.svg){kind=logo}
.png)
When Precognition Labs, an AI company building intelligent agents for trust and safety teams, began working with enterprise buyers, security questions quickly became front and center.
Prospects were no longer evaluating product features; they were seeking formal assurance that the company could safeguard sensitive data across cloud environments, internal systems, and vendor relationships.
The founders recognized that closing enterprise deals required more than just explaining their security posture; they needed to demonstrate it effectively and efficiently without hindering product momentum.
To achieve this, they partnered with ComplyJet to formalize their security controls — and over the following months, completed SOC 2, ISO 27001, GDPR, and HIPAA, one framework compounding on the next.
Let's take a closer look at Precognition Labs, what they do, and how their journey to audit readiness began.
Company
Precognition Labs is an AI-first platform focused on building intelligent browser-based agents that help trust and safety teams monitor, manage, and secure sensitive information.
As their product matured and enterprise deployment discussions accelerated, the team faced a new kind of hurdle: proving they were ready for formal security reviews.
The company operated with a small founding team. They used a modern technology stack, which included multiple Google Cloud Platform (GCP) projects to isolate customer data, GitHub for source control and continuous integration, and tools like Swif to manage compliance documentation.
However, with distributed access and no dedicated security personnel, it became increasingly difficult to demonstrate structure and rigor across their systems.
The team needed a way to translate what they were already doing into proof. And they needed it fast.
Challenge
Precognition Labs had an enterprise deal ready to close, but the buyer required SOC 2 compliance, ISO 27001 alignment, and GDPR readiness before moving forward.
This requirement was non-negotiable and had become a deployment blocker.
And the challenges were real:
- No internal security or compliance staff
- Access spread across multiple GCP projects and GitHub repos
- No existing documentation mapped to any framework
- Time-critical deal with holiday downtime approaching
The founders could not afford to delay the product roadmap or become overwhelmed by manual work. They required a method to centralize, automate, and speed up every aspect of the compliance process without losing momentum.
Solution
Precognition Labs chose ComplyJet for one reason: speed without shortcuts. Onboarding started within hours of the first conversation — co-founders Xiuduan Fang (CTO) and Suhas Manangi (CEO) were both hands-on from day one.
The rollout included:
- GCP and GitHub integrations across all projects and repos
- Automated access reviews to track who had access, where, and why
- Policy Wizard 2.0, generating SOC 2, ISO, and GDPR policies tailored to their environment
- Vendor risk assessments, mapped to actual usage
- Evidence collection is automatically tracked and organized
- Penetration testing, coordinated through ComplyJet's audit partner
Instead of scrambling to explain how systems were secured, the team saw their controls visualized in real-time. Nothing was missed, even with the team's availability limited around the holidays.
Impact
Precognition Labs completed SOC 2 Type 1 quickly — genuinely fast by startup standards, though the real story is what came after. Rather than stopping at Type 1, the team went on to complete a full SOC 2 Type 2 examination, then ISO 27001 certification, then GDPR, then HIPAA — four frameworks built on the same policy and evidence base over the following months, each one compounding on the last rather than starting from zero.
The results:
- All four frameworks — SOC 2 (Type 1 and Type 2), ISO 27001, GDPR, and HIPAA — now complete
- No audit findings across the engagements
- Evidence centralized and reusable across every framework and future buyer review
- Compliance became a living system, not a point-in-time project
Now, instead of walking prospects through security calls, the team shares actual evidence: real access logs, real policies, real risk controls. It changed the conversation from "can we trust you?" to "great, let's move forward."
What the Founders Say
ComplyJet is founder-friendly, fast to implement, and reasonably priced. It just works. We were up and running quickly, and it has made compliance far less painful than we expected.— Suhas Manangi, Co-Founder & CEO at Precognition Labs
As a power user with an engineering background and prior exposure to compliance processes in larger organizations, I found ComplyJet very intuitive and easy to get started with. In large companies, complex frameworks like ISO 27001, SOC 2, GDPR, and HIPAA are often handled by dedicated compliance teams, so ComplyJet was especially helpful in making the process more approachable when I needed to manage the work myself.— Xiuduan Fang, Co-Founder & CTO at Precognition Labs
Looking Ahead
Precognition Labs now depends on ComplyJet not only for the audits already completed but for continuous readiness across all four frameworks.
As the company expands, it automatically tracks new systems, vendors, and risks without requiring additional staff or manual effort.
Internal reviews have become more manageable. Risks are clearly visible, assignable, and updated in real time.
When the next enterprise deal comes along, the team is prepared, not caught off guard, equipped with the evidence to demonstrate their readiness across every framework a buyer might ask about.
With ComplyJet in place, trust isn't a barrier to scale. It's built in.
