Shrav Mehta

Shrav Mehta is the founder and chief executive of Secureframe, a company that automates the work of earning security certifications such as SOC 2, ISO 27001, HIPAA, and PCI DSS. He grew up in the San Francisco Bay Area, released his first mobile apps as a teenager, and started Secureframe at 23 after watching startups struggle through compliance audits by hand.

A teenage coder

He began coding around age nine. In high school he got into his school’s scheduling software and ended up in the principal’s office, according to Alejandro Cremades’ profile. As a teenager he built about ten Android apps.

Templates that turned into a company

He later worked at fast-growing startups including Scale, Pilot, Lob, and Hired, and kept seeing SOC 2 audits done manually. He began sharing his templates and guides with other founders and asked whether they would use software that automated the work. A month later one of them called to ask when they could use it. “I quit my job that week to build Secureframe,” he told citybiz. He started the company in 2019, and by the time a first version shipped, 30 to 40 companies were waiting to use it.

A TurboTax for security compliance

He describes SOC 2, ISO 27001, HIPAA, and PCI as overlapping checklists: “all of these frameworks are just giant lists of things you have to do in order to secure your business.” Secureframe connects to a company’s cloud and HR systems, checks those items automatically, and flags what is missing. “The analogy I like to use is that we’re building the TurboTax for security compliance,” he told Sacra.

He argues that compliance brings in revenue as well as cost, because a certification lets a young company pass the security reviews large customers run before they buy.