When we decided to rebuild our compliance program — moving off a GRC tool that had gone quiet after an acquisition, and expanding from SOC 2 alone to a combined SOC 2 Type 2 + ISO 27001 + Cyber Essentials Plus program — we did what we tell our own customers to do: a proper… Continue reading Vanta vs Drata vs Sprinto vs ComplyJet: What We Learned Buying a GRC Platform (And Who We Chose)