00 Solutions · Startups

Answer the security questions without building a compliance team first

For startups early in their compliance journey. We take you up one level at a time, and we run it for you: a Compliance Expert, a Forward Deployed Engineer and AI agents on one platform.

For AI-native, IT services, fintech and healthtech teams selling to enterprise.

Get a quote for L1 Book a demo

L3Resilient
L2Assured
L1Baseline

01 Where you are

You're likely here if

Three signals we hear from almost every startup we work with, and what the company usually looks like.

09:14InboundYour first big customer just sent a security questionnaire
09:31UnownedNobody owns security yet, or it is a side job
09:48ScatteredPolicies live in scattered docs, or nowhere
> match found: L1 Baseline · 3 signals

Team size: 1–50 people
Who owns security today: A founder or an engineer, on the side
What triggered it: A customer questionnaire or a first enterprise deal
What you need first: Answers you can prove, without hiring

02 Your plan

Digital Resilience Elevator, L1 · Baseline

What customers and regulators ask for first, without committing you to a certification you may not need yet.

L1

Baseline

You walk out with: A live L1 attestation shared through your trust portal
Timeline: Within 3 months of onboarding
Priced: By level · billed quarterly

Every level includes

The packets platform, set up and run by us
A dedicated Compliance Expert
A Forward Deployed Engineer working inside your tools
AI agents that draft, check and collect
A live trust portal to share with customers

3 months
Or less, from onboarding to a live L1 attestation.
packets pricing
10
Areas covered at L1, from access and devices to AI governance.
The L1 definition
2 a week
Decisions we need from you during implementation, roughly.
packets commitment
0
Compliance hires needed to get here.
packets model

03 What we run for you

What we put in place at L1

L1 covers ten areas. Pick one to see what we put in place, how it gets done and what you can show a buyer.

What we put in place
- A named security owner with a short charter
- A first risk list, scored and owned
- Short policies your team approves and accepts
How it gets done
PlatformRisk register linked to the controls that treat each risk
AgentsDraft the first risks and policies from your onboarding answers
PeopleYour Compliance Expert agrees owners and priorities with you
What you can show
An approved risk list and a policy set with acceptance records
Read moreRisk assessments

Ownership & risk01 / 10

Someone named owns security, and the top risks are written down.

What we put in place

A named security owner with a short charter
A first risk list, scored and owned
Short policies your team approves and accepts

How it gets done

PlatformRisk register linked to the controls that treat each risk

AgentsDraft the first risks and policies from your onboarding answers

PeopleYour Compliance Expert agrees owners and priorities with you

What you can show

An approved risk list and a policy set with acceptance records

From kickoff to L1 attestation

Five stages, run for you. Each one shows what the platform holds, what the agents do, what your packets team does and what is left for you.

Onboard & scopeControls in placeEvidenceReadiness reviewL1 live

Readiness20%

Onboard and scope

Weeks 1–2

We learn how you work and agree what L1 covers for you.

Platform

Your workspace, set up for L1
The ten L1 areas, each with its controls

Agents

Read your cloud, code and identity tools
Draft a first risk list from your answers

Your packets team

Compliance Expert runs the kickoff
Agrees owners and scope with you

You

One kickoff call
Name an owner

Output Scope, owners and a first risk list

Put controls in place

Weeks 2–6

The controls for each area, set up inside your tools, most important first.

Platform

A task for each control, with an owner

Agents

Draft policies for your approval
Suggest controls for each risk

Your packets team

Forward Deployed Engineer works inside your tools
Closes the most important gaps first

You

Approve policies
About two decisions a week

Output Approved policies and controls switched on

05 Who does the work

People and agents, on your side

Every level includes a Compliance Expert, a Forward Deployed Engineer and AI agents. The strip under each card shows when they work on your L1.

At every stage
Compliance Expert
Owns your plan
Agrees scope, priorities and owners, reviews what matters and makes the judgement calls with you.
- Kickoff and scoping
- Policy and evidence review
- Readiness review before go-live
Week 1Week 12
From week one
Forward Deployed Engineer
Inside your tools
Sets up controls in your cloud, code and identity tools and closes gaps with your team.
- Two-step sign-in and leaver process
- Device checks and backups
- Branch protection and connected checks
Week 1Week 12
From day one
AI agents
Working from day one
Draft policies and risks, suggest controls, run daily checks and surface missing evidence. A person approves what counts.
- Draft policies and risks
- Daily checks on your tools
- Surface gaps
Week 1Week 12

What it takes from you

You approve; you don't draft. We do the heavy lifting.

Owner: One person, a few hours a week
Decisions: Roughly two a week during implementation
Your team: Accept policies and finish short training
Engineering: Fixes, with our Forward Deployed Engineer beside you

06 How L1 gets done

Platform, agents and people, for L1

The platform holds the controls. Agents do the volume work. People make the calls a startup should not have to make alone.

Platform

What it holds

The ten L1 areasControls, tasks and owners for each area.
PoliciesA short policy set, with approvals and acceptance recorded.
EvidenceVersions, owners and expiry on every control.
Trust portalYour L1 status, live, on one link.

Autonomous agents

What they do

Policy draftsTailored to your company and waiting for your approval.
Risks and controlsA first risk list, with controls from your own library.
Daily checksGitHub, Microsoft 365 and more, saved as evidence.

Humans

What they decide

Scope and ownersAgreed with you at kickoff.
Setup inside your toolsDone by your Forward Deployed Engineer.
Readiness reviewEvery area checked before L1 goes live.

