DevTools · Data Platforms · 50–200 · Europe #b018_06

Context

We make an open-source vector search engine with a managed cloud offering, used by teams building retrieval and recommendation features.

Industry

DevTools & Software · Data Platforms

Size

50–200 employees

Region

Europe

Tools budget

$1K–5K per month

Needs

SOC 2 / ISO 27001 automation. We are bringing compliance in-house after relying on outside advisers, and need to run our security attestations ourselves.

Today: first dedicated owner replacing an outside advisory firm for framework attestations · Urgency: this year

Privacy & data protection (GDPR/HIPAA). Customers in health and regulated sectors ask us to prove privacy controls for their data in our cloud.

Today: data processing terms and healthcare agreements handled case by case by a security officer · Urgency: this year

Cloud security posture. Our cloud runs in many regions, and we lack a single view of misconfigurations across them.

Today: multi-region managed offering secured through private networking, customer-held keys and access logs · Urgency: this year

Who decides

head of compliance · security review

Expects from suppliers

Automation that a small security team can own; Coverage for privacy and security frameworks together; Works across several clouds

Not a fit

Enterprise suites built for large security departments; Advisory-only services

Stack

multi-cloud, Kubernetes, compliance tooling in place

Buying triggers

upcoming audit or certification, rapid team growth