Original Summary

compliance landed on me bc apparently CTO also means GRC now lol. 40-ish people, SOC 2 first and probably ISO after. looking at Vanta/Drata rn but every demo makes the automation sound nearly hands-off. for people running these day to day, what still ends up manual once the integrations are connected? API gaps, weird evidence, failed checks, whatever. that's what I care about.   submitted by   /u/AdFalse973adgucczfg8 [link]   [comments]

  • 情报分类：开源项目与落地
  • 分类依据：内容涉及项目实践、创业、副业或变现
  • 信息来源：Reddit · SaaS
  • 发布时间：2026/9/16 20:00:04