Secureframe now offers GDPR and CCPA privacy frameworks.

Top Six Security Bad Habits, and How to Break Them

How to level-up your e-commerce cyber security

Security and compliance: A missed growth opportunity for early-stage startups

Ensuring compliance in the modern enterprise [Q&A]

Secureframe Strengthens Executive Leadership Team To Accelerate Next Phase of Hypergrowth

Secureframe makes it onto The SMBTech 50 List

Secureframe part of On Deck's Top 100 Companies of 2022

Shrav Mehta, Secureframe: “Navigating security and privacy compliance is a major headache”

Google and Kleiner Perkins Backed Secureframe After Seeing This Pitch

Secureframe Raises $56 Million to Accelerate Automated Security and Compliance Processes

Secureframe secures $56M for a platform that automates an enterprise’s compliance

Millions of dollars pour into security compliance startups

Secureframe Raises $56M in Series B Funding

17 Bay Area startups score a total of over $1B in midweek deals

6 Must-Know Compliance Statistics for 2022

10 Compliance Statistics to Know for 2022

Fintechs and compliance firms launch data security framework

Tech consortium launches new data security standards body

Plaid leads effort to raise the bar on fintechs’ data security

How do you measure the impact of security?

Every Startup Needs to Use These Four Critical Pieces of Technology

Secureframe Raises $18M in Series A Funding

Secureframe raises $18M Series A to simplify cybersecurity compliance

Secureframe lands $18M to help companies comply with cybersecurity standards

Secureframe raises $4.5M to help businesses speed up their compliance audits

These Enterprise Tech Startups Are Hiring During COVID-19

The latest news, updates, and stories about Secureframe from all over the web.

Newsroom | Secureframe

The latest news, updates, and stories about Secureframe.

Secureframe makes it fast, easy and cost efficient for companies to achieve and maintain privacy, security and compliance in accordance with CCPA

July 20, 2022—San Francisco—Secureframe, the all-in-one platform for continuous security compliance, today announced it has added the California Consumer Protection Act (CCPA) privacy framework to its suite of governance, risk and compliance (GRC) solutions. 

Secureframe now enables organizations doing business in California to meet, maintain and demonstrate accountability for CCPA requirements, helping reduce the risk of penalties and civil lawsuits. Secureframe enables businesses to set up the right policies and procedures to deliver and track employee training, demonstrate compliance with CCPA regulations and stay current with the latest CCPA requirements so they can achieve and maintain privacy, security and compliance with speed and ease. 

“CCPA is a recent law that has not been given enough attention, yet the fines can be significant as they are per violation, without a cap and can be applied retroactively, so companies need to be compliant today,” said Shrav Mehta, CEO, Secureframe. “With changes coming in 2023 and anticipated stricter enforcement by California’s regulators, Secureframe’s CCPA privacy framework, paired with our in-house compliance experts, makes it fast, easy and cost efficient for all businesses to achieve and maintain privacy, security and compliance.”

“We used Secureframe’s security compliance platform to get both SOC 2 and ISO 27001 compliance and we’ve been impressed by how quickly and easily we got audit ready, and by how much expert support we received from Secureframe throughout the process,” said Yingsong Wang, Information System Security Engineer at Haystack Team Inc. “The security training videos Secureframe provides have made tracking compliance across our employees incredibly easy. We're so excited that Secureframe has expanded its service offerings to GDPR and CCPA. We are confident Secureframe will continue to help Haystack achieve and maintain its future compliance needs seamlessly with the same level of support."

Secureframe’s launch of its CCPA framework enables organizations, their executives and, specifically, Chief Information Security Officers (CISOs) to:

Stay focused on serving customers and growing their business: The Secureframe security compliance platform, combined with the CCPA privacy framework, helps organizations and their compliance officers achieve and maintain CCPA compliance so they can stay focused on serving their customers and growing their businesses. 

Have peace of mind that they are staying current with the latest CCPA requirements: As CCPA regulations change, Secureframe updates its frameworks, communicates those changes to customers and shows any gaps in compliance so organizations and their compliance officers have the tools, information and reporting they need to stay compliant.

