An illustrative situation - 4 chapters
Who will run your compliance work?
You have a compliance deadline. Decide who will collect evidence, review it, and follow up before you choose a plan.
Chapter 01
Start with the request in front of you.
A prospective customer asks for SOC 2 evidence before signing. Your team needs to confirm the requested report type, scope, and deadline. This fictional walkthrough shows how to choose support; buying a subscription does not establish compliance or guarantee an audit result.
01 / Requirement and deadline
Chapter 02
Give the work a real owner.
If someone on your team can run the program, the Platform plan is $499/month. One organization, one compliance framework, up to 25 employees. Your team collects and reviews evidence, assigns owners, and prepares the auditor package in the platform. Reviewers do not add per-login charges. Confirm larger teams and additional framework scope with Sythe.
02 / Your team runs the program
Chapter 03
Bring Sythe in to run evidence operations.
Managed compliance starts at $20,000/year for eligible startups and includes one framework. Sythe requests and reviews evidence, prepares materials, and follows up. Your team supplies business information, approves policies, and makes changes to its systems. Each year includes 2 scoped penetration tests, one scoped retest per test, 2 risk assessments, and 12 vulnerability scan runs. Asset and host limits are agreed before work starts. Schedule testing within the service year, subject to availability.
03 / Sythe handles the agreed service work
Chapter 04
Confirm testing and audit scope before starting.
Managed evidence work, penetration tests, scan execution, independent audit fees, advisory, remediation, and monitoring are separate services. The SOC 2 Type I, Security-only bundle is $20,000/year total, including the $3,000 independent auditor fee. Sythe coordinates preparation and the audit through the platform. The independent auditor performs the audit and issues the report. Type II audits and additional criteria are quoted separately. Begin with a walkthrough and a written scope. We assign the agreed plan before billing begins.
04 / Agree the scope and next steps
What you leave with
A compliance scope with a named owner, a deadline, and an agreed service plan.
Have a similar task on your team's list? Book a call to discuss how this workflow would fit your systems and who would need to be involved.