Contact us
There is no sales team and no demo you have to sit through. Email us and you will get a real answer, usually within one business day.
Tell us your company name and how many people are on the team, and we will get you set up. Fourteen days, no card.
Payments are handled by our payment provider, who acts as merchant of record. Invoices, VAT numbers and receipts come from them — the receipt email you get after checkout links to your billing portal. If you cannot find it, email us. Please read the refund policy before subscribing: subscriptions are non-refundable.
If you are reviewing us as a vendor, ask. We will tell you where your data lives, which subprocessors touch it and how tenant isolation is enforced. Most of it is already written down in the privacy policy.
Email us with the details and steps to reproduce, and please give us a reasonable window to fix it before disclosing publicly. We will confirm receipt and keep you updated. We do not currently run a paid bug bounty, but we will credit you if you want to be credited.
You can delete your account and its data yourself, from inside the app, under Settings → Danger zone. For a copy of your data, or any other request under applicable privacy law, email us and we will respond within 30 days.
Deepak Gandhi (trading as SOC2Starter) — the person who builds and runs SOC2Starter.
One thing we will never tell you: that a piece of software made you SOC 2 compliant. An independent CPA firm performs the examination. We prepare you for it.