High Signal Podcasts Evidence ledger
Method
Browse
← Back to evidence

Evidence receipt / belief

Published · transcript-backed

Speaker unverified: belief

31 Mar 2026 Cheeky Pint Compliance at scale and why TAM is a distraction with Christina Cacioppo of Vanta

“I think for a startup that's never done this, it is unhelpful because it opens up a maze in a way that's just not great.”

— Speaker unverified

Source trail

Everything needed to verify it.

Speaker
Speaker unverified
Attribution
Not verified from this transcript
Claim type
belief
Recorded
31 Mar 2026
Publisher
Cheeky Pint

Transcript context

…I'm familiar, yeah. SOC 2 is like, "You must log useful events and have a system to look at them. But it is up to you to decide what the heck that means," which sometimes it's helpful. I think for a startup that's never done this, it is unhelpful because it opens up a maze in a way that's just not great. That's where being prescriptive is part of, I think, Vanta's initial product market fit. I think it's actually largely due to that. In a way, that wasn't the plan. But I think it's like figuring out how to take that high-level guidance, bring it down in some places in a way that actually makes sense. Christina and her team at Vanta are helping their users automate compliance, which for many companies is the thing standing between them and being able to sell to enterprises. We're very familiar with this category of products with Stripe, where you have a complex web of rules that businesses need to be able to comply with so they can move on to actually improving their products. Just take tax compliance and our product, Stripe Tax. As you start selling in more states and more countries, you discover there's thousands of rules you need to follow. For example, did you know Chicago actually has a lease tax, which applies to SaaS companies, too, since you're leasing out software? Stripe Tax is built to automate all of this. With one integration, it knows what you're selling, when and where you have to collect transactional taxes, and how to register and file on your behalf. If you want to sell globally without becoming an expert in tax rules, check out Stripe Tax. The joking reference that everyone makes is they talk about competition from Claude Code for software products is, "You're not just going to vibe code your X in a weekend." But obviously, something like SOC 2 is actually the kind of thing that a Lens or coding agents are good at working with because there's just so much training data out there, and it's a codified set of rules. How is AI helping with what you're doing, and what is your plan for… You were describing some of the scale economies you have and having seen other customers, and I'm curious what the defenses are against… A customer could, in theory, say, "Hey, Claude, give me the plan for our SOC 2 compliance, make no mistakes." That is a thing you can contemplate.…

Stored transcript either side of the excerpt. The highlighted words are the published quote; the surrounding text is unedited source, never generated.

Search evidence