Industry
Health Tech
Company size
Startup
Environment
Slack, Google Workspace
Use case
Quick, easy compliance training for SOC 2 Type 2
5 minutes
to spin up SOC 2-tailored content
100%
SOC 2 training completion rate within 1 week
20 hours saved
Herd created, deployed, and tracked SOC 2 training automatically
Outfox Health is a healthcare answer engine that helps employees understand their health insurance, including the cost and quality of providers in-network. Outfox Health works with national employers and benefits advisors who want to reduce medical costs. The platform leverages massive data sets, including transparency in coverage price files, claims data, and insurance plan rules across all major carriers.
“We were flooded with options in the training space. Herd was the only one that provided time-to-value and a clear win within minutes. Seeing how fast the engine could create tailored trainings to our organization, plus save me personally, over 20-30 hours of management and administration time, we were blown away by the results.”
- Beth Ann Lopez, CEO, Outfox Health
The cost of catering to the enterprise
Outfox Health was growing fast and started catching the attention of enterprise clients. While it was exciting to watch the whales roll in, it came with anxiety, too—the team knew that even if they won over a majority of the team, they’d never close the deal without winning over procurement and infosec. They needed to be SOC 2 compliant.
But becoming SOC 2 compliant is a big investment. Audits themselves come with a huge price tag, and getting everything ready for an audit is an enormous time sink. For a small founding team, time away from building and selling the product had to be minimized at all costs.
A quick and easy fix
Outfox CEO, Beth Ann Lopez, felt she could gain some time back with training. That should be the easiest part, right? Find a vendor, give the team a quick training, one and done.
As she dug deeper, though, she realized how complicated the entire process was. There were so many vendors, so many different strategies to choose from, price varied a lot, and each platform had different recommendations on what should be included in the content. The more time she spent looking, the less time she had to focus on audit prep.
“I already have thousands of tasks to do a day. Adding an impending audit was hard enough. Tacking on the load of figuring out which cybersecurity training, policies, and controls we needed to cover was a whole other level I wasn’t prepared for. I was lost in a sea of options that I didn’t want to dig into, and every hour I spent on this felt like an hour I was neglecting my business and my customers.”
- Beth Ann Lopez, CEO, Outfox Health
Beth had heard about Herd Security through a mutual acquaintance, and figured she’d give it a shot. A couple minutes into the demo, she knew she’d found her solution. All you had to do was tell Herd what framework you needed employees trained on, plug in your policies, then let it build and deliver customized trainings straight to the team in Slack.
It would take dozens of hours of prep and admin time completely off her plate. So she gave it a go.
Fully trained in a week
After 5 short minutes of setup, Herd was ingesting information about Outfox’s business, policies, and users, correlating it to the most up-to-date SOC 2 standards, and sending curated training programs to every employee on Slack.
Because these lessons were short, they were quick and easy for people to get done during their free time. Everyone finished within a week.
“As a new Mom, I was grateful to be able to do my training on my phone between work calls and taking care of my newborn. The fact that we didn’t have to buy a whole new training platform or change any of our existing systems made the entire process super simple.”
Because Herd automatically logged those completions, all Beth and her team had to do was turn over the results to their auditors.
Spoiler alert: Outfox successfully completed their first SOC 2 audit. But they’re still using Herd to stay compliant. Each year, the tool automatically sends out new training. And whenever anyone joins the company, they have a SOC 2 training ready and waiting for them to complete in Slack.
“We chose Herd for speed. Herd helped us write policies and deploy them directly into trainings for our SOC 2 certification. We were able to get the whole team trained in less than a week. But really, we’re getting so much more because Herd keeps us compliant year-round without us having to think about it.”
What’s next
As the company grows, ongoing compliance will be a persistent challenge.
Outfox will naturally have to add new security frameworks, bring on new hires, publish new training material, and continuously update their policies. Herd will ensure Outfox delivers the right compliance, onboarding, and security training, from phishing simulations to GDPR awareness to spotting deepfakes. And that leaves Beth and her team free to concentrate on helping the people actually paying for healthcare spend less.
Claim your free trial to see how fast your team can turn security policies into ready-to-deploy training.