Case studies-Voyage AI
An all-engineering company with no security headcount, and a program that runs anyway.
Leading embedding and retrieval models, now part of MongoDB
SOC 2
The challenge
Voyage AI serves embedding and retrieval models through an API; its customers are engineering teams and enterprise procurement. Entering enterprise pipelines makes SOC 2 a hard requirement — but the whole team was building models, with no security role on the org chart and no plan to add one.
What Kaamel did
- Kaamel built the security compliance program and ran the SOC 2 engagement end to end
- Controls designed around how a model service actually works, with no product rework for compliance's sake
- Automated evidence collection, keeping the research team's involvement to hours
The results
SOC 2
the ticket into enterprise procurement
0
security hires added for compliance
Ready early
the program was running before the company joined MongoDB
