Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

SOC 2 compliance has been a second job for too long. Procure the tools. Wire the integrations. Chase the evidence. File the ticket. Wait. Follow up. Audit anyway. Today, that changes. Introducing Rippling Automated Compliance for SOC 2: the first compliance solution built directly into the platform that already... show more

The Hacker News

1,549,769 subscribers

13,082 Aufrufe • vor 4 Monaten •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

As a founder, Emma Ryan Lawler felt like SOC 2 was a major distraction from building. But when she started selling to enterprise logos, it became something that was impossible to ignore. Now, as Product Lead at Rippling, she channeled her first-hand experience of getting SOC 2 compliant to rethink how all automated compliance frameworks are run. It started with a retro. Every other SOC 2 vendor works the same way: Detect a problem Alert your team Fix it...somewhere else The problem with this checklist is that "somewhere else" requires dozens of additional integrations. Because these vendors are just reporting layers on top of your stack. Rippling is your stack. Which means most of your compliance evidence is collected before you start AND when there's a gap in compliance, Rippling fixes it. Unencrypted device --> encrypt it. Wrong app access --> de-provision automatically Incomplete security training --> gate system access until its done. Because compliance really isn't about the report. It's about operating your company securely -- and proving it without a yearly fire drill. Emma shares more about how her own founder journey influenced building Rippling's powerful new automated compliance product, available today for SOC 2 Type 1 and 2. 🎙️ Emma Ryan Lawler, Product Lead, Rippling on Fondo.com START Full ep:

As a founder, Emma Ryan Lawler felt like SOC 2 was a major distraction from building. But when she started selling to enterprise logos, it became something that was impossible to ignore. Now, as Product Lead at Rippling, she channeled her first-hand experience of getting SOC 2 compliant to rethink how all automated compliance frameworks are run. It started with a retro. Every other SOC 2 vendor works the same way: Detect a problem Alert your team Fix it...somewhere else The problem with this checklist is that "somewhere else" requires dozens of additional integrations. Because these vendors are just reporting layers on top of your stack. Rippling is your stack. Which means most of your compliance evidence is collected before you start AND when there's a gap in compliance, Rippling fixes it. Unencrypted device --> encrypt it. Wrong app access --> de-provision automatically Incomplete security training --> gate system access until its done. Because compliance really isn't about the report. It's about operating your company securely -- and proving it without a yearly fire drill. Emma shares more about how her own founder journey influenced building Rippling's powerful new automated compliance product, available today for SOC 2 Type 1 and 2. 🎙️ Emma Ryan Lawler, Product Lead, Rippling on Fondo.com START Full ep:

David J Phillips

15,649 Aufrufe • vor 2 Monaten

Rippling does Automated Compliance now and the product is SO GOOD that I sat in front of a camera for 2 hours to talk about it. If you’re running your startup on Rippling, you already use them to manage the stuff that matters for SOC 2: employees, devices, access, policies, onboarding, offboarding. It's kind of a no-brainer.

Rippling does Automated Compliance now and the product is SO GOOD that I sat in front of a camera for 2 hours to talk about it. If you’re running your startup on Rippling, you already use them to manage the stuff that matters for SOC 2: employees, devices, access, policies, onboarding, offboarding. It's kind of a no-brainer.

Nikolas Huebecker

1,643,296 Aufrufe • vor 5 Monaten

Enterprise prospect asked for your SOC 2 report? That's when the compliance scramble usually begins. A founder I know built to make that process a lot easier. → AI-generated policies tailored to your actual tech stack → Track controls instead of juggling spreadsheets → Collect evidence automatically across your stack → Get SOC 2 & ISO 27001 ready without hiring consultants The best part? AuditBadger passed its own SOC 2 Type II audit using the product itself. No sales calls. No per-user pricing. Just $250/month. If you're selling to enterprise customers, it's worth a look.

Enterprise prospect asked for your SOC 2 report? That's when the compliance scramble usually begins. A founder I know built to make that process a lot easier. → AI-generated policies tailored to your actual tech stack → Track controls instead of juggling spreadsheets → Collect evidence automatically across your stack → Get SOC 2 & ISO 27001 ready without hiring consultants The best part? AuditBadger passed its own SOC 2 Type II audit using the product itself. No sales calls. No per-user pricing. Just $250/month. If you're selling to enterprise customers, it's worth a look.

Rohit

27,958 Aufrufe • vor 2 Monaten

Today, we launched Rippling Automated Compliance, starting with SOC 2. We have a unique advantage here: we aren't telling you how to fix your stack, because we ARE your stack. device management, identity and access management, HR, performance management...

