructuring of the federal cloud security program since its 2011 inception.

The most experienced Third Party Assessment Organization in the federal cloud security market reaches a program milestone more than a decade in the making

Desai joins a select cohort of entrepreneurial leaders committed to creating lasting impact beyond the boardroom

Investment Accelerates Schellman's Growth and Strengthens the Independent, Expert-Led Model Clients Count On to Navigate an Increasingly Complex Global Compliance Landscape

TAMPA, Fla. and SAN FRANCISCO, February 3, 2026 – Schellman, a leading provider of attestation and compliance services, today becomes the first authorized auditor of AIUC-1, the comprehensive security, safety, and reliability standard for AI agents, marking a significant milestone in AI compliance. As enterprises accelerate AI adoption and systems become more agentic, they face mounting challenges: security leaders confront novel attack vectors, legal teams navigate uncertain liability, and procurement processes slow under bespoke risk assessments. AIUC-1 addresses these challenges with a comprehensive, actionable standard specifically designed for AI agents.

The California Air Resources Board (CARB) continues to progress its climate disclosure laws, but the path forward remains unclear. Despite statutory deadlines that have been on the books since 2023, CARB has repeatedly shifted its own rulemaking timeline while still expecting companies to meet firm compliance dates.