Schellman vs A-LIGN: ISO 27001 compared
Two Tampa-based ANAB-accredited CBs that US tech companies shortlist constantly — Schellman for regulated complexity, A-LIGN for tech-enabled volume.
Side by side
| Fact | Schellman | A-LIGN |
|---|---|---|
| Headquarters | Tampa, Florida | Tampa, Florida |
| Founded | 2002 | 2009 |
| Firm type | ANAB-accredited ISO 27001 certification body; CPA and assessment firm | ANAB-accredited ISO 27001 certification body |
| Audit-fee planning range | $15K–$50K (published planning range, Sept 2026) | $15K–$50K (published planning range, Sept 2026) |
| Typical certification window | 4–9 mo | 4–9 mo |
| Frameworks (per firm) | ISO 27001, ISO 27701, SOC 1, SOC 2, PCI DSS, HITRUST, FedRAMP, CMMC | ISO 27001, SOC 1, SOC 2, PCI DSS, HITRUST, FedRAMP, CMMC |
Choose Schellman if…
You want independence-first positioning and senior teams for regulated, multi-framework programs (SOC 2, PCI, FedRAMP, CMMC). Full Schellman profile →
Choose A-LIGN if…
You want a technology-enabled, high-volume CB with platform support for evidence collection. Full A-LIGN profile →
Get both quotes, compare apples to apples
One brief sends your scope to matched CBs — including these two — and the quotes come back comparable.
How it works: tell us once (4 questions, 2 min) → we match licensed auditors to your size and scope → they send scoped quotes directly. Free, no obligation.
← All certification bodies · Best picks by use case · How to choose a certification body