Today, we launched Rippling Automated Compliance, starting with SOC 2. We have a unique advantage here: we aren't telling you how to fix your stack, because we ARE your stack. device management, identity and access management, HR, performance management...

Matt MacInnis

4,276,942 Aufrufe • vor 5 Monaten

I wake up at 3AM to touch my SOC 2 report. Not from fear. From compliance consciousness. My wife Charlene moved to the guest bedroom in 2019. She said it was the laminated ISO certificates on my pillow. Most founders keep their phone nearby for investor calls. I keep audit evidence within arm’s reach. The regulator does not sleep. Neither should your documentation.

I wake up at 3AM to touch my SOC 2 report. Not from fear. From compliance consciousness. My wife Charlene moved to the guest bedroom in 2019. She said it was the laminated ISO certificates on my pillow. Most founders keep their phone nearby for investor calls. I keep audit evidence within arm’s reach. The regulator does not sleep. Neither should your documentation.

Henrick Johansson

14,422 Aufrufe • vor 5 Monaten

Startups lose enterprise deals for a pretty boring reason: The product was ready. The compliance wasn't. By the time a buyer asks for SOC 2, you're months behind. The founders who prepare early close in weeks instead. Vanta automates this, SOC 2, ISO 27001, HIPAA + 35 more frameworks, monitored continuously. 16,000+ companies use it, including Ramp and Cursor. Build it before you need it. Get audit-ready at

Startups lose enterprise deals for a pretty boring reason: The product was ready. The compliance wasn't. By the time a buyer asks for SOC 2, you're months behind. The founders who prepare early close in weeks instead. Vanta automates this, SOC 2, ISO 27001, HIPAA + 35 more frameworks, monitored continuously. 16,000+ companies use it, including Ramp and Cursor. Build it before you need it. Get audit-ready at

Sufyan Maan, M.Eng

21,388 Aufrufe • vor 2 Monaten

🚨JUST IN: AAVE LABS ACHIEVES ENTERPRISE-GRADE SOC 2 TYPE II COMPLIANCE Aave Labs has officially attained SOC 2 Type II attestation, meeting rigorous global standards for security, availability, and confidentiality. This successful audit confirms that the protocol’s internal development and operational workflows meet the highest enterprise-level requirements. By securing this certification, the decentralized lending giant is establishing itself as a verified infrastructure provider for regulated financial entities.

🚨JUST IN: AAVE LABS ACHIEVES ENTERPRISE-GRADE SOC 2 TYPE II COMPLIANCE Aave Labs has officially attained SOC 2 Type II attestation, meeting rigorous global standards for security, availability, and confidentiality. This successful audit confirms that the protocol’s internal development and operational workflows meet the highest enterprise-level requirements. By securing this certification, the decentralized lending giant is establishing itself as a verified infrastructure provider for regulated financial entities.

BSCN

31,448 Aufrufe • vor 5 Monaten

99% of founders are building companies wrong. This is why, after 3 years of development and 14 months securing approval from the European Commission for Educational Content Compliance... I'm pleased to announce my MasterClass: "The Art of Compliance" In this class I will teach you: - Why the cookie consent banner isn't blocking your product—it IS your entire product - Why I rejected Stripe at pre-seed for having ZERO certifications (the Collison brothers personally called me, I hung up) - Why I wake at 3am to physically touch my SOC 2 report before returning to sleep - Why you must hire a Chief Compliance Officer on DAY ONE—before your first engineer, before your first line of code Stay tuned. Access details pending approval from 11 European data protection authorities.

99% of founders are building companies wrong. This is why, after 3 years of development and 14 months securing approval from the European Commission for Educational Content Compliance... I'm pleased to announce my MasterClass: "The Art of Compliance" In this class I will teach you: - Why the cookie consent banner isn't blocking your product—it IS your entire product - Why I rejected Stripe at pre-seed for having ZERO certifications (the Collison brothers personally called me, I hung up) - Why I wake at 3am to physically touch my SOC 2 report before returning to sleep - Why you must hire a Chief Compliance Officer on DAY ONE—before your first engineer, before your first line of code Stay tuned. Access details pending approval from 11 European data protection authorities.

