Pre-call research brief

PRE-CALL BRIEF — Cartonyx · call in 1h · buyer: Priya Natarajan (VP Eng) 1) SNAPSHOT FACT: ~310-emp Series C logistics SaaS, 'AI-powered freight routing'. FACT: just launched 'Cartonyx for Pharma' → moving into a regulated vertical. 2) COMPLIANCE POSTURE • INFERENCE: Needs SOC 2 Type II now and likely HIPAA-adjacent / GxP scrutiny for pharma — signal: new Pharma product + Priya's post on 'regulated verticals'. • INFERENCE: AI freight routing + EU customers → EU AI Act + model-governance questions inbound — signal: 'AI-powered' positioning. • FACT: Feb vendor data-leak hit two of their customers → their own customers are now sending tougher security questionnaires. • FACT: Hiring a 'Director of Security & Trust' → no senior trust owner yet; program is forming. 3) LIKELY PAIN (ranked) 1. Post-leak credibility: customers demanding SOC 2 + a Trust Center after the Feb incident (FACT-anchored). 2. Pharma deals blocked without compliance evidence (INFERENCE from product launch). 3. No security leader in seat to run it manually → needs automation, not headcount (FACT: open req). 4) BUYING COMMITTEE • Champion: Priya Natarajan, VP Eng — publicly framing 'trust' as a scaling problem; warm (opened last 2 emails). • Economic buyer (INFERENCE): CTO or CFO funding the upmarket push. • Future owner / influencer: incoming Director of Security & Trust — sell the program they'll inherit. • Blocker (INFERENCE): prior eval stalled — competitor was 'too heavy for us'; lead with time-to-value, not feature depth. 5) THREE OPENERS • "Saw the Cartonyx for Pharma launch — moving into pharma usually means the buyer's security team asks for SOC 2 Type II before they'll sign; is that already showing up in deals?" • "Your post on scaling trust upmarket lined up with us — most teams hit the questionnaire wall right at that move; how are you handling them today?" • "You're hiring a Director of Security & Trust — want them to walk into a running program instead of a blank page? That's the gap we close." 6) OBJECTIONS TO EXPECT • "We looked at a tool and it was too heavy." → icompaas auto-maps your AWS/Snowflake/Okta stack — most teams are evidence-collecting in days, not a quarter. • "We'll wait for the new security hire." → Standing up the program first means they ramp on results, not setup. • "Not sure pharma needs more than SOC 2 yet." → We scope it with you so you only carry the frameworks the pharma deals actually require.