Track that all employees have completed CCPA training to stay compliant with the law: Secureframe delivers its own proprietary training that can be assigned to specific users and tracked within its platform to enable organizations to stay compliant with CCPA requirements. 

The California Consumer Protection Act (CCPA) went into effect on January 1, 2020 and while no fines have been publicly issued as of June 2022, for-profit organizations that target or collect the personal data of California residents must follow this law. Organizations that fail to comply with CCPA can be fined up to $2,500 per unintentional violation and $7,500 per intentional violation, as well as face civil lawsuits from consumers. For more information on CCPA, read the Secureframe blog, CCPA Compliance: A Guide to California’s Data Privacy Law.

Secureframe’s new CCPA privacy framework joins the General Data Protection Regulation (GDPR) privacy framework, both now generally available today. Organizations interested in achieving and maintaining their organization’s CCPA and/or GDPR compliance may request a demo at https://secureframe.com/request-demo.

Secureframe is the leading all-in-one platform for continuous security compliance. Secureframe makes achieving and maintaining the most rigorous global privacy, security and compliance standards, including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR and CCPA, fast, easy and cost effective. With more than 100 integrations to core services such as AWS, Google Cloud, Azure, Github, JAMF and Okta, Secureframe automatically and continuously collects audit evidence, runs and tracks security awareness training, monitors infrastructure and more to make compliance fast and easy for hundreds of customers, including AngelList, Fabric, Doodle, Dooly, Lob, Slab and Stream.

Secureframe Adds CCPA Privacy Framework to Industry-leading GRC Platform to Help Customers Better Serve California-based Residents

Secureframe Adds CCPA Privacy Framework to Industry-leading GRC Platform

Secureframe makes it fast, easy and cost efficient for companies to achieve and maintain privacy, security and compliance in accordance with GDPR

July 20, 2022—San Francisco—Secureframe, the all-in-one platform for continuous security compliance, today announced it has added the General Data Protection Regulation (GDPR) privacy framework to its suite of governance, risk and compliance (GRC) solutions. 

Secureframe now enables EU-based organizations and those collecting the personal data of EU citizens to meet, maintain and demonstrate accountability for GDPR requirements, helping reduce the risk of penalties of up to €20M or 4% of previous year revenues. Secureframe enables businesses to set up the right policies and procedures to deliver and track employee training, automate GDPR evidence collection and stay current with the latest GDPR requirements so they can achieve and maintain privacy, security and compliance with speed and ease. 

“Changes in regulations and technology are making GDPR compliance increasingly difficult, forcing businesses collecting data on EU citizens to waste valuable time and money on efforts to simply stay compliant and avoid fines,” said Shrav Mehta, CEO, Secureframe. “Secureframe makes the GDPR compliance process fast, easy and cost effective so businesses can free up resources to focus on what matters most: serving their customers and growing their business.”

"We needed to get GDPR compliant quickly to close an enterprise deal. Secureframe was our trusted partner who helped us navigate and accelerate the process," said Dominic Whyte, co-founder and CEO, Fillout.com. “We were really impressed with the Secureframe platform and how the in-house compliance experts and proprietary GDPR training helped us achieve compliance in less than two weeks."

Secureframe’s launch of its GDPR framework enables organizations, their executives and, specifically, Chief Information Security Officers (CISOs) to:

Focus on serving customers and growing their business: The Secureframe security compliance platform, combined with the GDPR privacy framework, helps organizations and their compliance officers achieve and maintain GDPR compliance so they can stay focused on serving their customers and growing their businesses.

Stay current with the latest GDPR requirements to maintain compliance with the law: As GDPR regulations change, Secureframe updates its frameworks, communicates those changes to customers and shows any gaps in compliance so organizations and their compliance officers have the tools, information and reporting they need to stay compliant.

Track that all applicable employees have completed GDPR training to stay compliant with the law: Secureframe delivers its own proprietary training that can be assigned to specific users and tracked within its platform to enable organizations to stay compliant with GDPR training requirements. 

