What Schellman Compliance offers, and what it publishes
Schellman Compliance certifies organisations to ISO 42001, the AI management standard, and names four clients: StackAware, Wrike, Complete Discovery Source and Iron Mountain. Danny Manimbo leads the practice. It publishes its appeals, complaints and suspension processes and a public directory of certificates. It also lists US FedRAMP and CMMC assessor accreditations. Schellman has run SOC audits for more than 20 years.
Schellman Compliance does not publish a price, professional-indemnity insurance or how it uses AI. Its ISO pages answer a cost question only in a video. Its own site gives two versions of what ANAB accredits it for: one page includes ISO 42001 and 14001, another omits both. We found no ANAB certificate number to check it.
Schellman Compliance says ANAB accredits it in the US, UKAS in the UK for ISO 27001, COFRAC in France for HDS and SAC in Singapore for MTCS. Its policy page calls impartiality a core value and also lists its own Readiness Assessment, a gap check before certification. It publishes no rule stopping it certifying a client it has advised.
Strengths
- 20+ year track record as a SOC audit and IT-compliance assessment firm (over 2,000 SOC reports/year, ~60 audit/assessment types), giving institutional continuity uncommon among smaller certification bodies.
- Genuinely multi-jurisdictional accreditation footprint for a US-headquartered body: ANAB (US), UKAS (UK), COFRAC (France) and SAC (Singapore) across different ISO/management-system schemes, plus FedRAMP 3PAO and CMMC C3PAO federal accreditations.
- Published, standards-referenced certification governance (ISO/IEC 17021-1:2015 and 17065:2012): an independent impartiality committee, an appeals process, a complaints process, a suspension policy for non-compliant clients, and a public certificate/client directory for buyer verification.
- Names an individual AI/ISO practice leader (Danny Manimbo) and four named ISO 42001 client case studies, giving some named accountability for AI-management-system certification work rather than an anonymous team.
Things to check
- Two of its pages list different accredited standards. Ask for the current ISO 42001 accreditation document.
- No fee information is published on any ISO-certification page checked (overview, ISO 27001, 27701, 22301, 9001, or the ISO 42001/AI-governance page); a 'How much does an ISO certification cost?' FAQ heading exists but its answer is delivered only inside an embedded video, not as accessible text, leaving pricing quote-only.
- No published firewall between pre-certification consulting and the certification decision: the same policy page that calls impartiality a 'core value' also lists a 'Readiness Assessment' (gap/pre-assessment consulting) as one of the services Schellman itself offers 'to complete your ISO Certification', immediately beside the Certification Assessment, with no separate published statement barring Schellman from certifying a client it has provided readiness/gap consulting to.
- We could not read the Florida register. Ask for its company details and current status.
Common questions
Does Schellman publish its ISO certification fees?
No. No prices, rate card or worked example appear on its ISO pages. A 'How much does an ISO certification cost?' heading is answered only inside a video.
Is its ISO 42001 accreditation confirmed?
Not by us. One Schellman page says ANAB accredits it for ISO 42001; another page's impartiality statement leaves ISO 42001 out. We found no ANAB certificate number to settle which is current.
Is Schellman Compliance a licensed audit firm?
No. It says it is not a licensed CPA firm. Its sister company, Schellman & Company, LLC, holds Florida CPA licence AD62941 and is registered with the PCAOB in the US.
Can its company registration be checked?
Not by us. Florida's company register, Sunbiz, blocked our checks on 20 September 2026, so we could not confirm its registration number, status or registered agent.
Evidence for each Schellman Compliance score
Show our working
Notes behind each thing to check
- Two of its pages list different accredited standards. Ask for the current ISO 42001 accreditation document. (https://www.schellman.com/iso-business-policy includes ISO 42001; the impartiality section at https://www.schellman.com/services/iso-certifications omits it and ISO 14001. Both read 2026-10-13. This difference alone does not determine the current independent accreditation scope.)
