Portfolio/Venture
Caldera Compliance
Customer discovery planned for Q1 2027
Help growing companies meet security and compliance requirements through software-enabled security engineering and hands-on implementation.
The customer is not simply buying software. They are buying a coordinated outcome: assessment, policy review, evidence, remediation, implementation, audit preparation, and coordination with an independent auditor.
The tree
.-. .-. FRUIT The outcome we want .-( '-' )-. A customer finishes an organized, .' '. defensible SOC 2 readiness process and ( ( ) ( ) ) completes an independent audit. '._ _.' '~---------~' | * * | * * LEAVES What the first engagement has to teach . . | . . Discovery is scheduled for January and `. .' | `. .' February 2027. Q4 is for being ready to `-..-' | `-..-' .--. | .--. BRANCHES Capabilities .-' `-. | .-' `-. The delivery system around the platform. ( )------|------( ) `-. .-' | `-. .-' `--' | `--' | TRUNK The product and the service | Caldera is a software-enabled compliance | service. The platform helps security | professionals manage the work. It does not .----|----. ROOTS What already exists .-' | `-. A four-person team, including the founder, .' | `. and about eight months of platform ____/__________|__________\____ development. Names and formal ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SOIL The problem
SoilThe problem
No separate points on this layer.
RootsWhat already exists
- Security engineering expertise.
- CISO-level leadership.
- Product engineering and platform development.
- Design and branding.
- Relationships with potential customers and partners.
TrunkThe product and the service
No separate points on this layer.
BranchesCapabilities
- Security engineering.
- Compliance management.
- SOC 2 evidence collection.
- Policy management.
- Risk assessment.
- Platform development.
- Client onboarding.
- Audit coordination.
- White-label branding and client customization.
LeavesWhat the first engagement has to teach
- Client discovery.
- Delivery timelines.
- The pricing model.
- Evidence workflows.
- The platform against real compliance work.
- Auditor relationships.
FruitThe outcome we want
No separate points on this layer.
The next year
Refine the service offer, identify leads, and prepare client-facing materials
Begin discovery with prospective SOC 2 clients
Secure the first client engagement
Test the complete readiness and audit delivery process
Evaluate actual delivery time, costs, staffing, and margins
November 2026 through October 2027. Bars are the November 1 timeframes, read onto this year. August through October are open on purpose. The blueprint does not schedule them. October 2026 is already behind this chart. A dim bar is not started. A full bar is in motion or done. Blocked work drops to a thin opacity so it stays visible.
Objectives
The year chart above is the same work, drawn from November 2026 through October 2027. Status stays in this browser.
Caldera Compliance/Q4 2026
Refine the service offer, identify leads, and prepare client-facing materials
Discovery conversations are a January activity. Q4 is for having something true to say.
Caldera Compliance/January–February 2027
Begin discovery with prospective SOC 2 clients
Caldera Compliance/Q1 2027
Secure the first client engagement
Caldera Compliance/Q1–Q2 2027
Test the complete readiness and audit delivery process
One real engagement, including coordination with an independent auditor.
Caldera Compliance/Q2 2027
Evaluate actual delivery time, costs, staffing, and margins
The platform
Caldera is being built so security professionals can manage compliance work, understand requirements, organize policies, collect evidence, and guide clients toward SOC 2 readiness. The software supports the delivery team. It does not replace the security expertise the work requires.
Caldera facilitates readiness and coordinates the audit. The independent auditor issues the SOC 2 report.
Current team
Four roles, including the founder, after about eight months of development. Names were not part of the November 1 notes. These roles are the current discussion, not a finalized employment or ownership structure.
Founder / Platform Owner
Software architecture, platform development, and product direction.
Security Engineer
The majority of security and compliance implementation work.
CISO / Executive Security Lead
Security leadership, expertise, and executive oversight.
Designer / Design Lead
Platform design, product experience, branding, and client brand kits.
Prospective clients
No leads were named on November 1. Discovery is planned for January and February 2027. Use the rest of this quarter to write down who you will actually call.
The lead list is empty. That is an accurate picture, not a missing feature.