Comply v2 - Adoption Metrics Review

Okay so, I wanted to kick this off with just a quick vibe check — like, two weeks in on Comply v2, how are we all feeling? Because from where I sit, the numbers are honestly better than I expected.

Yeah, I mean, I don't want to jinx it, but I'm feeling pretty good. Like, the launch itself went smooth, which — after everything with the Detect outage in March — was not a given.

Ha, right? But seriously, this was night and day. The redundant processing stuff we put in after that really paid off — the infra held up totally fine on launch day.

Yes, okay, let me just — okay so as of yesterday, April 21st, we've had 847 unique tenants generate at least one on-demand report. That's out of, um, roughly 2,200 eligible accounts.

So like 38, 39 percent adoption in two weeks. That's — that's really solid.

Right, and our internal benchmark for a feature like this at the two-week mark was like 25 percent, so we're beating that by a fair margin.

And the framework breakdown is interesting too — SOC 2 is obviously the most popular, like nearly half of all reports generated, but HIPAA is tracking higher than we expected. We thought PCI DSS would be number two and it's actually number three.

How's the support volume looking, Brian? Like are we getting a lot of tickets on Comply v2 specifically?

So, honestly, it's been pretty manageable. We had a spike on April 8th, day after launch, which was expected — a lot of 'where is this feature' type questions from customers who saw the announcement but hadn't found it in the nav yet.

Yeah, yeah they've basically gone to zero on that specific issue. The ongoing stuff is more like edge cases — a couple reports around ISO 27001 formatting where the control numbering wasn't matching what customers expected, but nothing critical.

Oh, the ISO numbering thing — yeah we know about that, there's a ticket open, it's a minor formatting fix, Tom your team's targeting that in the next patch right?

Yeah it's in the queue, should be out by end of next week, it's not a big lift.

Great, okay — Diana, I wanted to ask, are you seeing any upsell or expansion conversations being driven by Comply v2? Like is it moving the needle at all on Identity or Protect cross-sells?

Oh, yes — this is the part that's really exciting to me. We have at least four conversations happening right now where a customer came in for a Comply v2 demo or was shown the new reporting and then started asking about Identity because they saw the IAM controls surfaced in the SOC 2 report and went 'wait, we don't have that configured, can Aegis do that for us?'

That's exactly what we hoped would happen! Like the compliance report essentially becomes a gap analysis for them.

Yes! And we didn't even have to push it — the report surfaces the gaps and customers are naturally asking 'okay so how do I fix this?' and the answer is often another Aegis module.

Okay I love this, this is really validating the integrated platform story we've been trying to tell. Megan, do you want to put together anything for the exec review next week around this? Like this feels like a good news story.

Yeah, absolutely. I'm thinking a one-pager — adoption numbers, the HIPAA finding, the cross-sell signal from Diana's team. Maybe a quote or two if we have any early customer testimonials.

I can pull a couple from recent QBRs — there's one healthcare company, I won't name them obviously, but their compliance lead basically said this cut their audit prep time in half. That's a really quotable thing.

Oh that's a great quote. Yeah let's get that in there.

Should we also talk about what's next? Like, I know there's been some internal appetite for adding GDPR to the framework list — are we thinking about sequencing that?

So GDPR is definitely on the roadmap, and I think this adoption data actually helps us make the case for resourcing it sooner. If we're seeing this kind of traction with four frameworks, adding GDPR — especially for our European customers — could be really meaningful.

Our European segment has been asking for it since like Q3 of last year, so yeah, the demand is absolutely there.

Okay, I think we've got a lot of good stuff here. Let me just summarize the action items — Megan's putting together the exec one-pager, Tom's team has the ISO formatting fix in the queue, Diana's getting us a testimonial quote, and we'll start the internal conversation about GDPR scoping. Does that feel right?

Yeah that's a great summary Brian, thank you. This was a good call — honestly it's really nice to be in a meeting where we're talking about what's working for a change.