Compliance
SOC 2 cost in 2026: what a startup actually pays
SOC 2 has three costs: the audit, the platform, and the people doing the work. Real 2026 numbers by company size, what moves them, where founders overpay.
Practical guides and perspectives on compliance, security, and building trust.
Probo guide
How to invite visitors and post updates on your Probo compliance portal
Give prospects access to your SOC 2 report before they ask, under NDA, and keep customers posted when your compliance changes with portal updates and email.
Probo guide
How to set up your compliance portal (trust center) on Probo
Set up your Probo compliance portal step by step: branding, security commitments, shared documents, NDA, Slack access requests and a custom domain.
Newsletter
What's new: October at Probo
Four new teammates, a cookie banner that adapts to every privacy law, internal audits for platform customers, and everything else we shipped in September.
Compliance
How to announce SOC 2 in progress to customers
Prospects are asking about SOC 2 and you don't have a report yet. Here's what you can say, what you can't, plus email and security-page templates.
Engineering
How to run a user access review across 60+ tools in minutes
Access reviews stall on decisions, not data. How Probo pulls 60+ tools into one campaign and applies your rubric to write the justifications for you.
Engineering
Someone left your company. Who still has access?
Off-boarding is where access control fails. Why leftover access matters for SOC 2 and ISO 27001, and how to run an access review the day someone leaves.
Engineering
Probo has its Agent Plugins, what is it?
Agent Plugins bundle an MCP server with agent skills. Here's what the standard is, what it leaves out, and how to point your assistant at your Probo data.
Compliance
What is a compliance portal / trust center?
Every SaaS company is building one. Most publish too much. Here's what belongs on the page, what belongs behind an NDA, and what we call it at Probo.
Engineering
PostHog feature flags behind a cookie banner
How to evaluate PostHog feature flags only after analytics consent and identify(), and why cookieless_mode: on_reject is the Track 2 default.
Engineering
How to set up PostHog: GDPR, CCPA, and global privacy laws
Two clean ways to wire PostHog into a website that respects GDPR, CCPA, and the rest of the privacy-law alphabet soup, without losing your analytics.