How to Choose a SOC 2 Auditor for Your Startup
Choose a SOC 2 CPA firm by checking the signing entity, independence, scope, evidence process, fees, and report plan before you sign.
Read more →Field notes
filegrc Blog
Practical answers for founders and engineers doing SOC 2 work without turning the program into another closed SaaS database.
SOC 2 for Startups: Decide What to Do and When
A practical SOC 2 guide for startups deciding when to start, what report a customer needs, who owns the work, and how to plan scope, cost, and evidence.
Read more →AI Agent for SOC 2: A Safe Headless Workflow
Use an AI agent for SOC 2 work with model discovery, validated file changes, Git review, human approval gates, and clear limits on audit judgment.
Read more →Open Source SOC 2 Compliance: What Software Can and Cannot Replace
A practical guide to running SOC 2 work with open source software, including what stays with your team, source systems, and CPA firm.
Read more →I Built a Git-Native SOC 2 Tool Because I Didn't Want Another SaaS Bill
A technical look at running SOC 2 in Git with JSON records, Markdown policies, reviewable changes, a CLI, and agent-ready workflows.
Read more →