SaaS · Sep 2025
SOC 2 Type II in 90 days without slowing the roadmap
0
Days to certification
0
Audit exceptions
0
Pipeline unblocked
0
Questionnaire turnaround
The challenge
Sales kept losing six-figure contracts to competitors waving SOC 2 reports. Engineering had no appetite for a compliance project that would freeze delivery.
What we did
We mapped controls directly onto existing tooling — SSO, CI gates, IaC baselines — automating evidence collection with continuous-compliance tooling. Engineers felt zero freeze; auditors got everything first pass.
The results
- SOC 2 Type II achieved with zero exceptions
- £3.1m pipeline unblocked in first quarter post-audit
- Security questionnaire response time from 2 weeks to same-day
- Engineer interruption: 4 hours total
Technology stack
Keep reading
More client stories
Orchard Insurance
Strangling a 30-year-old policy administration monolith
Orchard’s core policy system predated the web. Using the strangler-fig pattern we extracted quoting, claims and billing into modern services while regulators watched closely.
-83%
launch lead time
3
domains extracted
-60%
legacy licensing cost
Mediloop Health
A HIPAA-grade data platform powering 400 clinics
Mediloop’s telehealth data lived in silos across 400 clinics. We delivered a governed lakehouse with real-time patient dashboards and ML-driven no-show prediction.
400
clinics connected
-22%
no-show rate
12min
data freshness SLA
Northwind Pay
Re-platforming a payments leader to 99.99% availability
Northwind Pay processed £2bn a year on a fragile monolith that feared every Friday release. We rebuilt their platform on AWS EKS with event-driven services and progressive delivery — without freezing feature work.
99.99%
platform uptime
8×/day
deployment frequency
-38%
cloud costs