flippy_flops
Joined 6 years ago
Joined 6 years ago
First of all, you absolutely can do it as a solo entrepreneur - I just completed SOC 2 for the second time - this one being solo. Yes you have to be creative with how you setup checks and balances but it’s not impossible.
Also, SOC 2 Type 2 is an auditor verifying that you’re actually carrying out the processes that you claimed to do in Type 1. So how do you start? You start with Type 1.
I doubt you could get it under $20k but that’s the ballpark. Personally I’d recommend Vanta which will hold your hand through at least half the process. And Vanta support will recommend auditors who typically cut their rate in half because Vanta does so much of the work.
Is it worth it? No way I could answer that for you. Personally I’d say half of SOC 2 is kinda bull crap and half of it is really good healthy processes. It’s definitely a commitment to get through the first audit, but after that it’s more like a 1-2 weeks of work every year.
Any decent auditor will understand you’re new to the process and will coach you through it. Their goal is for you to have a good audit, so they will literally tell you what needs to be done ahead of time.
I feel weird evangelizing it like this cause I’m not like a big fan, but we absolutely have clients that wouldn’t be customers if we didn’t have SOC 2. Yeah, it can be a warm and fuzzy for it groups, but that’s sales, right? My experience is once you have SOC 2 type 2, the IT approval process is far more streamlined.
Not saying you should or shouldn’t, but don’t dismiss it.
Personally, I've got some fatigue from most AI solutions being less than half baked. I'd love to see a long form video of letting frigade loose on something like Survey Monkey or whatever. Like... what does indexing look like? Does it produce artifacts? Can I see what users are asking? etc
I say this as a massive Apple fanboy. AI was heavily advertised as a selling point of iPhone 15 Pro and is completely MIA 6 months later. It’s a major letdown. It’s not the end of the world, but let’s just call it what it is.
For those saying Apple doesn’t release imperfect products, may I introduce to you Siri? It was average when they bought it and it’s become a punch line.
And there are so many uses of AI that don’t have to be at the risk level of, “Oops, AI left grandma at LeGuardia.” Apple should go back to its roots and provide high quality LLM/MCP and other API sdks to developers and let them go nuts. Then just clone or buy the apps that work like they always do.
But it’s so dang hard to install a custom ringtone. I thought someday Apple would provide an api, but nope.