The EU’s General Data Protection Regulation (GDPR) went into effect May 25, 2018 and requires data processors and controllers that target or collect personal EU resident data to uphold various privacy and security requirements. For more information on GDPR, read the Secureframe blog: What is GDPR Compliance? Understanding the Essentials of GDPR.

Secureframe Adds GDPR Privacy Framework to Industry-leading GRC Platform to Help Customers Grow EMEA Revenue

Secureframe Adds GDPR Privacy Framework to Industry-leading GRC Platform

Tech and SaaS marketing executive Greg Perotto joins Secureframe as CMO, bringing 25 years of leadership in building brand and driving growth at New Relic, TripActions, DocuSign and others operating in highly regulated industries

Legal, security and privacy leader Kyle McLaughlin joins Secureframe as General Counsel, bringing 15 years of experience supporting governance, risk and compliance programs at Salt Security, Cisco and Duo Security

Tech marketing leader Mat Rider joins Secureframe as VP of Growth Marketing with 15 years of demand, digital experience 

July 18, 2022—San Francisco—Secureframe, the leading all-in-one platform for continuous security compliance, announced it has expanded its executive team, adding top tech, marketing and legal talent to its ranks. The additions of Greg Perotto as Chief Marketing Officer, Kyle McLaughlin as General Counsel and Mat Rider as VP of Growth Marketing position the company to seize the massive market opportunity ahead in automating and streamlining governance, risk and compliance (GRC) for organizations of every size, industry and geography.

“I’m both proud and humbled by the continued infusion of top talent across Secureframe with Greg, Kyle and Mat as the latest examples of industry-leading executives joining our mission-driven company and culture,” said Shrav Mehta, CEO, Secureframe. “Secureframe truly has the best team in tech, positioning us well to win with our customers and the market.”

“Secureframe and CEO Shrav Mehta continue to demonstrate the strength of the company’s vision, technology and culture in attracting top talent to join on their mission to transform security and compliance,” said Mike Viscuso, partner at Accomplice and co-founder of Carbon Black. “With strong market acceptance and momentum, Secureframe is well positioned to execute on its strategic plan and capture the market with its modern, all-in-one security compliance platform.” 

Perotto’s experience building brand and driving growth at software observability leader New Relic (NYSE: NEWR), travel and expense management innovator TripActions, eSignature standard DocuSign (NASDAQ: DOCU) and others serving customers in highly regulated industries will help accelerate execution of the company’s strategic plan and expand into new markets. 

“In today’s modern, digital world, every company is a potential customer of Secureframe as security and compliance are foundational to every organization’s success, ability to serve customers and grow revenue,” said Greg Perotto, CMO, Secureframe. “Like what DocuSign did for transacting business digitally and TripActions did for modernizing T&E management, Secureframe streamlines the process and automates the work, making it faster, easier and more cost efficient for organizations to achieve and maintain compliance. Secureframe’s strong product-market fit paired with an exceptional culture and top talent across the company position us well to continue our hyper-growth as the leader in security compliance.”

“We’re thrilled to have Greg join our executive team, bringing a wealth of experience in creating highly admired brands that deliver tremendous value to their customers,” said Seema Kumar, COO, Secureframe. “Greg not only offers a track record of success in marketing B2B SaaS platforms to Secureframe, he is a values leader who inspires and empowers a high performance culture focused on customers and their success.”

Perotto’s focus as CMO will be on growing brand awareness and affinity, driving demand generation, and inspiring product adoption and usage. Previously, Perotto led corporate marketing at New Relic, TripActions, Hootsuite and DocuSign. Earlier in his career, he led communications at T-Mobile US (NASDAQ: TMUS) and supported tech PR clients at Fleishman-Hillard, part of Omnicom Group (NYSE: OMC). Perotto earned his certificate of business excellence from Columbia Business School, and his bachelor’s degree in business and marketing from the University of Puget Sound.

Kyle McLaughlin joins Secureframe as General Counsel

As General Counsel, McLaughlin leads all legal, risk and privacy functions at Secureframe. He brings 15 years of legal experience to his role with expertise in security and trust, including SOC 2, FedRamp and GDPR/CCPA compliance. Previously, he served as Head of Legal at Salt Security, senior corporate counsel at Cisco (NASDAQ: CSCO) and senior counsel at Duo Security where he was a critical member of the due diligence team during Cisco’s $2.35 billion acquisition of the company. 

