When enterprise prospects kept asking for our SOC 2 report, I made it my personal mission. Drawing on my healthcare compliance experience at McKesson and GHX, I researched solutions, campaigned internally, and rolled up my sleeves to develop our policy framework.
We achieved SOC 2 certification in 2025 over a period of about 9 months. Security reviews that once took weeks now take days, and enterprise doors that were closed are now open.
My advice? Start early, choose the right partners, and don’t be afraid to do the work yourself. The insights are invaluable.