For growing companies

Get help with the security work behind your SOC 2 audit

Preparing for a customer’s security review or your first audit? Deixic helps you fix security issues and gather evidence. Your team approves sensitive changes and sets the policies.

Enforce MFA
Turn on branch protection
Revoke access at offboarding
Clean up IAM
Upload the screenshots

Request early access Your first SOC 2

Connect the systems your company runs on

Plus your compliance platform, if you have one.

Identity and emailGoogle Workspace or Microsoft 365, with Okta or Google identity
CodeGitHub
CloudAWS or GCP
HRRippling or Gusto
DevicesConnect your device management, or use Deixic’s
ChatSlack

Deixic connects to many more systems. See the connectors or SOC 2 by system.

What Deixic fixes and what you decide

The example from /compliance: 9 of 73 controls failing, 7 fixed within policy, 1 approval, 1 decision. See each SOC 2 control.

Failing controlResolved by

Required reviews enabled on 12 repositoriesGitHubDeixic, within policy

Removed unused administrator roleAWSDeixic, within policy

Enforced MFA for 4 accountsGoogle WorkspaceDeixic, within policy

Terminations in Rippling now revoke access automaticallyOffboardingDeixic, within policy

Removed 3 stale IAM usersAWSDeixic, within policy

Enabled CloudTrail log file validationAWSDeixic, within policy

Wrote quarterly access review procedurePoliciesDeixic, within policy

Removed persistent administrator access for 2 engineersAWSYou approve

Access revocation deadline definedPoliciesYou decide

What your auditor gets

A receipt for every fix, exported in three formats.

Required reviews enabled on 12 repositories

Before: Require pull request: false → true; Required approvals: 0 → 1; Force pushes: allowed → blocked
Authorized by: Engineering remediation policy
Read-back: PASS
Receipt: dx_01K6ZQ4M9TCB8W2HXN5RFJY6E

Exports

PDF
HTML
JSON

Each receipt records the before and after state, the approver and reason, and the read-backs. Receipts are signed and hash-linked.

$12,500 per year at 50 managed assets

Your auditor bills you directly. Full terms on pricing.

$12,500

per year, at 50 managed assets

Platform$6,000

50 assets at $130$6,500

Total$12,500

Managed assetsPer asset, per year

First 100 assets$130

Assets 101 to 500$90

Assets 501 to 1,000$60

An asset is a person, a repository, a cloud account, or a connected SaaS app.$6,000 platform fee

Program members

Program members pay no $6,000 platform fee in year one. Deixic’s own offer; membership is confirmed at signup.

Questions from founders

Do we need a compliance hire?

No. Your team approves the sensitive changes and makes the policy decisions. Deixic does the fixes.

Do we need a compliance platform first?

No. Deixic runs SOC 2 from zero, or works with the compliance platform you already have.

Which auditor do we use?

Any auditor. They receive the receipts and the exports, and they bill you directly.

Can our own agents use this?

Yes. Claude Code and Codex read the same records over MCP.

How long does it take?

Timing depends on your starting point, the audit scope and observation period, and your team’s review requirements. Deixic helps with the fixes and evidence; you and your auditor agree the audit schedule.

Choose your first security task

Request early access