Speaker unverified: commitment

Transcript context

…But is there a compliance versus security tension here as you're doing this stuff? We haven't seen as much. What we have seen is the person buying software, they might work at a tech company and be quite savvy and up to date on those threats. They might work… One of our customer is literally a hotel chain. They certainly don't get compliance themselves because they don't build software, but they buy it. Fine. What we generally see is some companies will come in with their set of questions they want to ask. Maybe I will read your SOC 2, maybe I will not, but I really want to ask you questions one through 10. Some companies don't have that. Again, there's some part of the Vanta value proposition is, "We'll prescriptively guide you." We have a product principle just around reasonable defaults. It's like, "Can we make the reasonable default questionnaire, in this case, something that leads into security versus compliance?" Or versus, "Do you have a policy to X? Can you just ask them if they X, if you care?" That's a place where we've tried to, on the margin, nudge the buyer questions toward more security, knowing that will change the economic incentive of the vendor. One of the big debates people are having right now is how AI productivity gains show up. I feel like you could have an opinion on this because we have filled out a lot of security questionnaires at Stripe, and I think we'd be very happy if the machines could take over from here. We really don't need to... We filled out enough.…

Stored transcript either side of the excerpt. The highlighted words are the published quote; the surrounding text is unedited source, never generated.