McLaughlin also served as an assistant attorney general and transactions section head managing matters related to technology, intellectual property, procurement and economic development for the State of Michigan. There he helped drive the State’s digital transformation efforts to the cloud. McLaughlin earned his J.D. at Wayne State University Law School and his bachelor’s degree in Political Science and English at the University of Michigan. McLaughlin is a charter member of TechGC, the independent, invitation-only peer community for GCs in tech. 

Mat Rider joins Secureframe as Vice President of Growth Marketing

As VP of Growth Marketing, Rider is responsible for the company’s demand generation, digital marketing, events and marketing operations. Rider brings 15 years of experience to Secureframe, including marketing leadership roles at New Relic, TripActions, BetterCloud, MongoDB (NASDAQ: MDB) and DocuSign. Previously, Rider served agency clients as a strategic brand manager at Banyan Branch and as senior strategy consultant at Z Squared.

Today’s announcement is part of a series of significant growth milestones for Secureframe and continues the recent infusion of top talent across the company. Earlier this year, the company secured $56 million in Series B funding led by Accomplice with participation from Kleiner Perkins, Optum Ventures, Kaiser Permanente, Gradient Ventures, Soma Capital, Gaingels, Impatient Ventures and Flexport. For individuals interested in joining Secureframe’s high performance team, visit https://secureframe.com/careers. 

Secureframe is the leading all-in-one platform for continuous security compliance. Secureframe makes achieving and maintaining the most rigorous global compliance standards, including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR and CCPA, fast, easy and cost effective. With more than 100 integrations to core services such as AWS, Google Cloud, Azure, Github, JAMF and Okta, Secureframe automatically and continuously collects audit evidence, runs security awareness training, monitors infrastructure and more to make compliance easy for hundreds of customers, including AngelList, Fabric, Doodle, Dooly, Lob, Slab and Stream.

Secureframe announced today that it is expanding its team with key leadership hires. Gregory Perotto has joined the company as Chief Marketing Officer (CMO), Kyle McLaughlin as General Counsel, and Mat Rider as VP of Growth Marketing.

Secureframe Adds Top Tech, Marketing, and Legal Talent to Seize Massive Market Opportunity in Governance, Risk, and Compliance

Secureframe Adds Top Tech, Marketing, and Legal Talent

Secureframe Adds Top Tech, Marketing, and Legal Talent to Seize Massive Market Opportunity in Governance, Risk, and Compliance to Accelerate Revenue Growth

Secureframe announced today that it is expanding its team with key leadership hires. Drew Daniels has joined the company as Chief Information Security Officer (CISO) and Cory Thomas as VP of Engineering. Their combined experience will help the company accelerate its strategic plans to serve new markets and companies around the world.

"Our primary focus is to provide our customers with the best experience possible—and hiring top talent is a key part of this formula," said Shrav Mehta, CEO, Secureframe. "Drew’s proven track-record leading security teams, and Cory’s experience building products at a number of high-growth startups, are precisely what we need during this momentous time in our company and market. Their contributions will undoubtedly help us execute on our vision of becoming the leading compliance automation provider." 

Drew brings more than two decades of security experience to Secureframe. Prior to joining, Drew served as CIO and CISO at Druva, where he reshaped the entire security program to a proactive culture with emphasis on automation, self-service and transparent metrics. He also grew the overall team by 3x and added predictability to compliance and governance that included FedRAMP authorization. Before that, he was CIO and CISO at Qubole. There, he defined the security program, hired and built the team. Drew also oversaw SOC 2, HIPAA, GDPR, ISO 27001 and implementation of comprehensive security across four clouds AWS, Azure, GCP and Oracle. Previously, Drew held a number of security-related roles at a number of prominent companies, including Microsoft, Oracle, Netsuite and more. He is also a published author, board member, strategic advisor and angel investor.

