logoalt Hacker News

icedchaiyesterday at 4:26 PM1 replyview on HN

Avoid it for as long as you can. I worked at a startup that sold to enterprises. We had 6 employees. The CEO / sales was able to work around the SOC2 requirement every time.


Replies

lukaszkoreckiyesterday at 4:45 PM

My company had 6 employees, I was the CTO and I can't imagine getting SOC2 certified without using Vanta - that was back in their early access/beta days.

I had no choice - we had so many security assessments spreadsheets sent by potential customers, that getting SOC2 saved us time in the long run.

show 1 reply