Start with Deixic
Preparing for your first audit? Connect your tools and Deixic will help you check what’s needed, fix gaps, and keep the evidence.
Start your first SOC 2V1 · Available
SOC 2 remediation
Get help fixing the issues behind your SOC 2 controls.
Start with Deixic’s control checks or the compliance platform you already use. Deixic helps you fix security settings, asks for the approvals your policy requires, and checks that each change worked. You get the evidence for your audit.
Connect your existing platform
Keep the platform your team uses. Deixic helps you fix the issues it finds and sends the evidence back.
Connect your compliance platform
Dex
Compliance run
SOC 287%
Every change Deixic makes can be opened.
Get help with the issues your compliance platform finds.
64 of 73 controls were passing. Deixic changed the settings behind the other 9: 7 within your policy, 1 after your approval, 1 on your decision. Then it re-ran the tests in your platform. See SOC 2 by system.
Failing testNow
Code changes require reviewGitHub · Deixic, within policyPassing dx_01K6ZQ4M9…
No unused administrator rolesAWS · Deixic, within policyPassing dx_01K6ZQ4NB…
MFA enforced for all usersGoogle Workspace · Deixic, within policyPassing dx_01K6ZQ4PF…
Offboarding revokes access in configured systemsHR system · Deixic, within policyPassing dx_01K6ZQ4S3…
No persistent production admin accessAWS · Deixic, after your approvalPassing dx_01K6ZQ5A1…
Access revocation deadline definedPolicies · you decidedPassing dx_01K6ZQ5F9…
+ 3 more9 of 9 passing
Example access change
Access changes are re-checked as they happen
- New engineer added to GitHub
- Missing required MFA
- MFA enrollment enforced under your identity policy
- Control re-verified
Identity policy applied. Control re-verified.
Left to your people
Two of the 9 are yours
- Approval
- Remove persistent administrator access for 2 engineers in AWS production. Deixic waits for Security, makes the change, and reads it back.
- Decision
- How fast terminated employees lose access: immediately, within 4 hours, within 24 hours. Only the policy owner sets it.
Use a reviewed procedure again
Keep a procedure your team has reviewed. Deixic checks the permissions and verifies the result each time it is used.
- Procedure
- Save the reviewed steps that fixed the control for Dex or Deixic Code to reuse.
- Authority
- Keep the policy and approval owner with the connected system; approve each sensitive request separately.
- Evidence
- Retain the change and verification result with the control, including evidence uploaded to your compliance platform.
Before you connect production work
Do we keep our existing compliance platform?
Yes. Deixic reads its failing tests, fixes the underlying settings, uploads evidence, and re-runs the tests there.
See the connected-platform flowWhat happens when a fix needs more authority?
Deixic routes the change for approval. Company-owned decisions, such as an access revocation deadline, stay with your team.
Read about approval boundariesDoes remediation mean we are certified?
SOC 2 remediation fixes controls and records evidence. Your auditor assesses the controls and issues the report.
Review security and audit status