Insights
Research and case studies on getting early-stage software companies ready for SOC 2, written in plain language for founders and engineers.
Practical answers to the questions founders ask
First articles are on the way
We are writing practical guides for founders and engineers working toward their first SOC 2 audit. Topics in progress:
- SOC 2 Type 1 or Type 2: which one your first enterprise customer actually wants
- What a SOC 2 readiness assessment covers, step by step
- You bought Vanta or Drata. Here is the work that is still left
- A realistic SOC 2 timeline for a 10 to 30 person startup
- The failing tests auditors ask about first
Real engagements, start to finish
Case studies publish after engagements finish
Each case study describes a real readiness engagement: the starting point, what we found, and what changed. We publish one only with the client's written approval, and anonymize details when they ask. The first will appear here once our founding engagements wrap up.
Get new articles by email
One email when something new is published. No newsletter filler, and you can unsubscribe at any time.
Prefer a feed reader? Subscribe to the RSS feed.
Have a topic you want covered?
If there is a SOC 2 question your team keeps running into, tell us. The most common questions become articles.
Email hello@hartgateadvisory.com with "Article idea" in the subject line.