Scytale

I used Scytale to manage our SOC 2 from prep work through the actual audit, and it turned a daunting process into something manageable. The biggest relief was how Scytale outlined exactly what controls we needed and what evidence to collect, which helped us get audit-ready in about a month and pass cleanly. Eden, our point of contact, was incredible, always responsive, prepared, and she knew when to push us or handle things herself. She was very mindful of my time. The platform itself is well organized with mostly automated evidence collection, making the process painless. The integrations automatically pulled evidence, saving us from manual screenshotting, and the policy templates were a head start, allowing us to tweak instead of writing from scratch. The dashboard provided clarity on completed, pending, and needed tasks, giving us a clear picture going into the audit. These features probably cut weeks off the project. There's a lot in the platform so the first week or two we were still learning where everything lives. A couple of the menus could be a bit more intuitive on first use, but it's a small thing. Scytale demystified SOC 2 for us. It guided us on controls, evidence collection, and filled gaps promptly, leading to a clean audit. Integrations and templates saved us weeks by automating evidence collection and providing ready-to-customize policies. The dashboard and Eden's support made the process clear and painless.

The platform is easy to use and very intuitive. The integrations make it simpler to collect evidence in one place. Support has been extremely important for us and has helped throughout the entire process. The AI feature has been especially helpful in reducing support queries for smaller items, such as figuring out where to find certain functions. The questions can be difficult. If I really have to point something out, I’d say I’d like to see more integrations. Our experience with Scytale while preparing for our compliance audit has been incredibly positive. They’ve taken what is typically a complex and overwhelming process and made it approachable, structured, and easy to follow. The platform, combined with their hands-on support, helped us move forward far more effectively than we could have on our own. A big thank you to Edden Kaplan for her professionalism and clear guidance throughout. Her support and ability to simplify complex requirements gave us confidence at every stage.

The platform takes what could easily be an overwhelming process and makes it genuinely manageable. Evidence collection is seamless, everything is well-organized, nothing falls through the cracks, and you come away confident that your ISO 27001 coverage is comprehensive rather than just hopeful. But honestly, what stands out most is the people. Our consultant, Edden Kapplan, has been exceptionally patient, deeply knowledgeable, and able to translate complex requirements into clear, practical guidance. Her support alone has made an enormous difference to our experience. Very little, if anything. There's an inevitable learning curve when you first get into the platform, but with Edden's guidance that was short-lived. Nothing significant to flag. ISO 27001 certification is daunting ... the volume of controls, documentation, and evidence required can feel impossible to manage without the right structure. Scytale solves exactly that. It keeps everything organized and ensures we don't miss a thing, which gives us real confidence going into our audit. The benefit isn't just operational—it's the peace of mind that comes from knowing you're genuinely covered.

We recently turned to Scytale for our ISO 27001:2022 renewal audit certification, and the experience was very positive. The platform itself is outstanding. It made it incredibly straightforward to monitor our compliance status and identify exactly which pieces of information or documentation we needed to address before the audit. What truly sets Scytale apart, however, is their customer success and advisory team. The support was consistently responsive and fast, but the highlight of our experience was working with our consultant, Edden Kaplan. Edden was fantastic—she was highly proactive with her follow-ups and provided crystal-clear guidance on the exact actions needed to enhance our security processes. Thanks to our regular sync meetings, we always knew where we stood, making the entire audit process incredibly smooth and stress-free. I highly recommend Scytale to any organization looking to streamline their compliance journey! Also, it's already very good, and we're pleased to see that the number of integrations with third-party software continues to grow. Getting certified with clear guidance and excellent visibility over the actions to take.

We've had an excellent experience working with Scytale as we've prepared for SOC 2. The platform has helped us break down the compliance process into clear, manageable steps, and the team has been responsive whenever we've had questions. As an early-stage B2B SaaS company, having guidance through the SOC 2 process has been invaluable. Charissa has been especially helpful throughout our engagement, providing timely support and making sure we understood each phase along the way. I'd recommend Scytale to other startups and growing software companies looking for a structured approach to compliance. We're still in the early onboarding stages, but so far we've had no disappointments. They are helping us get our platform ready for enterprise customers.

Their application makes the path to compliance much easier and significantly accelerates reaching compliance readiness. It generates actionable tasks with AI-driven recommendations and guidance, and it connects to multiple systems to automatically collect evidence. The team also maintains a strong focus on completing the necessary tasks, and it's encouraging to watch the completion percentage increase on the dashboard—almost like a bit of gamification. I could always access the Scytale system reliably to knock out tasks quickly and advance overall readiness. It's definitely worth the cost. Special thanks to Kamran Naicker, who always goes above and beyond by helping us close out task items and providing valuable advice along the way. I'm struggling to find anything I dislike at the moment. If there's one improvement I'd suggest, it would be great to include an integration with Uptime Robot. We needed to achieve SOC and ISO compliance within a very tight timeframe. The Scytale system and team enabled us to reach compliance readiness within that limited window.