Cory Thomas has spent close to 20 years building SaaS applications and engineering teams. Before Secureframe, he was a two-time VP Engineering. First at Xello, growing the team four-fold while shaping engineering culture and best practices. Then at Copper, rebuilding engineering for their next phase of growth. In-between he served as Director of Engineering at InVision where he led teams delivering InVision’s Cloud, Freehand, DSM and Studio products along with partner integrations. 

Today’s announcement is part of a series of significant growth milestones for Secureframe. Earlier this year, the company secured a $56 million Series B funding round led by Accomplice with participation from Kleiner Perkins, Optum Ventures, Kaiser Permanente, Gradient Ventures, Soma Capital, Gaingels, Impatient Ventures, and Flexport. In 2021, Secureframe experienced 10x ARR and 7x customer growth, reflecting global demand for the company’s best-in-class automated compliance solution.

Secureframe is the leading platform for security compliance automation. Secureframe makes obtaining and maintaining the most rigorous global compliance standards, including SOC 2, ISO 27001, HIPAA, and PCI DSS, easy and effortless. With over 100+ integrations to core services such as AWS, Google Cloud, Azure, Github, JAMF, and Okta, Secureframe automatically and continuously collects audit evidence, runs security awareness training, monitors infrastructure, and more. Secureframe has made compliance easy for hundreds of companies including Stream, Dooly, Lob, Instabase, Slab, and Doodle.

Secureframe announced today that it is expanding its team with key leadership hires. Drew Daniels has joined the company as Chief Information Security Officer (CISO) and Cory Thomas as VP of Engineering.

Secureframe today announced it has raised a $56 million Series B funding round, bringing the company’s total amount raised to $79 million—in just under two years since its launch in 2020. Accomplice led the round with participation from Kleiner Perkins, Optum Ventures, Kaiser Permanente, Gradient Ventures, Soma Capital, Gaingels, Impatient Ventures, and Flexport. Notable angels that joined the round include Jon Oberheide (Duo Security CTO), Ash Devata (VP / GM for Zero Trust and Duo at Cisco), Leore Avidar (Alt CEO). Michael Viscuso, Partner at Accomplice, will join the company’s Board of Directors. 

"Secureframe is onto something big,” said Mike Viscuso, Partner at Accomplice and founder of Carbon Black. “They have the vision, the talent, and the technology to drive major transformation in continuous compliance certification. What’s most exciting to me is they’ve already become the go-to solution for startups and high-growth companies who want to automate their entire compliance portfolio. It’s clear why Accomplice is leading Secureframe’s Series B, and I’m thrilled to serve on the board of directors to help play a role in the company’s continued growth.”

Secureframe also announced today that Salesforce veteran Seema Kumar has joined as Chief Operating Officer and Evan Horibe as the Vice President of Sales. Kumar joins Secureframe from New Relic where she served as Chief Marketing Officer (CMO). Before that, she led marketing at Salesforce and was instrumental in launching the company’s security and compliance offering. In her new role, she will oversee all sales, marketing, customer success and people operations for Secureframe. Horibe joins from Brandfolder where he was Head of Sales and will be responsible for scaling sales operations in the US and Europe. He brings over 15 years of B2B sales experience having held roles at leading companies such as MongoDB, Xactly, Experian and more. 

Today’s announcements come on the heels of unprecedented growth for Secureframe, marked 10x ARR growth in 2021. Secureframe also experienced 7x customer growth with the addition of companies such as Stream, Dooly, Lob, Instabase, Slab, and Doodle to its growing customer roster. Additionally, the company recently introduced a number of best-in-class certification products to its portfolio, including HIPAA and PCI DSS compliance. 

Secureframe today announced it has raised a $56 million Series B funding round, bringing the company’s total amount raised to $79 million

Secureframe Raises $56M to Accelerate Automated Security & Compliance Processes

Secureframe, the leading provider of security and compliance automation software, today announced the launch of its automated compliance certification capabilities for the Health Insurance Portability and Accountability Act (HIPAA) and the Payment Card Industry Data Security Standard (PCI DSS). Secureframe streamlines and accelerates the PCI DSS and HIPAA certifications, reducing the time to compliance from weeks rather than months. 

