Case Study: Factory achieves ISO 42001 and SOC 2 compliance with Vanta

Factory adheres to ISO 42001 and builds AI trust with Vanta

Factory, the San Francisco AI software startup, needed a faster way to prove security and trust to enterprise prospects as it sold into organizations with hundreds to thousands of engineers. To support SOC 2, ISO 42001, GDPR, USDP, and related trust requirements, Factory turned to Vanta and its compliance automation platform to help reduce security friction in the sales process.

With Vanta’s ISO 42001 solution, cross-mapped controls, automated evidence collection, policy templates, and real-time monitoring, Factory became audit-ready for ISO 42001 in just four weeks and strengthened its SOC 2 posture as well. The company also saved hundreds of thousands of dollars in engineering salary and cut implementation work from an estimated couple hundred hours to about 30 hours, while shortening sales cycles and reducing security conversations.

Factory

Eno Reyes

CTO and Co-Founder