Henrick Johansson

265,879 Aufrufe • vor 9 Monaten

🚨 EXCITING News! Typeless is now officially HIPAA compliant! 🎉 🔒 Privacy isn’t just a feature for #Typeless; it’s their foundation. With zero data retention in the cloud, no AI training on user data, and history stored purely on-device, Typeless is setting the highest standard for data security. Why does HIPAA (Health Insurance Portability and Accountability Act) compliance matter? — It means Typeless has passed one of the strictest data protection standards in the U.S., ensuring that they handle protected health information (PHI) with the highest standards of privacy and security required in the healthcare industry. And this is just the beginning! They are also working towards SOC 2, ISO 27001, and GDPR compliance. 🔗 Visit to learn more about their commitment to privacy and security at their Trust Center. Watch as I used Typeless ask anything feature to enquire everything about HIPAA compliance. 👇

🚨 EXCITING News! Typeless is now officially HIPAA compliant! 🎉 🔒 Privacy isn’t just a feature for #Typeless; it’s their foundation. With zero data retention in the cloud, no AI training on user data, and history stored purely on-device, Typeless is setting the highest standard for data security. Why does HIPAA (Health Insurance Portability and Accountability Act) compliance matter? — It means Typeless has passed one of the strictest data protection standards in the U.S., ensuring that they handle protected health information (PHI) with the highest standards of privacy and security required in the healthcare industry. And this is just the beginning! They are also working towards SOC 2, ISO 27001, and GDPR compliance. 🔗 Visit to learn more about their commitment to privacy and security at their Trust Center. Watch as I used Typeless ask anything feature to enquire everything about HIPAA compliance. 👇

Wesley

227,596 Aufrufe • vor 6 Monaten

🚨 The Ministry of Defence cannot prove £6 BILLION of asset’s exist… …because the accounting records don’t exist. Those are not my words. They come directly from the National Audit Office. This is now the 16th year in a row the MoD has failed its audit. It’s been unable to pass an audit ever since it was required to meet the same international financial reporting standards expected of any multi-billion-pound organisation. So step back and look at the pattern: ❌ MoD failed audit for 16 years ❌ DWP failed audit for 37 years ❌ HMRC failed audit for 20+ years ❌ MoD can’t provide evidence for £6bn ❌ Cabinet Office can’t provide evidence for £7bn The National Audit Office is literally publishing report after report saying tens of billions cannot be properly accounted for and that fraud and error are material. And nothing happens. Instead, the same institutions tell you there isn’t enough money and your taxes need to go up.

🚨 The Ministry of Defence cannot prove £6 BILLION of asset’s exist… …because the accounting records don’t exist. Those are not my words. They come directly from the National Audit Office. This is now the 16th year in a row the MoD has failed its audit. It’s been unable to pass an audit ever since it was required to meet the same international financial reporting standards expected of any multi-billion-pound organisation. So step back and look at the pattern: ❌ MoD failed audit for 16 years ❌ DWP failed audit for 37 years ❌ HMRC failed audit for 20+ years ❌ MoD can’t provide evidence for £6bn ❌ Cabinet Office can’t provide evidence for £7bn The National Audit Office is literally publishing report after report saying tens of billions cannot be properly accounted for and that fraud and error are material. And nothing happens. Instead, the same institutions tell you there isn’t enough money and your taxes need to go up.

Lee Nallalingham

53,726 Aufrufe • vor 6 Monaten

Too many blockchain infra providers run in the cloud or on rented servers That's a problem is built different 3 reasons why you want to work with us: 1) Best in class, enterprise grade bare metal, all fully owned 2) SOC 2 Type II certified--not just the data centers, but our own internal team 3) Optimized performance on our infra for your staked assets Curious to learn more? Check out the video and short overview thread below!

Too many blockchain infra providers run in the cloud or on rented servers That's a problem is built different 3 reasons why you want to work with us: 1) Best in class, enterprise grade bare metal, all fully owned 2) SOC 2 Type II certified--not just the data centers, but our own internal team 3) Optimized performance on our infra for your staked assets Curious to learn more? Check out the video and short overview thread below!

Ryan (“Phunky”) Haczynski

41,411 Aufrufe • vor 1 Jahr

I rejected Stripe in 2010. No SOC 2. No PCI DSS. No ISO 27001. They wanted to process payments. They could not produce a single audit report. I told them to come back when they were compliant. They didn’t. Today they are worth billions. I still sleep at night. My Estonian portfolio company makes €400 a year. Zero compliance violations. Tell me: Who is the real winner?

I rejected Stripe in 2010. No SOC 2. No PCI DSS. No ISO 27001. They wanted to process payments. They could not produce a single audit report. I told them to come back when they were compliant. They didn’t. Today they are worth billions. I still sleep at night. My Estonian portfolio company makes €400 a year. Zero compliance violations. Tell me: Who is the real winner?

