Contact Us

Services

Suite of Services

Schellman began as a SOC audit firm 20+ years ago. While we still issue more than 2,000 SOC reports each year, our clients’ trust has propelled our expansion. Today, we offer nearly 60 types of audits and assessments.

Download a PDF of All Services

Learning Center

Our Technology

About Us

About Us

Schellman is the only Top 50 CPA firm focused exclusively on IT Compliance and Cybersecurity, and we’re the #1 service provider for FedRAMP Assessments. Our industry-leading NPS scores, client retention, and employee retention mean our clients experience greater continuity and quality. We also understand how distracting unplanned work can be, so we focus on client-centric KPIs to help keep your business moving uninterrupted.

Download the Story of '24

ISO Certificate Directory

Services

Services

View All Services

SOC & Attestations

SOC & Attestations

SOC 1 / SSAE 18 Examination

SOC 2 Examination

SOC 3 Examination

SOC for Supply Chain

SOC for Cybersecurity

SOC Essentials for Early-Stage Companies

C5 Attestation

CSA STAR Programs

Payment Card Assessments

Payment Card Assessments

PCI DSS Validation

PCI SSF

PCI P2PE Validation

PCI PIN Assessments

PCI 3DS Compliance

ISO Certifications

ISO Certifications

ISO 27001

ISO 42001

ISO 27701

ISO 9001

ISO 22301

ISO-20000-1

ISO 14001

ISO 45001

ISO 50001

Privacy Assessments

Privacy Assessments

Global CBPR & PRP Certification

GDPR Assessment

International Privacy Assessments

US State Privacy Assessments

Microsoft SSPA/DPR Assessment

FERPA Assessment

EU Cloud Code of Conduct

Federal Assessments

Federal Assessments

FedRAMP®

CMMC / NIST SP 800-171

FISMA/NIST

ITAR

CJIS

IRAP

FTC Consent Decrees

DoD IL6

Healthcare Assessments

Healthcare Assessments

HITRUST Certification

HIPAA Compliance

HIPAA Express

EPCS-DEA Audits

Health Data Host (HDS) Certification

Penetration Testing

Penetration Testing

Application

Network

Mobile

Red Teaming

Social Engineering

Cloud

Physical

Hardware and IoT

Advanced Series

AI Red Teaming

Cybersecurity Assessments

Cybersecurity Assessments

Cloud Configuration Assessments

Ransomware Assessments

NIST Cybersecurity Framework Assessments

Schellman Software Security Assessment (S³A)

TISAX®

SWIFT Customer Security Programme

Internal Audit Co-Sourcing

Crypto and Digital Trust

Crypto and Digital Trust

Schellman Training

Schellman Training

Sustainability Services

Sustainability Services

AI Services

Learning Center

Our Technology

About Us

About Us

Leadership Team

Leadership Team

Corporate Social Responsibility

Corporate Social Responsibility

Careers

Strategic Partnerships

Strategic Partnerships

ISO Certificate Directory

Global CBPR & PRP Certification

Cross-Border Privacy Rules (CBPR) & Privacy Rules for Processors (PRP)

Expedia, Inc.

Expedia's CBPR certification encompasses the personal information collected from individuals and processed in the role of a controller for Travel Platforms and Services for Expedia, Inc. (including the White Label Template sites and Expedia TAAP) and its wholly owned subsidiaries: Hotels.com LP (United States), Homeaway.com, Inc. (dba VRBO) (United States), Travelscape LLC (United States), HomeAway Emerging Markets Pte. Ltd (Singapore), EG Vacation Rentals Ltd (Ireland), Stayz Pty Ltd (Australia), and Bookabach Limited (New Zealand).

Expedia's PRP certification encompasses the personal information processed in the role of a processor during delivery of Rapid API services for partners for Expedia, Inc. (United States), Hotels.com LP (United States), Homeaway.com, Inc. (dba VRBO) (United States), Travelscape LLC (United States), and Expedia Group, Inc. (United States).

View Certificate

Schellman is an Accountability Agent for the Global CBPR and Global PRP Systems and has been an active member of the system since 2018. Schellman is accredited to perform certification activities for the CBPR as well as the PRP System.

Schellman monitors ongoing compliance with the minimum requirements via quarterly check-ins, annual recertifications, and any complaints received via the Compliance Inquiry/Complaints Form.

Companies that display the certification mark(s) are solely responsible for their own privacy practices and promptly notifying Schellman of any changes that may affect their CBPR/PRP certification.

GCBPR Cert Mark by Schellman

GPRP Cert Mark by Schellman

Schellman is an Accountability Agent for the Global CBPR and Global PRP Systems and has been an active member of the system since 2018. Schellman is accredited to perform certification activities for the CBPR as well as the PRP System.

Schellman monitors ongoing compliance with the minimum requirements via quarterly check-ins, annual recertifications, and any complaints received via the Compliance Inquiry/Complaints Form.

Companies that display the certification mark(s) are solely responsible for their own privacy practices and promptly notifying Schellman of any changes that may affect their CBPR/PRP certification.

Schellman Statistics

Schellman includes statistics on the types of complaints received and the outcomes of such complaints publicly accessible on this website. You can learn more on our Statistics and Case Notes page.

View Statistics

Certificate Directory

Check the certification status of our Global CBPR/PRP clients by using our Certificate Directory.

Certificate Directory

Complaints or Disputes

Schellman takes complaints against itself or its clients seriously. Complaints about Schellman should be submitted using this form.

Complete the Form

The Global CBPR System Certification Mark and Global PRP System Certification Mark™ are trademarks of the International Trade Administration/Office of Global Data Policy and Privacy, used with permission.