The teams at Scytale for sales, consulting, and support are a pleasure to work with. They are easy to reach and always available, flexible, helpful, resourceful, knowledgeable, and friendly. The platform is packed with features and offers excellent direction for navigating the certification steps and cycles. Since this was our first time, it seemed intimidating at the start. It integrates well with most popular technology providers, although connecting with, say, a regional cloud provider was tricky and time-consuming unless you possess solid technical expertise. Fortunately, the support representative was very helpful both via chat and in an online meeting to assist us. The platform responds quickly and performs well. At times, it takes a little while to update after actions are taken, so it's near real-time rather than instant. But normally, the refresh doesn't take more than a day. The UI could be a bit more intuitive; as newcomers, it took us some time to figure out the various ways to access the same source materials. The platform's intelligence is very useful through the provided templates, which can be easily supplemented, modified, or removed if they don't apply. The pricing is favorable compared to other providers offering similar services and is far better than hiring a traditional local firm in this space. The level of ongoing support, guidance, and expertise from the consultant is high. The UI could be refined to be more intuitive for those unfamiliar with the subject. I would have preferred to use Scytale's services directly rather than having to create an AWS account first. We had no idea where to begin. Even when using popular LLMs (paid versions), it was unclear what's required for our business, despite our extensive attempts at prompting. Scytale understands the context of SaaS models and provides a baseline of required documentation for the specific certification, as well as anticipating what evidence is needed to back it up. This shortened our time to market by months and ensured we got it right the first time to obtain our 'license to operate' in the regulated market we serve.

Scytale has significantly eased our compliance workload, especially when it comes to gathering evidence for audits. The platform offers a broad array of useful integrations, which took care of much of the repetitive and manual work we would have otherwise had to handle ourselves. When we encountered problems with specific integrations, their support team was quick to respond and always available. A key factor was how they assisted us in distinguishing what was crucial from what wasn't—knowing what truly counted for the audit versus what we could skip saved us a lot of time and reduced second-guessing. The most remarkable part, however, was the direct implementation support. We had a dedicated specialist who walked us through every step, and without their guidance and validation during our weekly meetings, we wouldn't have made it to the end. Special thanks to Lןטש, who was outstanding throughout. Nothing major to complain about so far. Setting up integrations sometimes needed support involvement, but the team was always quick to resolve issues. Scytale manages the heavy lifting of compliance evidence collection and removes a large amount of tedious, manual work from our plate. Just as importantly, it aided us in prioritization—knowing what really mattered for the audit versus what didn't. The blend of automation, extensive integrations, and dedicated implementation support allowed us to finish the process efficiently, which would have been much slower and more painful if done on our own.

I rely on the app to streamline my SOC2 and ISO27001 certifications. With this platform, my workload has become much lighter. It structures and simplifies the entire certification process. It gives me great efficiency, as my team is small—with just one person putting in a few hours per year, we manage to achieve and maintain both SOC2 and ISO27001 certifications. I particularly value the integrations for automatic proof collection; after the initial setup, I don't have to lift a finger. There's no need to store, search, or maintain an evidence repository because the system gathers everything automatically. I do notice that some integrations still have occasional glitches. Some months they fail to work, and I see they're highly dependent on external updates. The initial setup was a bit challenging because my team is small and we lack full expertise. Scytale simplifies and organizes the SOC2 and ISO27001 certification journey, boosting my team's efficiency even with limited resources. The automatic integrations remove the burden of manual evidence storage, and after the initial configuration, I don't need to do anything else.

The automated evidence collection, user-friendly interface, and straightforward instructions on ISO 27001 controls make it far simpler to monitor compliance progress and get ready for an audit. In general, Scytale has greatly streamlined the ISO 27001 journey, especially through its automated evidence collection and connectors. However, a few controls could benefit from more detailed implementation advice. It's often ambiguous what proof is needed, whether a control applies to a young startup, or where to locate the necessary data in services like Azure, Microsoft Intune, and Bitbucket. More detailed guidance, sample evidence, and startup-specific recommendations would make the tool much easier to use. I also ran into a few integration and synchronization problems during setup. Although the support team addressed these quickly and was very responsive, enhancing the stability and dependability of the integrations would lead to a smoother overall experience. Before adopting Scytale, getting ready for ISO 27001 felt disjointed and manual. It was hard to know which controls applied to our setup, what auditors would expect for evidence, and how to keep everything organized. Scytale has brought all compliance activities into one place, offered a clear plan, and automated the collection of evidence from sources like Microsoft 365, Azure, and Bitbucket. This has drastically cut down on manual work, increased visibility into our compliance status, and made monitoring outstanding tasks much easier as we aim for ISO 27001 certification.