Martin Delisle
Martin Delisle
Head of Infrastructure and Security at Haus

How Haus Achieved SOC 2 Compliance with Stategraph

Haus enhanced their infrastructure security and compliance posture by implementing GitOps workflows and automated controls with Stategraph.

We have a great story around compliance where we're doing everything properly. Everything is in Terraform... but we're missing that last part to really make sure that not a person is actually pushing that code to production.

— Martin Delisle
Haus logo

SOC 2 Compliance

Achieved comprehensive infrastructure compliance

Full audit capabilities

GitOps Automation

Automated infrastructure changes through Git

Optimized workflows

Enhanced Security

Complete control over infrastructure changes

Robust safeguards

The Challenge

As a rapidly growing startup, Haus needed to achieve SOC 2 compliance while managing complex infrastructure through Terraform. The team needed complete control over code pushed to production.

Key Pain Points

  • Gaps in infrastructure CI/CD
  • Manual review processes
  • Compliance requirements

When you're working on achieving SOC 2 and you're 100% sure that you can control all of the code that's going inside your environment is going through CICD, but your infrastructure, that's a bit of a gap there.

— Head of Infrastructure and Security at Haus

Why Stategraph

Haus chose Stategraph for its ability to facilitate compliance while ensuring seamless integration with their existing Terraform workflows and approval processes.

Key Benefits

  • Embedded validations
  • Quick implementation
  • Multi-environment support

I think 10 minutes later, I was actually shipping something through it. And I was thinking, man, this is exactly what we were looking for.

— Head of Infrastructure and Security at Haus

The Results

Haus successfully achieved SOC 2 compliance and established robust infrastructure automation with built-in safeguards.

Before Stategraph
  • Gaps in infrastructure CI/CD
  • Manual review processes
  • Compliance challenges
After Stategraph
  • Automated infrastructure CI/CD
  • Simplified approval process
  • SOC 2 compliance achieved

We could have worked around it, but it was very nice to see that we didn't have to think about it at all.

— Head of Infrastructure and Security at Haus

Ship Terraform through pull requests

Stategraph Orchestration brings plan, policy, and apply to the pull request, on the infrastructure database.