The challenge
Voyage AI serves embedding and retrieval models through an API; its customers are engineering teams and enterprise procurement. Entering enterprise pipelines makes SOC 2 a hard requirement, but the whole team was building models, with no security role on the org chart and no plan to add one.
What Kaamel did
- Kaamel built the security compliance program and ran the SOC 2 engagement end to end
- Controls designed around how a model service actually works, with no product rework for compliance's sake
- Automated evidence collection, keeping the research team's involvement to hours
The results
SOC 2
the ticket into enterprise procurement
0
security hires added for compliance
Ready early
the program was running before the company joined MongoDB