Henrick Johansson

200,925 Aufrufe • vor 5 Monaten

.Aaron Day breaks down how tokenization will lead to technocracy. Technocracy is political ideology that began in the 1930s at Columbia University built on the belief that scientists and engineers should make decisions for society. In that system, ownership disappears, the economy runs on social credit backed by energy credits, and access to your assets depends on compliance. Day calls it a War on Free Will because when a system can surveil you and shut off your access to money, you’re no longer truly free to make your own decisions.

.Aaron Day breaks down how tokenization will lead to technocracy. Technocracy is political ideology that began in the 1930s at Columbia University built on the belief that scientists and engineers should make decisions for society. In that system, ownership disappears, the economy runs on social credit backed by energy credits, and access to your assets depends on compliance. Day calls it a War on Free Will because when a system can surveil you and shut off your access to money, you’re no longer truly free to make your own decisions.

Bri Teresi

17,380 Aufrufe • vor 6 Monaten

Introducing the supermemory company brain A super employee with all the knowledge of your company, lives in your slack. - Learns how the team works and talks - Works across all your tools - Permission controls built-in for big teams 2 mins to set up. just invite to slack 👇

Introducing the supermemory company brain A super employee with all the knowledge of your company, lives in your slack. - Learns how the team works and talks - Works across all your tools - Permission controls built-in for big teams 2 mins to set up. just invite to slack 👇

supermemory

620,395 Aufrufe • vor 2 Monaten

Getting started with Hardware Design is as easy as 1, 2, 3, 4... 1. Draw the circuit using building blocks. 2. Map the inputs and output to FPGA pins. 3. Verify and Build. 4. Upload to the board! And you can do pretty serious stuff with this. While we start with iCEStudio (visual blocks based design) we don't have to stick to that. We can just as well write hardware using HDL and fire the compiler etc ourselves. The LUT count on the FPGA is enough to deploy a tiny RISC-V based SoC! Yes! From the Basics of Digital Electronics to customizing a RISC-V based SoC - Soan Papdi is your companion on the journey! Lectures on the basics will be uploaded to YouTube. Lectures on CPU/SoC related topics will be made available to the Library Subscribers. + You can learn more about Soan Papdi FPGA here: + You can join the Library Access with a 70% Discount here: IMPORTANT: We will revise the prices of Library Access, effective 9th Feb.

Getting started with Hardware Design is as easy as 1, 2, 3, 4... 1. Draw the circuit using building blocks. 2. Map the inputs and output to FPGA pins. 3. Verify and Build. 4. Upload to the board! And you can do pretty serious stuff with this. While we start with iCEStudio (visual blocks based design) we don't have to stick to that. We can just as well write hardware using HDL and fire the compiler etc ourselves. The LUT count on the FPGA is enough to deploy a tiny RISC-V based SoC! Yes! From the Basics of Digital Electronics to customizing a RISC-V based SoC - Soan Papdi is your companion on the journey! Lectures on the basics will be uploaded to YouTube. Lectures on CPU/SoC related topics will be made available to the Library Subscribers. + You can learn more about Soan Papdi FPGA here: + You can join the Library Access with a 70% Discount here: IMPORTANT: We will revise the prices of Library Access, effective 9th Feb.

Piyush Itankar

13,148 Aufrufe • vor 8 Monaten

our biggest focus for the next 2 months at kled is trust & safety. so we built a fully public audit trail for every single upload on the app, updates automatically the second it's made. the moment we send data to an AI lab, they can search the hash ID of any image, video, doc, or audio file and see exactly: - the tos + privacy policy the user signed - every compliance check we ran - anonymized kyc proof - confirmation the user got paid - a full timestamp of the entire interaction start to finish any ai lab can now verify the legitimacy of any dataset in seconds, making us the first data marketplace in history to publicize its data audit records. consumer identities are fully anonymized and hidden, no users will be exposed in the process.

our biggest focus for the next 2 months at kled is trust & safety. so we built a fully public audit trail for every single upload on the app, updates automatically the second it's made. the moment we send data to an AI lab, they can search the hash ID of any image, video, doc, or audio file and see exactly: - the tos + privacy policy the user signed - every compliance check we ran - anonymized kyc proof - confirmation the user got paid - a full timestamp of the entire interaction start to finish any ai lab can now verify the legitimacy of any dataset in seconds, making us the first data marketplace in history to publicize its data audit records. consumer identities are fully anonymized and hidden, no users will be exposed in the process.

