{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"START","title":"START: Emma Lawler, Product Lead, Rippling \"Rippling Automated Compliance\"","html":"","width":"100%","height":180,"duration":1500,"description":"As a founder, Emma Lawler felt like SOC 2 was a major distraction from building.\nBut when she started selling to enterprise logos, it became something that was impossible to ignore.\nNow, as Product Lead at Rippling, she channeled her first-hand experience of getting SOC 2 compliant to rethink how all automated compliance frameworks are run. \nIt started with a retro. \nEvery other SOC 2 vendor works the same way: \nDetect a problem\nAlert your team\nFix it...somewhere else\nThe problem with this checklist is that \"somewhere else\" requires dozens of additional integrations. Because these vendors are just reporting layers on top of your stack.\nRippling is your stack. \nWhich means most of your compliance evidence is collected before you start AND when there's a gap in compliance, Rippling fixes it.\nUnencrypted device --> encrypt it.\nWrong app access --> de-provision automatically\nIncomplete security training --> gate system access until its done. \nBecause compliance really isn't about the report. It's about operating your company securely -- and proving it without a yearly fire drill. \nEmma shares more about how her own founder journey influenced building Rippling's powerful new automated compliance product, available today for SOC 2 Type 1 and 2. \n\n🎙️ Emma Lawler, Product Lead, Rippling on Fondo START pod‍00:57 Introducing Rippling Automated Compliance\n02:07 The evolution of compliance software\n03:02 AI's role in compliance workflows\n03:41 Understanding SOC 2 requirements\n04:20 Compliance and enterprise procurement\n05:03 Building secure operating practices\n05:46 Product development at Rippling\n06:28 Building with a lean team\n07:15 Lessons from founding startups\n08:55 Learning through product pivots\n11:01 AI in modern product development\n12:41 Planning and research with AI\n16:05 Defining product-market fit\n17:56 Using first-party data for compliance\n21:35 Advice for early-stage founders‍Check out www.rippling.com/products/it/automated-compliance","thumbnail_url":"https://img.transistorcdn.com/q-E1hh7K6IS4AfZiNy2p4MYVGcUOO8lQP92h8QbOEOA/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS80NzVj/MDEzNjkxNjU1N2Uy/NDFhMDQ3M2ZhNWI3/NWY0MS5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}