[artur_makly]

Has no one yet found a way to vibe-code this into a viable self-service solution?

and yes I do understand there is a IRL-auditing authority piece to all of this too.

Perhaps there this is a play here in the market to create a new auditing firm that 99% automates all this for startups? sans fraud certs of course.

[mlitwiniuk]

I've created a product around this exact problem and niche. No, you can not automate 99% of it, but one (tool I've created) can help with guidance and translating strange requirements into something, that matches your context. I plan to launch it on HN as soon as I'll get my soc2 type II report. It's called humadroid.io (https://humadroid.io) - feel free to schedule a demo and mention HN; I'll be happy to give a generous discount code. Been working for over a year on it, agree it's not easy, but it's accessible and perfectly doable by solo founders.

[tempaccount5050]

You can't automate it as it will require you to make big changes to your infra. It can take a year or more to actually do when you have a full team dedicated to it. Absolute outside the realm of a self service process.