Case Study: Kloudio

Kloudio Selects Shujinko’s Automated Compliance Solution to Speed Audit Preparation for Faster Time to Market

The audit became a process that all of us could track, and readily understand in terms of completion percentage. That became particularly useful as I kept the board and investors apprised of our rapid progress, and how it was impacting our time to market.

– Krishna Bhat, Cofounder Kloudio

Key Benefits

Eliminates learning curve on audit process, allowing entire team to quickly become productive
Speeds audit readiness and completion, improving overall time to market on compliance certification
Improves organization and collaboration, ensuring even small teams can quickly gather and submit the necessary materials
Delivers clear visibility into audit progress thanks to intuitive interface and real-time updates

Overview

Kloudio, a cloud startup that delivers tools for organizations to simplify data retrieval and reporting, struggled to balance limited resources and an inexperienced team against the pressing need to secure SOC 2 certification as part of its go-to-market strategy. Fortunately, it was able to use Shujinko’s AuditX™ SaaS tool to automate audit preparation, speed evidence collection, and improve audit readiness.

Cloud Solutions Require Cloud Compliance

Kloudio’s tools help organizations make data retrieval and reporting simpler, more accurate and increasingly effective. Used by business analysts and data engineers at companies including Netflix, Hootsuite and more, the company’s products allow these organizations to save tens of thousands of hours annually through unified, real-time reporting and secure, self-serve data access.

In bringing its first product to market, Kloudio found itself in increasingly deep discussions with large prospective customers – and inevitably those conversations turned to data security, privacy and protection. SOC 2 compliance certification was obviously part of the company’s development plans, and with the need to get product into the hands of paying customers, the time came to start that audit process.

Yet as a startup, Kloudio runs lean. Engineering team members must wear multiple hats, and often need to complete tasks with limited support, potentially in areas where they lack prior experience. That was the case when it came to compliance certification.

Initially the team considered manually preparing for the audit and looked at using open source or commercial network and security scanning tools to gather data protection and vulnerability information. The team quickly realized that wasn’t a viable path.

“As part of that initial work, we contracted with a compliance firm, and the first time we went to use them we actually missed the document sharing deadline,” says Krishna Bhat, co-founder and CEO at Kloudio. “Combine that with the fact that we had other competing priorities in terms of development and fundraising, and we knew bandwidth and focus would get worse for us, not better.”

After raising its seed round the company realized it was time to get serious about the internal processes that a compliance audit would require. That’s also when they connected with Shujinko.

Shujinko Modernizes Compliance Certification

…as I looked through AuditX, I realized everything was well organized and broken down into different categories and tasks. I quickly went from feeling overwhelmed to uploading the necessary documents.”

– Christopher Giuliani, Kloudio

AuditX is purpose-built software that automates audit preparation, evidence collection and readiness. With AuditX, organizations can complete the audit process 3x faster, easier, and with much greater predictability and visibility. Kloudio was particularly intrigued by the fact that AuditX walks teams through the preparation process, eliminating the need to throw substantial resources or compliance expertise at the problem.

“I was introduced to the Shujinko platform the day I started at Kloudio, and I had never even heard of SOC 2 compliance before,” says Kloudio’s Christopher Giuliani. “The audit process seemed daunting to say the least, especially when our existing compliance firm gave me a huge list of hundreds of requirements. But as I looked through AuditX, I realized everything was well organized and broken down into different categories and tasks. I quickly went from feeling overwhelmed to uploading the necessary documents.”

Giuliani also found the AuditX interface simple and user friendly. All of the tasks that the company’s compliance firm required were mirrored in Shujinko, but Giuliani found them better laid out and correlated. And that clarity allowed the organization to quickly begin – and complete – the audit process using only 2-3 team members.

Speeding the Audit Process

Kloudio’s audit firm notified the company that they could begin the audit in a few months, once the internal readiness process was “at least 80% complete”. Thanks to Shujinko, Kloudio was able to get back to them in less than two weeks.

One key timesaver was the automated evidence mapping functionality of AuditX, which assigns uploads to all applicable controls within and across standards. This not only provides direct visibility into the “low hanging fruit” that has the biggest impact on completion, it also eliminates guesswork and repetitive uploads.

Another factor was the team efficiency offered by AuditX, which allows organizations like Kloudio to assign consolidated tasks to owners and sub-owners, and offers collaborative workflow, evidence review and communications. “At first I was trying to track the audit using a separate project management tool,” explains Giuliani. “We quickly realized it was much easier to just use AuditX to manage the whole process directly.”

The entire audit took Kloudio’s small team only two months to complete, despite their lack of prior experience. AuditX made the team both more productive and efficient, eliminating the steep learning curve that normally comes with any new audit process. Moreover, according to the CEO, Bhat, that efficiency was easily visible across the company. “The audit became a process that all of us could track, and readily understand in terms of completion percentage,” he says. “That became particularly useful as I kept the board and investors apprised of our rapid progress, and how it was impacting our time to market.”

Giuliani echoed that sentiment. “In my opinion the time savings was far and away the biggest benefit. I honestly think this audit process would have taken either a much larger team or months longer to complete without Shujinko’s AuditX.”

In my opinion the time savings was far and away the biggest benefit. I honestly think this audit process would have taken either a much larger team or months longer to complete without Shujinko’s AuditX.

– Christopher Giuliani, Kloudio

Automate Audit Preparation

Get ahead of your upcoming audit deadlines and compliance initiatives. Ditch the shared spreadsheets, back and forth email, and unclear evidence requests. Start working with Shujinko’s AuditX tool to simplify, automate, and modernize audit preparation for your cloud-first enterprise.