Avi Patel

44,231 Aufrufe • vor 5 Monaten

We caught up with Christina Cacioppo (Co-Founder & CEO of Vanta) right after they announced a $150M Series D at a $4.15B valuation, and asked how it all started. "We started with SOC 2 for startups, because in 2017, no one got SOC 2. Now you get it when you’re two founders. That wedge gave us the access to help with more and build trust." "That was the seed pitch. It was literally the 2018 deck. And now we're here, a little later, actually doing it."

We caught up with Christina Cacioppo (Co-Founder & CEO of Vanta) right after they announced a $150M Series D at a $4.15B valuation, and asked how it all started. "We started with SOC 2 for startups, because in 2017, no one got SOC 2. Now you get it when you’re two founders. That wedge gave us the access to help with more and build trust." "That was the seed pitch. It was literally the 2018 deck. And now we're here, a little later, actually doing it."

TBPN

54,998 Aufrufe • vor 1 Jahr

Today we are re-introducing Warp, the AI-native employee management platform for payroll, compliance, benefits, HR, and IT that runs itself. We’ve raised $85M to rebuild the last great enterprise software category. We shipped more in the last 3 months than our first two years combined, so we made a video to tell our story and showcase the platform. Warp brings payroll, HR, compliance, IT, and benefits into one platform, from your first hire to your ten-thousandth. Payroll runs on its own, accurate and on time across all 50 states, and in 150-plus countries in local currency. Hire in a new state and Warp registers you with every agency automatically. When a tax notice shows up, Warp reads it, drafts the response, and files it across more than 10,000 jurisdictions. 80% resolve without anyone on your team touching them. The rest go to our in-house tax experts, not back to you. Onboarding runs itself. The moment an offer is signed, agreements, direct deposit, tax forms, benefits, and every account, app, and device get provisioned automatically. The day someone leaves, all of it deactivates in one action. Benefits work the same way. Warp is your licensed broker across every carrier for health, dental, vision, and 401k. You pick the plan. Enrollment, renewals, and every deduction into payroll happen on their own. Revenue has grown 100x in 2 years. 1,200+ companies run payroll, HR, and compliance on Warp. We're on track to process $1.7B in payroll this year. This is just the beginning of what AI-native employee management looks like. We can't wait to build the rest of it with you. Run your company at warp speed:

Today we are re-introducing Warp, the AI-native employee management platform for payroll, compliance, benefits, HR, and IT that runs itself. We’ve raised $85M to rebuild the last great enterprise software category. We shipped more in the last 3 months than our first two years combined, so we made a video to tell our story and showcase the platform. Warp brings payroll, HR, compliance, IT, and benefits into one platform, from your first hire to your ten-thousandth. Payroll runs on its own, accurate and on time across all 50 states, and in 150-plus countries in local currency. Hire in a new state and Warp registers you with every agency automatically. When a tax notice shows up, Warp reads it, drafts the response, and files it across more than 10,000 jurisdictions. 80% resolve without anyone on your team touching them. The rest go to our in-house tax experts, not back to you. Onboarding runs itself. The moment an offer is signed, agreements, direct deposit, tax forms, benefits, and every account, app, and device get provisioned automatically. The day someone leaves, all of it deactivates in one action. Benefits work the same way. Warp is your licensed broker across every carrier for health, dental, vision, and 401k. You pick the plan. Enrollment, renewals, and every deduction into payroll happen on their own. Revenue has grown 100x in 2 years. 1,200+ companies run payroll, HR, and compliance on Warp. We're on track to process $1.7B in payroll this year. This is just the beginning of what AI-native employee management looks like. We can't wait to build the rest of it with you. Run your company at warp speed:

Ayush S

31,865 Aufrufe • vor 2 Monaten

In the next 10 years, you can have billions of agents as customers. They'll have millions of wallets. An agent does not look at your website. It reads your documents, your prices, and your API. An agent needs six things that a person does not need: - identity - tools - an inbox - memory - a wallet _ receipts. A CFO agent can compare 12 vendors, read the SOC 2 documents, and select the one vendor that obeys your policy. The old internet is for people. Each step of the agent journey has no infrastructure yet. Look at each SaaS tool that you use. Then build the version for agents only.

In the next 10 years, you can have billions of agents as customers. They'll have millions of wallets. An agent does not look at your website. It reads your documents, your prices, and your API. An agent needs six things that a person does not need: - identity - tools - an inbox - memory - a wallet _ receipts. A CFO agent can compare 12 vendors, read the SOC 2 documents, and select the one vendor that obeys your policy. The old internet is for people. Each step of the agent journey has no infrastructure yet. Look at each SaaS tool that you use. Then build the version for agents only.

The Startup Ideas Podcast (SIP) 🧃

12,349 Aufrufe • vor 1 Monat