As an incident management tool, getting certified was a thing we knew we needed early. Gotta hand it to Chris (one of our founders) who came from being Directo

As an incident management tool, getting certified was a thing we knew we needed early. Gotta hand it to Chris (one of our founders) who came from being Director of Platform at Monzo (a UK neobank) and had spent years battling auditors, and knew exactly how to play it. Kinda hammers home the point of my article... but about three months into our company life, we were SOC 2 certified, and it didn't feel like much effort at all. In case anyone is looking for actionable advice, we used Vanta to help us through the process. If you're funded, I think it's well worth the money.