- No fee information is published on any ISO-certification page checked (overview, ISO 27001, 27701, 22301, 9001, or the ISO 42001/AI-governance page); a 'How much does an ISO certification cost?' FAQ heading exists but its answer is delivered only inside an embedded video, not as accessible text, leaving pricing quote-only. (schellman.com/services/iso-certifications and schellman.com/services/ai-governance/iso-42001, checked 2026-09-20)
- No published firewall between pre-certification consulting and the certification decision: the same policy page that calls impartiality a 'core value' also lists a 'Readiness Assessment' (gap/pre-assessment consulting) as one of the services Schellman itself offers 'to complete your ISO Certification', immediately beside the Certification Assessment, with no separate published statement barring Schellman from certifying a client it has provided readiness/gap consulting to. (schellman.com/iso-business-policy, checked 2026-09-20)
- We could not read the Florida register. Ask for its company details and current status. (search.sunbiz.org, attempted 2026-09-20 via direct curl (HTTP 403) and Bright Data unblocker (2/2 attempts, no usable content))
| Criterion | Score | Evidence |
|---|---|---|
| Help when things go wrong | Published Appeals Process, Complaints process and Suspension Policy for non-compliant certified clients, backed by a public Certificate and Client Directory for verification (schellman.com/iso-business-policy, checked 2026-09-20). No disclosed complaint/appeal outcomes or statistics were found. | |
| Qualifications of the people who do the work | Schellman Compliance, LLC is explicitly not a licensed CPA firm (that licence sits with sister entity Schellman & Company, LLC); its ANAB accreditation scope is self-published and internally inconsistent across its own site (ISO 42001 included on the ISO Business Policy page, omitted on the general ISO-certifications overview page), and no independent ANAB schedule/certificate number was located to resolve which is current. Do not treat ISO 42001 scope as independently confirmed. | |
| What it publishes about fees | No prices, rate card or worked cost example found on any ISO-certification page checked; a costs FAQ heading exists but the answer is video-only, not published text (schellman.com/services/iso-certifications, checked 2026-09-20). | |
| Knowledge of your sector | Named AI/ISO practice leader (Danny Manimbo, 10 years with Schellman, 13 years in the field) plus four named ISO 42001 clients spanning SaaS, eDiscovery/legal and records management (StackAware, Wrike, Complete Discovery Source, Iron Mountain) (schellman.com/services/ai-governance/iso-42001, checked 2026-09-20). | |
| Independence from what it sells | A published impartiality statement and independent impartiality committee exist, but the same policy page lists Schellman's own 'Readiness Assessment' (pre-certification gap consulting) as a service offered 'to complete your ISO Certification' alongside the Certification Assessment itself, with no separate published statement barring Schellman from certifying a client it has advised (schellman.com/iso-business-policy, checked 2026-09-20). | |
| Who carries the risk if the advice is wrong | Published appeals/complaints/suspension processes and a requirement for a fully executed agreement before work begins show some standing-behind-the-work structure, but no professional-indemnity insurance disclosure or liability-cap/terms were found on any public page checked (schellman.com/iso-business-policy, checked 2026-09-20). |
Sources for Schellman Compliance
- Schellman's own 'ISO Business Policy' page states ANAB accreditation covering ISO/IEC 42001 (AI management systems), alongside ISO 27001, 27701, 20000-1, 9001, 14001 and 22301, plus UKAS (27001), COFRAC (HDS) and SAC (MTCS). (ANAB-accredited per this page for: ISO 42001, 27001, 27701, 20000-1, 9001, 14001, 22301) (schellman.com, checked 20 September 2026)
- Schellman's general ISO-certifications overview page states a narrower ANAB scope in its own 'Our Commitment to Impartiality' statement, omitting ISO 42001 and ISO 14001. (ANAB-accredited per this page for: ISO 27001, 27701, 20000-1, 9001, 22301 only (no 42001, no 14001)) (schellman.com, checked 20 September 2026)
- Schellman Compliance, LLC is the non-attest entity of Schellman's alternative practice structure and is explicitly stated not to be a licensed CPA firm; its sister entity Schellman & Company, LLC holds the CPA licence. (Schellman Compliance, LLC: not a licensed CPA firm. Schellman & Company, LLC: Florida CPA licence AD62941, PCAOB-registered.) (schellman.com, checked 20 September 2026)
- Schellman publishes a certification-governance policy describing an impartiality commitment, an independent impartiality committee, an Appeals Process, a Complaints process and a Suspension Policy, aligned to ISO/IEC 17021-1:2015 and 17065:2012. (Published impartiality committee, appeals process, complaints process, suspension policy, public certificate directory) (schellman.com, checked 20 September 2026)
- Schellman markets itself as 'the first ANAB-accredited Certification Body for ISO 42001' and names four client case studies for ISO 42001 certification work. (Named ISO 42001 clients: StackAware, Wrike, Complete Discovery Source, Iron Mountain) (schellman.com, checked 20 September 2026)
ANAB accreditation, ISO/IEC 27001, 27701, 20000-1, 9001, 22301 (confirmed on both of Schellman's own pages, checked 2026-09-20) ANAB accreditation, ISO/IEC 42001 and 14001 (stated on Schellman's ISO Business Policy page only; omitted from its general ISO-certifications page, both checked 2026-09-20) UKAS accreditation, ISO/IEC 27001 COFRAC accreditation, HDS (health-data hosting, France) SAC accreditation, MTCS (Multi-Tier Cloud Security, Singapore) FedRAMP Third Party Assessment Organization (3PAO) CMMC Certified Third-Party Assessment Organization (C3PAO)
Seeking ISO 42001 certificationRegulated sectors
Where this firm appears
- Can the firm that prepares you also certify you?
- Your sector adds its own rules to UK data protection law
- Compare providers
If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
This is an independent editorial guide, not legal advice.