Case studies-LiveX AI
Three frameworks delivered together on one shared control set.
AI agent platform for customer service
SOC 2 · HIPAA · GDPR
The challenge
LiveX AI's agent platform sells to enterprises, so buyer security teams expect SOC 2. Healthcare customers add HIPAA on top, and European prospects ask about GDPR. The team's energy belongs to product iteration; staffing three separate framework projects was never an option.
What Kaamel did
- Run all three frameworks in parallel, building overlapping controls once
- Hand evidence collection to the automation platform, keeping engineering effort measured in hours
- Publish a trust center so buyer security teams verify status themselves instead of trading questionnaires
The results
3 frameworks
SOC 2, HIPAA, and GDPR delivered together
1 control set
shared across all three, built once
Always on
compliance status live in the trust center
