Scytale AI GRC Platform

Scytale has made our SOC 2 process much more structured and manageable. Having the controls, evidence, tasks, and progress in one place makes it much easier for me to understand what needs attention and keeps everything moving. Romy Spencer has been a great partner throughout the process and I highly appreciate her. She's very responsive, helpful, and always available when we have questions or need clarification. Having someone who understands both the compliance requirements and also the practical side of implementing them has been extremely valuable.

Scytale helps us manage the SOC 2 process in a centralized and organized way. It gives us visibility into what is completed, what is still outstanding, and what evidence is required, while reducing a lot of the manual work involved in preparing for the audit.

Scytale has provided a great overall experience, especially when it comes to customer support. The platform is very easy to use for the most part, and it's evolving quickly with new features being released regularly.

Before working with Scytale, we struggled to understand exactly what was required for us for the ISO 27001 audit. The standard is extensive, and it was hard to turn it into concrete actions for our own organization. Thanks to Scytale's advice and dashboard, we now have a clear picture of what needs to be done and where we stand. The dashboard shows which requirements are covered and which are still open. Scytale's team explains what the audit expects. As a result, we are working towards certification with confidence instead of guessing. Combined with the policy templates, this saves us a lot of work and time we would otherwise have spent researching the standard and rewriting documentation from scratch.

Our compliance process has improved by 30 to 40%, which is a great improvement.

I love their customer support, which is very exceptional. I also love the user interface and the ability to streamline evidence collection with clear guidance, which helps my team stay organized and on track.

I experienced a very positive experience while engaging with one of Scytale's customer support representatives, Romy Spencer. She has been a great partner throughout the process. She's very responsive, helpful, and always available when we have questions or need clarification. Direct agent support is very great.

Scytale offers a user-friendly interface that helps simplify the complex compliance processes for SOC 2 and ISO certifications. I also love the ability to streamline evidence collection and provide clear guidance, which helps my team stay organized and on track.

What I miss is the high-level overview that helps us prioritize the action items. The task list tells us what needs to be done, but it's not always clear which item matters most or which ones should come first.

A roadmap or dashboard view that groups tasks by priority, risk, or dependency would make it much easier to plan our work and explain progress to management.

I've been using Scytale for the past two years.

Scytale has been a very stable platform with reliable performance for day-to-day compliance operations.

The scalability has been very great because it scales well as our compliance needs grow. It supports additional frameworks, integrations, and evidence collection without significant performance issues.

That was one of the things we chose Scytale over the alternatives. The customer support was very responsive and helpful. The team provided guidance and gave us solutions to any of our issues that we were facing at the time. They were very helpful overall and I really enjoyed the experience.

Previously, we relied on spreadsheets and manual compliance tracking. We switched to Scytale to automate evidence collection, centralize compliance activities, reduce manual work, and improve our audits.

Scytale was relatively easy to deploy on our AWS environment. The setup and AWS integrations were very straightforward with some initial configuration and access permission required. Overall, the deployment was smooth and required minimal technical support.

The configuration process was straightforward and smooth with the intuitive interface and clear setup steps.

Scytale integrated very seamlessly, making compliance monitoring and evidence collection easier.

Scytale has been very helpful in my organization, giving us a positive return on investment. Scytale has helped improve efficiency by automating compliance tasks and evidence collection. This has been helpful in reducing manual work, saving time during audits, and allowing the team to focus on other priorities, which improves project delivery to our customers.

Scytale's procurement process was straightforward. The pricing and licensing options were clear and communication with the sales team was helpful. Approval and setup required minimal effort.

The pricing and licensing were clear and transparent.

Scytale pricing and licensing were reasonable for the compliance features provided. Setup costs were manageable, and the implementation was straightforward. Clearer pricing tiers and more flexible licensing options would be very beneficial.

Drata and Secureframe.

I would rate Scytale a four out of five. The reason I chose a four out of five is because Scytale has made our SOC 2 process much more structured and manageable. The reason I didn't give it a perfect score and what will take it to a five out of five is that I miss a high-level overview that will help us prioritize the action items.

I feel very confident because Scytale provides strong AI governance and security through automated compliance monitoring, access control, and evidence collection.

Scytale has been very trustworthy and reliable for our needs. Generally, the AI outputs are useful for automating compliance tasks and collecting evidence.

I recommend Scytale highly to organizations looking to automate compliance and simplify audits. Before settling with Scytale, identify your compliance needs, check AWS integration requirements, and evaluate pricing before committing.

Amazon Web Services (AWS)

What do you like best about the product?

I like that Scytale brings everything together in one place and makes the compliance process really easy. The policy templates are helpful because I can customize them instead of writing policies from scratch, and the integrations make evidence gathering simple and straightforward. Scytale has been very responsive, easy to work with, and knowledgeable. I appreciate the regular check-ins, help with pre-checking, and answers to my questions. They made setup very easy and helped bring us along through the process. The platform seems well set up for a company our size and covers the needs we have to get compliant.

What do you dislike about the product?

The employee training section is pretty bare bones. It uses rudimentary forms and doesn’t have a lot of functionality. It’s not a problem for us because we don’t have big needs, but that’s where I saw some rough edges that could be improved.

What problems is the product solving and how is that benefiting you?

