Shrav Mehta

Shrav Mehta is the founder and chief executive of Secureframe, a company that automates the work of earning security certifications such as SOC 2, ISO 27001, HIPAA, and PCI DSS. He grew up in the Bay Area in California, released his first mobile apps as a teenager, and started Secureframe after watching startups struggle through compliance audits by hand.

Coding as a Teenager

He began coding around age nine. In high school he got into his school’s scheduling software and ended up in the principal’s office, according to Alejandro Cremades’ profile. As a teenager he built about ten Android apps.

Founding Secureframe

He later went to work at fast-growing tech startups and kept seeing SOC 2 audits done by hand. He began sharing his templates and guides with other founders and asked whether they would use software that automated the work. A month later one of them called to ask when they could use it. “I quit my job that week to build Secureframe,” he told citybiz. By the time a first version shipped, he told Sacra, 30 to 40 people were waiting to use it.

Simplifying Security Compliance

He describes SOC 2, ISO 27001, HIPAA, and PCI as overlapping checklists: “all of these frameworks are just giant lists of things you have to do in order to secure your business.” Secureframe connects to a company’s cloud and HR systems, checks those items automatically, and flags what is missing. “The analogy I like to use is that we’re building the TurboTax for security compliance,” he told Sacra.

He argues that compliance brings in revenue as well as cost, because a certification lets a young company pass the security reviews large customers run before they buy.