Compliance, in practice.
A customer asks for SOC 2. A questionnaire holds up a deal. Start with the request you need to answer, then see how evidence review, policy approval, and document sharing work in Sythe Labs.
Illustrative situations and supported workflows, using no customer data.
Compliance
Start with your situation
Who will run your compliance work?
You have a compliance deadline. Decide who will collect evidence, review it, and follow up before you choose a plan.
Explore situationYour MSP client needs compliance help. Who does the work?
You manage the client's IT. Now their buyer wants security evidence or a SOC 2 report. Before adding compliance to the proposal, agree what the client needs and which work your team, Sythe Labs, and the client will own.
Explore situationYour customer asked for SOC 2. What do you actually need?
A buyer asks for a SOC 2 report before approving your service. Find out what they'll accept before you commit to an examination or promise a delivery date.
Explore situationA security questionnaire is holding up your deal
Sales has a spreadsheet full of security questions. Give the buyer answers your team can support, and separate missing evidence from missing controls.
Explore situationYour next customer has a security review team
The product team wants to buy. Procurement needs to know how you handle their data. Prepare for the larger customer's review without claiming controls you haven't put in place.
Explore situationYou inherited a security program nobody owns
The policies are in a folder and the person who ran the reviews has left. Work out what still happens, what stopped, and who is responsible now.
Explore situationSee how the work gets done
Get compliance evidence reviewed and approved
An auditor asks who reviewed production access this quarter. Use an evidence record to collect the supporting files and get an approver's decision on what they prove.
View walkthroughGet a policy approved, published, and acknowledged
Your access policy needs to reflect a change in how the team works. Review the revised wording, publish the approved version, and assign employees their acknowledgement tasks.
View walkthroughShare security documents through your Trust Portal
A prospective customer asks for your pentest report. Send them to your Trust Portal, where they can read your public security information and request protected documents.
View walkthrough