Cheeky Pint / episode intelligence
Speakers in the public record
Claim mix
Evidence policy
Every row below preserves an exact excerpt. Identified speakers are linked; unresolved voices are labeled and excluded from people counts.
Claim ledger
36 published records
01 / uncertainty
“If you actually talk about all these rules, I don't know about SOC 2 in particular, but for example, a lot of compliance regimes have this notion of doer and approver being separate for something.”
02 / belief
“You're setting it up and you're going through. Actually, reporting is another, I think, great case.”
03 / belief
“I think for a startup that's never done this, it is unhelpful because it opens up a maze in a way that's just not great.”
04 / commitment
“From a Vanta perspective, we've taken out like, we will support them all because we have built a machine where it is easy to add a new one in.”
05 / belief
“I think in the early days, so this was helpful and then deeply unhelpful, but in the early days before we had competitors, we tried to basically make this call response of someone says SOC 2, someone says Vanta.”
06 / belief
“Down market, we're not quite TurboTax but I think that is the experience a founder wants.”
07 / uncertainty
“We'd never be able to pull that story off. I don't know. I heard training businesses are good.”
08 / commitment
“Maybe I will read your SOC 2, maybe I will not, but I really want to ask you questions one through 10.”
09 / belief
“I think there is a… Someone said this better than me, but there is a totally a truth-seeking piece of it, or just sometimes you can bend reality to your will, but often reality is reality, and you got to embrace it and figure out how to work around it.”
10 / belief
“I think I deeply learned that because if you looked at the SOC 2 market in 2018, my best estimate was there was $10 million spent globally, and you would never start a startup on that.”
11 / belief
“I think part of it is the just show of strength and the show of I'm on top of it.”
12 / belief
“Brad Burnham is a venture capitalist, mostly retired now, but also excellent and incredible track record. He and Fred started Union Square Ventures in, I think, 2002.”
13 / belief
“I think where the LLMs are excellent and a little dangerous in a build versus buy, but then we just need to build better experiences on top of this is like, "Hey, Claude, I'm going to give you a mess of data.”
14 / belief
“I think right now we do think about, especially in this world where in theory, code has become much cheaper, actually.”
15 / belief
“I don't think they will. I think you're just going to have even more divergence between these things.”
16 / belief
“I think there's very hard-working folks in DC, across the board, but in GSA in the office trying to do this.”
17 / belief
“If you really pressed me, I would say ISO 42001 just because it's the European one.”
18 / belief
“USV is a very special place in lots of ways, and I think USV is fundamentally about ideas.”
19 / belief
“" I think compliance is… SOC 2 is a word that no one knows what the heck it means until they deeply know, and then they want it.”
20 / commitment
“One model we've thought about with Vanta, even pre-AI, is we will delay the point at which you have to bring on a full-time security compliance person or a consultant who's spending meaningful time.”
21 / commitment
“You can imagine a data table with a view and columns rather than just customizing it, you're like, "No, I just want you to do this thing, and I will take over that right-side canvas of the page, generate the UI for the thing, or generate the report.”
22 / belief
“I think that so much of the work of a compliance team is, again, keeping things in sync, keeping different sorts of text in sync.”
23 / belief
“I think because it's like… The theory at the time was GDPR is written by lawyers at a very high level.”
24 / belief
“I think our mapping is 60% or 65%. The additional ISO stuff is often documentation, which is a great place for software to help you out.”
25 / belief
“I think to a naive SOC 2 audit, you're like, "Those seem like two user IDs had that conversation, and so we can go forward.”
26 / belief
“I think that exposure was super helpful for me because you got to see people who I felt more affinity or similarity to in whatever dimension also do it.”
27 / evaluation
“I've heard more absurd founding myths. I think you could just go for it.”
28 / evaluation
“Yeah, I think what you're saying is there's a strategy component to how should we be doing things, and then there's an hourly labor component to compliance, which is like, "Oh, we did 10 times as many sales.”
29 / evaluation
“The joking reference that everyone makes is they talk about competition from Claude Code for software products is, "You're not just going to vibe code your X in a weekend." But obviously, something like SOC 2 is actually the kind of thing that a Lens or coding agents are good at working with because there's just so much training data out there, and it's a codified set of rules.”
30 / evaluation
“Again, it naively feels like you will have a similar effect with compliance as we had with IT, where the profession very much stays around. It actually gets more skilled rather than… I think the stuff we do in IT is harder than the basic IT, the 10-person company would have done.”
31 / prediction
“It feels like the data you have of anonymized prior audits is an incredibly powerful network effect that cannot be replicated because it doesn't exist in the public interest.”
32 / evaluation
“What's going on there? As in, we think society cares, society should care. It's valuable to not lose this data, and yet it does not seem to impair what investors deem to be the terminal value of the company.”
33 / preference
“Compiling that rule book into the steps that are actually actionable for me, because I am not a farm, and so all the farm parts of the rule book don't apply to me.”
34 / evaluation
“That's generally… Obviously, there's lots of sexy stories of people who dropped out of college to start something. That's generally a bad time because you talk to university students, often, their ideas for companies are pretty half-baked.”
35 / prediction
“The other thing that feels like it's changing in this ecosystem is that the costs of having data breaches are going up because Europe, in particular, is getting very strict about notifications.”
36 / prediction
“I feel like you could have an opinion on this because we have filled out a lot of security questionnaires at Stripe, and I think we'd be very happy if the machines could take over from here.”