How Much of SOC 2 / ISO 27001 Can You Actually DIY With AI in 2026? I will not promote anything

Post original

for anyone who's gone through SOC 2, ISO 27001, HIPAA etc recently - how much of this can you actually do yourself with AI now? feels like it can handle a lot of the policy stuff, control mapping, basic Q&A. but curious where people still found it worth paying for a proper platform or consultant (scytale, drata, vanta etc) if you diy'd it what caught you off guard? if you used a vendor what actually made it worth it?   submitted by   /u/Agitated-Fly3564 [link]   [comments]