I use Scytale to make getting our ISO 27001 compliance really easy. It helps me figure out what needs to happen, write policies, gather evidence, and keep everything in order in one place. Their coordinator pre-checks our work, answers questions, and guides us through the audit.

What do you like best about the product?

The consultant’s support has been exceptional. The UI takes something that’s extremely complex and simplifies it into a to-do-list style workflow, which makes ISO27001/SOC2 compliance feel straightforward. We also found Scytale to be the cheapest end-to-end option among all the platforms we reviewed, with the audit included. We didn’t make much use of the integrations, but I can see them being useful. Performance has been solid as well—no speed issues, and it’s more than fast enough.

What do you dislike about the product?

The manual integrations are definitely a work in progress. i.e. if you wish to ship your own logs, events and so forth

What problems is the product solving and how is that benefiting you?

They helped get us compliant as quickly as possible. We originally estimated it would take 12 months, but we got it done in 3.

What do you like best about the product?

Web platform and assistance. Responsive.

What do you dislike about the product?

AI tool could be refined, although useful. Cancellation of auto-renewal not a toggle from the app: had to retrieve email thread to review terms.

What problems is the product solving and how is that benefiting you?

Prepare for SOC 2 Type II audit, manage third-party audit, help review and manage policies, integrate services' checks with APIs.

What do you like best about the product?

I find Scytale very helpful in making the certification process easy and streamlined. I like the tool and the dashboard because they offer an easier view of what needs to be done. It's supported by technology and also human input, especially the support from Jayden, our project consultant, who keeps the project on track. The dashboard gives an easy overview of statuses and actions needed. The templates and the ability to work with existing policies and procedures without needing to change everything make it a great tool.

What do you dislike about the product?

No dislikes but opportunities to further automate are of course always there.

What problems is the product solving and how is that benefiting you?

Scytale simplifies ISO certification by streamlining processes, aided by technology and human support, providing templates, and feedback. This combination ensures tasks are clear and manageable, making certification straightforward and efficient.

What do you like best about the product?

Hand-in-Hand walk through the process with a well experienced team.

What do you dislike about the product?

Adaptation and integrations for extremely small/on-budget teams.

What problems is the product solving and how is that benefiting you?

Navigate and manage the process of compliance audits (like SOC2)

What do you like best about the product?

First and foremost, I really enjoyed working with the team that supported me throughout the entire process. They provided exceptional support, were highly responsive, patient, understanding of the process, and extremely professional.

The platform itself is also excellent — relatively easy to use and very accessible.

What do you dislike about the product?

One small comment regarding the platform: it was sometimes difficult to know which of the documents I had uploaded were also relevant to other sections. I would expect that if the same document is required for multiple sections, it would automatically be reflected in the relevant sections once I upload it to one of them.

What problems is the product solving and how is that benefiting you?

The management of the submission process with EY was very well handled, with clear guidance on exactly what was required for each section. It was also helpful to be able to leverage existing materials whenever an additional compliance certification was being pursued — for example, using relevant ISO materials as part of the SOC process.

What do you like best about the product?

It helps greatly in overseeing the entire documentation of an ISO certification project. It helps to gather and track both the policies and the evidence, so is a very valuable asset

What do you dislike about the product?

Dislike is a big word, but for me it lacks a roadmap that guides users through the proper sequence and steps of an ISO certification project.

What problems is the product solving and how is that benefiting you?

It takes away a lot of the admin overhead, not just during first setup but also in the on-going recertification effort.

What do you like best about the product?

In the commodity risk management space, data security, process integrity and operational trust are everything. The Forge aHedge SaaS platform takes protecting client data incredibly seriously, which is why we sought out top-tier security certifications and partnered with Scytale to help us reach that goal efficiently.

Going through complex compliance audits can easily derail a team's focus, but the Scytale platform and their dedicated compliance expert, Dian, streamlined the entire process from day one.

The automation capabilities of their platform saved our team countless hours of manual evidence collection, turning what usually takes months into a highly structured, stress-free project. What truly sets them apart, however, is their customer success team. Dian has been incredibly professional, responsive, and deeply knowledgeable — guiding us through every step and pre-audit readiness check with absolute confidence.

Thanks to Scytale, we successfully achieved our security attestations ahead of schedule and with minimal disruption to our daily operations. They are an invaluable partner for any startup company looking to build trust with enterprise clients, and we cannot recommend them highly enough.

What do you dislike about the product?

I felt that assumptions were made during the sales process regarding the knowledge of the prospect (i.e. we the client) and hence some nuances (specifically around SOC2 trust service principles) were missed. Invoicing via AWS Marketplace was also annoying but it's moreso a slight inconvenience more than anything else.

What problems is the product solving and how is that benefiting you?

Scytale is opening offices in other regions where the timezone is friendlier which will benefit both Scytale and us - Dian (our consultant) has been very accommodating and made sure this has not been a problem nor blocker for us though.

What do you like best about the product?

I appreciated Scytale's communication, as they were always available whenever we needed them. I think they have a very well-thought-out process that can work for any business looking for SOC 2 compliance.

What do you dislike about the product?

They are a bit expensive.

What problems is the product solving and how is that benefiting you?

Scytale helps us navigate the SOC 2 certification process, making it easy to track progress and handle paperwork with an auditor's support.