SaaStr

FEBRUARY 1, 2025

The New Governance Layer AI-specific data governance policies Automated compliance monitoring Audit trails for model training and inference 5. Access Control 2.0 You need: Model-level access controls Data-level access controls Training-level access controls Inference-level access controls C.

AI 273

AI Data Government ChatGPT 273

SaaStr

JANUARY 23, 2025

Focus on: Building robust security and compliance (SOC 2, ISO 27001) Automating customer onboarding/offboarding Creating enterprise-grade support processes Developing procurement relationship expertise Having clear data handling procedures 5. If one does and one doesn’t, you know it’s the person not the motion.

Enterprise 244

Enterprise Sales Hiring Scale Outsourced Development 244

Scytale

FEBRUARY 25, 2025

As technology continues to evolve, compliance industry trends and requirements adapt accordingly. Compliance trends in 2025 continue to be influenced by emerging technologies such as artificial intelligence, Internet of Things, blockchain, and cloud computing.

compliance 52

compliance Artificial Intelligence Trends Cybersecurity 52

SaaStr

MARCH 18, 2025

This represents an under-recognized opportunity for B2B AI startups focusing on compliance, risk management, and administrative controls. Large enterprises have an immediate need for governance solutions to handle AI at scale.

Technical Review 194

Technical Review Artificial Intelligence AI Marketplace as a Service 194

SaaStr

OCTOBER 23, 2024

With a trillion in payment volume coming through BILL in the last five years, managing the payment and compliance engine has required an ongoing effort of a sizable team. BILL knows how to manage money and risk, and they made that happen in the platform, which creates that moat.

SMB 312

SMB Payment Services Payments Payment Methods 312

Scytale

OCTOBER 30, 2024

Well, if you haven’t, it’s best we dive in quickly (before non-compliance lands your business in some serious sh@#). Whether you’re a healthcare provider, a SaaS company in the healthcare space, or any other business dealing with Protected Health Information (PHI) , HIPAA compliance is non-negotiable.

Payment Services 52

Payment Services compliance Payment Solutions Payment Methods 52

Scytale

DECEMBER 3, 2024

When it comes to keeping your business secure and meeting regulatory requirements, two big concepts often pop up: penetration testing and compliance audits. Beyond compliance, it simply makes good business sense. What are Compliance Audits? Both are essential, but they’re not the same thing. Sounds intimidating, right?

compliance 52

compliance CTO Hire Technical Review Software Review 52

SaaStr

FEBRUARY 1, 2025

Security compliance? Ok and the #2 reason seasoned sales execs (and others) fail: They Just Arent Curious Anymore I get it. How many times can you sell somewhat sorry but boring SaaS products? Voice APIs? Call center analytics? They can be interesting but only if you truly curious. If you arent, you never learn anything new.

Sales Hiring 191

Sales Hiring Sales compliance Interviewing 191

Subscription Flow

OCTOBER 10, 2024

In this blog, we will explore why companies migrate to a new billing system, the pain points of billing system migration, the best practices to overcome these obstructions, and SubscriptionFlow’s tailored solutions that guarantee your business a seamless transition. Our platform, SubscriptionFlow, is a billing system migration expert.

Payment Solutions 105

Payment Solutions Payment Services Systems Review SaaS Payments 105

Scytale

OCTOBER 22, 2024

When you first hear the term “SOC 2 Type 2 compliance,” it might sound like you’re entering some kind of information security maze. Whether you’re just starting out or are somewhere in the middle of the journey, SOC 2 Type 2 compliance is designed to help your business strengthen customer trust. But guess what? It doesn’t have to be.

compliance 52

compliance Systems Review Technical Review Company Culture 52

Scytale

FEBRUARY 6, 2024

It’s data security and compliance. But the importance of data security and compliance is old news, and customers no longer prefer companies with robust security standards – they demand it. However, it’s no walk in the park, and the compliance landscape is everything but beginner-friendly.

compliance 111

compliance Technical Advisors Data SaaS 111

SaaStr

MARCH 19, 2021

We created a product that was simple to use for entrepreneurs who were juggling a thousand different priorities and didn’t have (and didn’t want) an expertise in regulation, compliance or sales tax. This blog post is brought to you by TaxJar. Who were the different stakeholders involved? What were their challenges?

