Do founders think about compliance when they start building or much later?

Quick research question for founders here 👇

When you started building your product:

1. Did you ever plan to do formal compliance (SOC2 / ISO27001 / HIPAA / etc.)

• Yes, from the beginning
• Yes, but only later
• No / never thought about it

2. If yes, when did you actually start thinking about it?

• While designing the product / architecture
• After first customers
• After enterprise customers
• During fundraising
• Only when someone explicitly asked for it

3. Looking back, do you think:

• Thinking about compliance earlier would’ve helped
• It would’ve slowed you down
• Or it didn’t matter at all for your business

Would love some answers 🙏