Building a SOC 2 tool for small SaaS teams who can’t afford Big 4 consultants
Hey everyone.
A few months ago, I was helping a friend’s startup get ready for a big partnership deal.
Everything was moving fast — until they hit the “Are you SOC 2 compliant?” wall.
They weren’t.
They didn’t even know where to start.
And every tool out there felt built for companies with 50+ people and a full-time compliance officer.
So I started building Lumoar — a compliance-as-a-service platform made for early-stage startups and small dev teams.
What it does:
Simple SOC 2 guidance that doesn’t feel like reading legal docs
Auto-generated policies (that you can understand)
Easy way to track tasks + collect evidence
Audit export when you’re ready for it
No consultants. No BS. Just something that helps you get compliant without stopping everything else you're building.
Who it’s for:
- Indie SaaS founders
- Dev teams are trying to close bigger B2B deals
- Anyone who’s hearing "SOC 2" from customers or investors and getting nervous
Why I’m posting here:
I know a lot of us are building things that might not need SOC 2 today — but will very soon. I’d love for Lumoar to be the thing that makes that step way less painful.
If you’re working on something and want to stay ahead of the compliance curve, I’d love for you to give it a look:
https://www.lumoar.com
Would love your thoughts. And happy to chat 1:1 if you're wondering whether this even applies to your startup.
Hey Rauf, how does Lumoar work? I'm guessing it needs to be able to access my source code? or is just asking questions and based on my answers it will tell me where I'm at and what I need to do?
Hey, at the current stage, it's asking you questions, and you're answering them and uploading evidence to it. We are planning on making this process automated in our future releases. Currently, we are at the MVP stage.
I categorize your solution as highly technical compared to many others I've been seeing. If you wouldn't mind, I would love it if you could run your idea by www.signalboard.dev and tell me if you get any valuable insights.
You would be testing my product and I would be glad to return the favor whenever you want me to.
Let me know if you are open to it!
I created my project and am waiting for the stages. Stage 1 doesn't pass for some reason. It's been a few hours stage 1 still doesn't pass.
I released a pretty big change last night, I'll see what is going on and get back to you. Thank you for going ahead and trying it, I'm sure it will be well worth your time once I get it working
This comment was deleted a year ago
You should be able to see the next step now! Sorry for the inconvenience.