Start with Deixic
Preparing for your first audit? Connect your tools and Deixic will help you check what’s needed, fix gaps, and keep the evidence.
Start your first SOC 2Grow your business. Not your workload.
Full-stack compliance and security agents.
Get ready for your next audit and give your team more time to build. Deixic helps fix security issues, remove old access, and gather the evidence your auditor needs.
- 01
Win bigger customers
Be ready for the security requirements that come with your next big customer.
See the audit evidence - 02
Keep your team focused
Get help with access changes and security fixes, so your team has more time to build.
See an example - 03
Keep compliance current
Deixic keeps checking your systems and helps you fix issues as your company grows.
See what Deixic helps with
Example workflow · Employee offboarding
Someone’s leaving. We’ll help with the offboarding.
Deixic finds their remaining access and helps remove it. Your team approves sensitive changes, and we check that the access is gone.
- Trigger
- HR termination recorded
- Owner
- Security
- Done when
- The listed access is revoked and read back.
Result The listed access is removed and verified. GitHub account deletion was not authorized.
07 Closed
- Listed employee access revoked and independently verified
- Then: evidence attached to CC6.2 · control rechecked · passing
- Changes
- 4
- Approvals
- 1
- Denied
- 1
- Read-back checks
- 5
| System | Desired | Observed |
|---|---|---|
| HR systemTerminated | Terminated | Terminated |
| Google WorkspaceSuspended | Suspended | Suspended |
| GitHubNot a member | Not a member | Not a member |
| AWS access keyInactive | Inactive | Inactive |
| AWS prod adminNot assigned | Not assigned | Not assigned |
Pick up where you left off.
Take the time you need to review a change. Deixic keeps your progress and the earlier decisions, ready for when you come back.
Connect your existing platform
Keep the platform your team uses. Deixic helps you fix the issues it finds and sends the evidence back.
Connect your compliance platformExample completed jobs
Security work we help you finish.
- 1CC8.1Required reviews enabled on 12 repositoriesFixed
- 2CC6.3Removed unused administrator roleFixed
- 3CC6.1Enforced MFA for 4 accountsFixed
- 4CC6.2Removed leftover access for terminated employees; terminations now revoke itFixed
- 5CC6.2Removed 3 stale IAM usersFixed
- 6CC7.2Enabled CloudTrail log file validationFixed
- 7CC6.3Rotated 2 AWS access keys older than 90 daysFixed
- 8CC6.2Removed persistent administrator access for 2 engineersApproved by Security
- 9CC6.2Terminated employees lose access on the termination eventYour decision
You decide what Deixic can change.
- ObserveRead group memberships, list access keys, pull audit logsRuns
- ChangeDeactivate a key, enable branch protection, delete an IAM user unused for 180 daysRuns inside your written policy
- SensitiveRemove production admin access, change an identity policyWaits for a named approver and a reason
- Outside authorityDelete an account used in the last 180 days, change who approvesNot run; sent to you as a decision
Deixic checks your rules before making a change. The record shows what it did without exposing your credentials.
Compliance platforms Deixic connects toSOC 2 by systemWhat Deixic can access in your systemsOur own security review materials
We don’t call something fixed until we’ve checked that it actually worked.
Job WRK-2291 · CC6.2 evidence
Closeddx_01K7A2R9QH4T6MZXW3NB8CJ5KD
- Desired state
- t.lindqvist: Workspace suspended, GitHub membership removed, AWS key inactive and admin unassigned
Changes · 4
- Google WorkspaceAccount status
Active→ SuspendedOffboarding policy · 14:07:13 - GitHubOrganization membership
Owner→ RemovedOffboarding policy · 14:07:15 - AWSAccess key …Q7XF
Active→ InactiveOffboarding policy · 14:07:18 - AWSAdministratorAccess on prod
Assigned→ Unassignedm.chen, Security · 14:07:22
Not run · 1
- GitHubDelete the accountUsed in the last 180 days · sent to Security
Read back · 5
- GitHubOrganization membershipNot a member · 14:07:51
- AWSAccess key statusInactive · 14:07:56
- AWSPermission set assignmentsNone, on the second read · 14:08:37
- HR, WorkspaceAccount statusTerminated, suspended · 14:08:41
- PlatformCC6.2 test re-runPassing · 14:08:44
Approved by m.chen, Security, at 14:07:12: “Termination confirmed in the HR system”
Signed · linked to the previous record dx_01K7A2R8WZ…
Let’s take something off your plate.
Tell us what you’re working on. We’ll show you how Deixic helps.
Request early access