[ Removed by moderator ]

For our B2B SaaS, SOC2 Type 1 was enough early on but when prospects started requiring Type 2, the costs were huge. Evidence collection alone runs into thousands of dollars before you even get to audit fees.

Looked around for compliance tools but mostly ran into "DM me" replies which honestly don't inspire confidence.

Vanta feels like overkill for a small SaaS team paying for a ton of features we never touch.

Anyone else gone through this as a SaaS founder? Is there a simpler tool that just gets the job done without the enterprise price tag?