“Enforcing the privacy and security of customer data is not a nice-to-have—it’s a business imperative,” said Shrav Mehta, CEO of Secureframe. “For years, companies have struggled to achieve and stay on top of compliance due to complex and laborious processes. As a result, many companies either drop out of the process before completion or fall out of compliance due to oversight. The expansion of our certification portfolio is a reflection of our commitment to helping our customers meet all compliance needs under one solution.”

According to HIPAA Journal research, there were 70 reported data breaches of 500 or more medical records in July, making it the fifth consecutive month where data breaches have been reported at a rate of 2 or more per day. While advances in technologies have enabled better and quicker access to healthcare information, it’s critical to implement safeguards to protect sensitive personal and health information. Secureframe provides a step-by-process automated process, coupled by a team of compliance experts, to simplify the HIPAA compliance certification process, saving organization’s time while avoiding violation fines. 

“Healthcare organizations have become increasingly reliant on technology and the cloud to improve patient care, which has made HIPAA compliance more important than ever,” said Nicholas Paschal, CEO of Alpine IQ. “But the certification process as it exists today is incredibly labor intensive and time consuming. Not only has Secureframe enabled us to stay compliant while growing our organization; it’s helped us avoid penalties by monitoring ongoing risk.”

According to IBM and Ponemon Institute “The annual Cost of a Data Breach Report”, data breach costs rose from USD 3.86 million to USD 4.24 million in 2021, the highest average total cost in 17 years. With the rise in data breaches comes the rise in changes and rules to the PCI DSS. Becoming PCI compliant is critical to maintaining proper account security for any businesses that processes, stores, or transmits credit card data. Secureframe automates the entire lifecycle of the certification process, saving organizations hundreds of hours while upholding best-in-class PCI DSS standards. 

"PCI DSS reporting and documentation requirements play a big role in the costs to satisfy and maintain a larger PCI DSS Level 1 program," said Colin Luce, CEO of Basis Theory. "Secureframe significantly simplifies the complex, confusing, and work-intensive administrative tasks associated with maintaining and updating our internal PCI policies."

Secureframe is the platform for automated compliance. Secureframe enables organizations to obtain and maintain global compliance standards through product integrations with core services such as AWS, Google Cloud, Azure, Github, JAMF, and Okta. Secureframe continuously collects audit evidence, runs security awareness training, manages security questionnaires, and monitors infrastructure—all automatically. Get compliant the smart way at secureframe.com.

Secureframe Launches Automated Compliance Certification for HIPAA and PCI DSS

Secureframe in the News

Top Six Security Bad Habits, and How to Break Them

How to level-up your e-commerce cyber security

Security and compliance: A missed growth opportunity for early-stage startups

Ensuring compliance in the modern enterprise [Q&A]

Secureframe Strengthens Executive Leadership Team To Accelerate Next Phase of Hypergrowth

Secureframe makes it onto The SMBTech 50 List

Secureframe part of On Deck's Top 100 Companies of 2022

Shrav Mehta, Secureframe: “Navigating security and privacy compliance is a major headache”

Google and Kleiner Perkins Backed Secureframe After Seeing This Pitch

Have a press or media inquiry?

Why Secureframe?

Integrations

SOC 2

HIPAA

ISO 27001

PCI DSS

GDPR New

CCPA New

Blog

Help Center

Books

HIPAA Training

SOC 2 Hub

Blog

Blog

Blog

About

Careers We're Hiring

Security

Newsroom

Auditors

Partners

Secureframe in the News

Top Six Security Bad Habits, and How to Break Them

How to level-up your e-commerce cyber security

Security and compliance: A missed growth opportunity for early-stage startups

Ensuring compliance in the modern enterprise [Q&A]

Secureframe Strengthens Executive Leadership Team To Accelerate Next Phase of Hypergrowth

Secureframe makes it onto The SMBTech 50 List

Secureframe part of On Deck's Top 100 Companies of 2022

Shrav Mehta, Secureframe: “Navigating security and privacy compliance is a major headache”

Google and Kleiner Perkins Backed Secureframe After Seeing This Pitch

Have a press or media inquiry?