TL;DR: Our SOC 2 Journey
We got tired of endless security questionnaires, so we got SOC 2 certified to make things smoother for everyone.
The process:
Used Vanta to connect our services and fix compliance gaps
Wrote a ton of policies
Implemented zero-trust production access
Upgraded our tech stack (Nx, Infisical, monitoring, VPN, etc.)
Did penetration testing
Evaluated all vendors
Result: Passed SOC 2 Type I 🎉
... continue reading