Secureframe, headquartered in San Francisco, helps companies get enterprise ready by streamlining SOC 2, ISO 27001, and HIPAA compliance. Secureframe aims to enable companies to get compliant within weeks, rather than months and monitors 40+ services, including AWS, GCP, and Azur.
N/A
VGS platform
Score8 out of 10
Mid-Size Companies (51-1,000 employees)
Very Good Security (VGS) lets companies use and exchange any kind of sensitive data without ever needing to see or hold the data itself. Built on the premise that “you can’t hack what isn’t there”, VGS is on a mission to protect the world’s information by transforming security and privacy from a business obstacle into an opportunity. VGS provides what they describe as a developer-friendly platform to act as a custodian for sensitive data, improving security while also accelerating business…
As an early-stage startup venturing into SOC 2 for the first time with no in-house compliance expertise, I'd say Secureframe is well-suited for early startups. They walked us through various parts of the process and recommended how to approach certain configurations and controls appropriate for our situation and size. We can easily see Secureframe working for larger companies as well; they seem to have a solid foundation in place.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
If you are working with payments and you don`t want to store that kind of data to avoid a lot of strict requirements and headaches with tight processes, strict security, encryption and everything else you can leverage VGS platform to greatly reduce the work needed to enable payments in your system. They also provide tokenization for some other kinds of data but we currently do not use them. VGS platform also provides a product for compliance and controls (VGS Control) which helps you get ready and maintain compliance in your organization.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The new audit module had a few minor bugs during setup on our 2nd pass, but nothing that broke. Confident it'll smooth out the longer it's live in Prod.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The Questionnaires feature (which assists in RFP's, security questionnaires, etc) could be designed a lot better. I see what they were going for, and based on their track record for improving features I'm sure it will get a refresh, but in it's current state it is the only features that I do not use.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The support is pretty decent, sometimes take a little bit o time to solve things (not critical things) but that is part of the ticketing/email async communication so its fine. All the times I had to contact support a got my issue solved and a lot of attention from the support team to help solving the issue.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
From purely comparing marketing sites (unable to trial others), Secureframe had better first time SOC 2 audit documentation and explanations for free to ease you into understanding the processes.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
We evaluated Drata as an alternative for VGS Control, but VGS platform control integrates a lot of controls around VGS itself and also with Cloud Infra that we use, which makes the process faster. Also keeping everything with the same vendor makes things easier to manage.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