Scale 290

Scale Business Finance compliance 290

SaaStr

SEPTEMBER 10, 2023

What’s your top “undiscovered gem” — an app you love but others may not have heard of?

AWS 303

AWS compliance AI Startup 303

Scytale

SEPTEMBER 3, 2024

Many organizations struggle to find a clear path to HIPAA compliance. They are constantly led off course by trying to understand the complicated terminology, policies and requirements surrounding compliance. They investigate complaints, conduct compliance reviews, and provide education and outreach to foster compliance.

Payment Services 98

Payment Services compliance Technical Review Healthcare 98

SaaStr

JULY 22, 2021

Avalara manages a big problem — tax and related compliance automation. And importantly, while the very largest partners support multiple vendors for tax compliance, the vast majority of small partners just deploy Avalara. Avalara is a leading public SaaS company we probably should all know more about.

Scale 334

Scale SMB compliance Churn 334

SaaStr

FEBRUARY 26, 2025

The $10M ARR Rule for Enterprise Here’s a controversial but important take: If you’re under $10M ARR, stay away from Enterprise.

Enterprise readiness 147

Enterprise readiness Enterprise compliance Acquisition 147

SaaStr

JANUARY 24, 2022

Removed from everyday business, she can only speak to the larger picture, which is important, but that’s often not enough with the fundamental processes of billings, collections, cash flow management, revenue reporting, corporate compliance and more. Mistake #9: Don’t forget about compliance. Compliance can be complicated.

Finance 334

Finance Outsourcing Services Systems Review Technical Review 334

SaaStr

APRIL 28, 2021

At Secureframe , we help companies get enterprise ready by streamlining SOC 2 compliance and get them ready within weeks, rather than months. . Blog post sponsored by Secureframe. Unfortunately, the process is long and can feel like a blackbox for startups starting from scratch.

Enterprise 284

Enterprise Software Review Azure GCP(Google Cloud Platform) 284

SaaStr

JANUARY 6, 2021

Box calculates 7x expansion from its existing installed base: A big push into security & compliance to grow its TAM. We talked with CEO Aaron Levie in depth with this at the SaaStr Enterprise 2020 above.

Scale 312

Scale compliance Enterprise Scaling 312

SaaStr

DECEMBER 22, 2022

Replace manual GRC efforts, reduce costs, and save time preparing for audits and maintaining compliance. Drata is the world’s most advanced security and compliance automation platform with the mission to help companies earn and keep the trust of their users, customers, partners, and prospects.

Scale 55

Scale Onboarding Government compliance 55

SaaStr

AUGUST 25, 2022

A-LIGN is a technology-enabled security and compliance partner that helps global organizations take a strategic approach to confidently mitigate cybersecurity risks.

Cybersecurity 274

Cybersecurity Scale compliance Payment Features 274

SaaStr

DECEMBER 6, 2022

On Balancing Compliance and Growth: Compliance, for any sub-category in SaaS, whether it’s marketing following GDPR compliance or your product team following FinTech compliance – it’s binary. If you just focus on compliance all the time and take no risk, you have no business to protect.

Scale 278

Scale Scaling compliance Forecasting 278

SaaStr

JUNE 29, 2023

Many net-new purchases are for data security, compliance, risk management, and AI-powered tools. Compliance : The cost of GDPR compliance has totaled around $9B globally since its introduction. So, what’s driving these purchasing trends?

VP of Engineering 298

VP of Engineering Trends Cybersecurity Sales Hiring 298

SaaStr

NOVEMBER 24, 2022

Insight Assurance is a professional services firm providing cybersecurity compliance, risk management, and tax services. ISO 27001 compliance services. Governance, risk and compliance consulting services. Founded by prior big 4 executives, Insight Assurance’s goal is to provide cost-effective, high-quality services.

Merchant Services 261

Merchant Services Cybersecurity compliance Finance 261

SaaStr

JULY 19, 2022

Up this week is Shrav Mehta, Founder and CEO of Secureframe, a provider of security and compliance software to help streamline SOC 2 and ISO 27001 compliance, backed by Accomplice Ventures, Kleiner Perkins and Gradient Ventures. SaaStr’s Poya Osgouei has a great Uncharted podcast that does a deeper dive with many SaaS execs.

compliance 261

compliance Software SaaS 261

SaaStr

JANUARY 17, 2024

Compliance matters. Arvind Jain, CEO of Glean explained: “ The first thing is just working on all security aspects and compliance. So getting your SOC-2 certification, HIPAA compliance, GDPR, and FedRAMP. That’s one stream of, enterprise requirements, which is, just needing all these compliance matters.

