Scytale AI GRC Platform

What do you like best about the product?

Great customer service. Working with Caitlin has been amazing. The online dashboards are extremely well built and shows everything you need to know.

What do you dislike about the product?

A lot of information to digest. The dashboards are great but can sometimes be overwhelming.

What problems is the product solving and how is that benefiting you?

We are trying to get SOC2 certification. This will allow us into many markets and be ahead of our competition.

What do you like best about the product?

As a small team, we didn't just need a checklist, we needed someone to keep us on track and tell us what to work on next, and that's exactly what Scytale did. Our Customer Success Manager, Oliver Newell, was proactive throughout, sending us clear, prioritized action item lists every week (which controls needed evidence, what could be marked "in progress," exact links to upload to) so we always knew what came next instead of guessing.

The initial setup; getting everything documented across policies, risks, vendors, RBAC, employee agreements, etc. — was a heavy lift, but once that foundation was in place, evidence collection became second nature and our team got genuinely hands-on and willing to go the extra mile. Audit time was also far less stressful than we expected: the Scytale team managed the process end-to-end and only reached out when they specifically needed something from us, so it never felt like we were carrying the audit ourselves.

The platform itself covers everything we needed, and once our team got oriented, it became our go-to for staying on top of compliance day to day.

What do you dislike about the product?

To be fair, the heavy documentation lift (policies, risk register, vendors, RBAC) is inherent to ISO 27001 and SOC 2 themselves, not really a Scytale downside. The least helpful part was getting oriented on the platform itself early on, and occasionally an integration wouldn't sync correctly. That said, the support team and our GRC manager were always quick to jump in and help sort it out, so it never held us up for long.

What problems is the product solving and how is that benefiting you?

We used Scytale to achieve both ISO/IEC 27001:2022 and SOC 2 Type II certification within a short timeframe, and to keep maintaining them going forward. We considered handling this in-house, but decided Scytale should be our ongoing compliance partner instead, since it means we consistently maintain our certifications without pulling focus from our core business. For our clients, this translates directly into confidence that our services are secure and well-governed, which helps us stand out and differentiate ourselves in a competitive market.

What do you like best about the product?

My account representative is very helpful and the portal is easy to use.

What do you dislike about the product?

So far nothing jumps out at me. The team has been great to work with

What problems is the product solving and how is that benefiting you?

We are a small company that is quickly scaling in the healthcare space and Scytale is helping us get our SOC 2 Type II in order at a reasonable cost.

What do you like best about the product?

The Scytale staff, particularly Liya and Romy, that assisted us throughout the entirety of our certification process were super helpful, available, and overall exhibited amazing customer service!

What do you dislike about the product?

I found some of the user interface on the website to be a little difficult to navigate at times. Once you figure it out, you've got it, but some things are in interesting places.

What problems is the product solving and how is that benefiting you?

Scytale assisted us with getting our SOC2 certification, which is allowing us to grow our business.

What do you like best about the product?

Caitlin Brown has been a great support throughout, always willing to assist, provide guidance, and go the extra mile when needed. Her kindness, patience, and willingness to help have made a real difference, and I truly appreciate all the support she has given.

What do you dislike about the product?

The system feels very technical, and it could be made more user-friendly and easier to navigate.

What problems is the product solving and how is that benefiting you?

Pulling evidence together, gentle reminders, consistent encouragement, tracking outstanding items, managing the back-and-forth. Has been a real challenge. Having a central place for that, managed by someone who knows the platform well, has taken a lot of the chaos out of what used to be a stressful yearly exercise.

What do you like best about the product?

Dian Strydom has been a great support throughout, always willing to assist, provide guidance, and go the extra mile when needed. His kindness, patience, and willingness to help have made a real difference, and I truly appreciate all the support he has given.

What do you dislike about the product?

It is mostly technical. One example is policies changing versions without any edits being made, which is not very convenient.

What problems is the product solving and how is that benefiting you?

Scytale helps us streamline and manage our SOC 2 Type II and ISO 27001 compliance processes. It reduces the amount of manual work involved in collecting and organising evidence, tracking policies and controls, and preparing for audits. Having everything in one place also makes it easier to monitor our compliance status and identify any outstanding items. Overall, it saves us time, provides better visibility into our compliance activities, and makes the audit process more structured and manageable.

However, the Scytale tool alone would not make such a significant difference without the support of Dian Strydom. Dian has been an incredible support throughout the process, providing guidance, answering questions, and helping us navigate the platform and compliance requirements. His knowledge, responsiveness, and willingness to go the extra mile have made a huge difference and have been a key part of our success with Scytale.

What do you like best about the product?

The support and hand-holding throughout the process, with clear explanations and understanding of how startups work

What do you dislike about the product?

Not much, the platform has some small tweaks that could be improved (mainly the people and inventory management stuff)

What problems is the product solving and how is that benefiting you?

Both the process as well as a lot of the terms are not native to us, and Scytale helps both translate, understand and mitigate all of them without us having to spend previous time on learning the process and terms

What do you like best about the product?

I like Scytale's evidence collection system, which helps to significantly reduce the manual workload involved. I'm particularly appreciative of their CISO As-a-Service, with Kyle Morris being a standout feature in my experience. Also, the cyber security awareness yearly training is very valuable.

What do you dislike about the product?

I think Scytale could improve by extending their evidence collection to cover all of our systems, as we still do some manual work. It would also be beneficial if they added more integrations or supported API access, which would really help in streamlining the evidence collection process.

What problems is the product solving and how is that benefiting you?

Scytale reduces manual evidence collection, ensuring more systems are covered. It's also great for cybersecurity awareness training.

What do you like best about the product?

I find Scytale well organized, which makes it very easy to track progress. The account manager helps considerably with review and preparation. I also appreciate the built-in policies, as they ensure that nothing is missed and make it simple to adapt and integrate templates to meet our needs. Additionally, Scytale's integration with tools like GitHub and Azure helps in tracking everything automatically, and the initial setup was pretty easy.

What do you dislike about the product?

nothing

What problems is the product solving and how is that benefiting you?

Scytale helps us organize and track SOC 2 audits by getting controls ready, reviewing and collecting data, and using built-in policies to avoid missing information.

What do you like best about the product?

I like the automatic evidence gathering and the provision of evidence for a few controls that Scytale offers. The daily sync and the feature where one integration connects to multiple controls are especially useful. The process becomes more efficient, and the weekly meetings provided by Scytale are very beneficial in navigating SOC-2 compliance. I would like to specially thank Liya Sarfudin for helping our team throughout the process and ensuring everything is inlined with our timelines. Weekly meetings with her were very useful to prioritize and plan the week ahead.

What do you dislike about the product?

The AI model for checking evidence could use some improvement. It would be great if they could also provide controls tailored for small startups that don't use big cloud providers like AWS or GCP but instead rely on third-party cloud platforms or PaaS software. Initially, it was a bit difficult to understand different aspects of the Scytale platform, but it got easier as I got the hang of it.

What problems is the product solving and how is that benefiting you?

Scytale helps navigate SOC-2 compliance with automatic evidence gathering and useful weekly GRC meetings. The daily syncs and integration connecting to multiple controls are especially effective.