Speaker unverified: belief

Transcript context

…Because it is your life. Going back to the effects of the European strictness, it doesn't show up in the form of... Maybe American companies previously were looking to check the SOC 2 box versus now they're like, "Okay, it's really important I don't cross this quite strict European rule." Right. Where they think now, and I think in the… It's funny, when we were starting Vanta—Vanta as what it is now today—in spring of 2018, which is when GDPR was going into effect. I was running around and being like, "Will you talk to me about compliance?" Everyone said, "Yes." I was having this great luck. Then I'd show up, and I'd be like, "SOC 2." They'd be like, "GDPR is a priority. Next, please." That energy has mostly dissipated, especially in the United States. I think because it's like… The theory at the time was GDPR is written by lawyers at a very high level. It's not a spec you can hand to an engineer, comically bad as an engineering spec. But it's fine. We will clarify that in court over the next 10 years. Now we're, whatever, seven, eight years in. It hasn't really happened. It still is hand wavy for an engineer, at least, to go implement as it ever was. How does this work with agentic coding where the honest answer to the number of human reviewers to this code is zero?…

Stored transcript either side of the excerpt. The highlighted words are the published quote; the surrounding text is unedited source, never generated.