AI 298

AI Enterprise Artificial Intelligence compliance 298

SaaStr

SEPTEMBER 1, 2022

Schellman is a leading provider of attestation and compliance services. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single project team. The post Thanks to Hiver, Jirav, Orum, Rocketlane, and Schellman for Sponsoring SaaStr Annual 2022!

compliance 278

compliance Forecasting AI Onboarding 278

SaaStr

OCTOBER 31, 2022

Compliance. When compliance or regulatory officers enquire about whether you’ve had any incidents, you can have a clear answer and record to give them. Compliance. compliance can feel incredibly daunting. Secure Compliance. Over the years, Perullo has developed a handy mnemonic, TRICC, which stands for: Threats.

Cybersecurity 246

Cybersecurity compliance Government Strategy 246

SaaStr

AUGUST 11, 2022

Drata is the world’s most advanced security and compliance automation platform with the mission to help companies earn and keep the trust of their users, customers, partners, and prospects. Its software sets HR free to do great work and be more strategic, which helps the entire organization do the same.

Payment Solutions 268

Payment Solutions Payment Services Payments Payment Methods 268

SaaStr

DECEMBER 15, 2022

A-LIGN is a technology-enabled security and compliance partner that helps global organizations take a strategic approach to confidently mitigate cybersecurity risks.

Cybersecurity 49

Cybersecurity Data compliance AI 49

SaaStr

FEBRUARY 2, 2023

Its proprietary technology simplifies the employment process by managing the complexities of local compliance, labour contracts, payroll, benefits and taxes. We enable companies to manage their distributed teams via a simple dashboard while taking responsibility for local labor law compliance on their behalf.

Cloud spend optimization 263

Cloud spend optimization AWS Scale compliance 263

SaaStr

AUGUST 12, 2024

I see way too many SaaS founders hire sales reps who figure because they sold well at Gong or Carta, they can sell a complex compliance tool for a very specific industry. Make sure before they start they can truly pitch and sell your complex vertical SaaS product. Well maybe. Plan to be in founder-led sales mode longer. As discussed above.

Sales Hiring 320

Sales Hiring Scale Sales SaaS 320

SaaStr

MARCH 11, 2024

They can’t wing environmental compliance sales to a Chief Compliance Officer. #10. Be way if you’re in vertical SaaS or complex fintech or developer-focused tools hiring folks that have only sold, basically, to folks like themselves. They can wing that.

Sales Hiring 308

Sales Hiring Sales Interviewing compliance 308

SaaStr

MARCH 16, 2021

Assume your customers know every cut corner you’ve cut on compliance, security, redundancy, etc. Is your HIPAA compliance pretty barely there? Would they be OK with it? If not — make changes here, quickly. It’s their data, not yours. Are you sure your keystore is properly encrypted?

Scale 295

Scale compliance Engineering Customer Success 295

SaaStr

APRIL 15, 2022

Drata is the world’s most advanced security and compliance automation platform with the mission to help companies earn and keep the trust of their users, customers, partners, and prospects.

Travel 262

Travel compliance Finance Engagement 262

SaaStr

AUGUST 10, 2024

Embrace doing all the compliance requirements (SOC-2, HIPPA, Two-factor authentication, etc) Embrace selling to multiple stakeholders. This is why “pipeline” doesn’t make any sense to start-ups, not really, but makes total sense for BigCo sales executives. Instead of running from them. Force yourself to sell to 3-4 folks per deal.

Sales Hiring 299

Sales Hiring Sales compliance Enterprise 299

Scytale

NOVEMBER 4, 2024

In this blog, we’ll explore the importance of SOC 3 in boosting your business’s credibility and reveal four easy steps that you can follow to get your hands on a SOC 3 report. These criteria further highlight that every aspect of data is expertly managed to ensure complete protection and compliance. The good news? Let’s dive in!

compliance 52

compliance Underperforming Technical Team Scale Technical Review 52