We started as DevOps engineers with a security focus — the people who got pinged at 2am when something broke in production, and the people who had to defend that same production environment in front of an auditor a few months later.
Somewhere along the way we got pulled into ISO 27001 and SOC 2 work. At first it was a chore: spreadsheets, screenshots, control matrices that didn't quite match the cloud we were running. But the more time we spent inside it, the more we realised this is actually the same problem as infrastructure — graphs, evidence, drift, traceability. It just hadn't been treated like a software problem yet.
That's the itch that turned into isops.ai. We're building the compliance copilot we wanted on the operator side of the table — one that understands the AWS account, drafts the evidence, maps the controls, and keeps a human in the loop for every accepted change.