On file

Acceptable use policy · draftApproved
Laptop · disk encryption onApproved

Agents collect it

Your team approves it

Agents save evidence and drafts into the platform. A person on your team approves them there.

07 Need a certificate?

Need a certificate for a deal? Take the side road.

The Certification Accelerator gets you audit-ready, stands beside you through the audit and keeps you certified after. Your L1 work carries over.

001
Scope & gaps
Agents read your cloud, code and identity tools. We set the audit scope and list every gap.
002
Implement
Your Forward Deployed Engineer closes gaps with your team, most important first.
003
Readiness audit
An internal audit against the standard. Findings are fixed before an auditor sees them.
004
Certification audit
We coordinate the auditor, prepare the evidence and handle follow-up questions.
005
Stay certified
Evidence keeps flowing. Surveillance and renewal audits are prepared, not scrambled.

08 Proof you can share

Attested, not just certified

An attestation is live: it updates as your controls and evidence change. A certificate describes one day. Share your L1 through your trust portal, one link instead of another questionnaire.

Attestation: Live, updates with your controls
Certificate: One day, renewed by audit

See the Trust Portal

trust.yourcompany.com

L1 · Building12 policies published

Access & identityImplemented
DevicesImplemented
Incidents & recoveryIn progress
EvidenceIn progress

Synced from your packets workspace · just now

09 The platform

What runs underneath your L1

AI agents
Draft policies and risks, suggest controls, collect evidence, assess vendors.
Integrations
Twelve tools with daily checks: GitHub, Microsoft 365, GitLab, Cloudflare and more.
Evidence collection
Evidence on each control task, with owners, versions and expiry.
Risk assessments
Risks drafted from your context, approved by you, linked to controls.
Trust portal
Your status, controls and policies on one public page.
Employee portal
Policies, training and device checks, one page per person.
AI governance
Register, assess and approve the AI you build, buy and use.
Audit management
Internal and external audits: readiness, findings, remediation.

10 Compare

Four ways to get there. One comes with someone accountable.

Compare with

Question	A compliance tool	A consultant	A first hire	packets
Who is accountable	Your engineer	Nobody, after the engagement	Whoever you hired, once ramped	A named Compliance Expert, week one
Who does the work	You	Advises; you implement	One person, part-time	Agents at volume, plus specialists
Policies and evidence	Templates to fill in	Document set, handed over	Written from scratch	Drafted and mapped; you approve
Checking controls	Yes, automated	No system	Manual, or a tool too	Daily checks, same system
Adding a framework	Start the checklist again	A new engagement	More work, same person	Reuses controls in place
Year two	Renews; work still yours	Starts from scratch	Depends on them staying	Nothing restarts
What it costs	Licence, plus the work	Project fee, no system	₹30–35L a year, plus time to hire	Priced by level, billed quarterly

Hire cost from the packets comparison on packets.build. Your quote depends on your level and scope.

11 The path from here

Grow up the elevator, one level at a time

L1Startups · 1–50 peopleAnswer the security questions without building a compliance team firstBaseline
L2Scale-ups · 51–250 peopleProof that holds up in enterprise procurementSee Scale-ups →
L3Enterprise · 250+ peopleResilient by default, across every framework you answer toSee Enterprise →

12 Pricing

Priced by level, billed quarterly

We don't publish a price list, because no two scopes are the same. Tell us where you are and we'll quote what you actually need.

Request a quote

13 Questions

Questions from startups

01Do we need to hire a compliance person first?

No. Your Compliance Expert and Forward Deployed Engineer do the work, and AI agents handle the volume. You need one owner for a few hours a week.

02Is L1 a certification?

No. It is an attestation that stays live and updates as your controls change. If a deal needs ISO 27001 or SOC 2, take the Certification Accelerator from here; your L1 work carries over.

03How long does L1 take?

Within three months of onboarding. We agree the exact weeks at kickoff.

04How much of our team's time does it take?

Roughly two decisions a week during implementation, plus one kickoff call. You approve; you don't draft.

05How much does it cost?

We don't publish a price list. L1 is priced by level and billed quarterly; we quote what your scope needs.

06Where does our data live?

In India, in the Mumbai region, encrypted at rest. We don't train AI on your data. The details are on the security page.

07What if we need a certificate for a deal?

Take the Certification Accelerator as a side road. It covers ISO 27001, SOC 2, ISO 42001 and GDPR, and your L1 controls and evidence carry over.

Answer the security questions without building a compliance team first

You're likely here if

Digital Resilience Elevator, L1 · Baseline

What we put in place at L1

What we put in place

How it gets done

What you can show

What we put in place

How it gets done

What you can show

From kickoff to L1 attestation

Onboard and scope

Platform

Agents

Your packets team

You

People and agents, on your side

Compliance Expert

Forward Deployed Engineer

AI agents

What it takes from you

Platform, agents and people, for L1

Platform

Autonomous agents

Humans

Need a certificate for a deal? Take the side road.

Scope & gaps

Implement

Readiness audit

Certification audit

Stay certified

Attested, not just certified

What runs underneath your L1

AI agents

Integrations

Evidence collection

Risk assessments

Trust portal

Employee portal

AI governance

Audit management

Four ways to get there. One comes with someone accountable.

Grow up the elevator, one level at a time

Priced by level, billed quarterly

Questions from startups

Start at the ground floor. We run it for you.