For everyone evaluating CME
Design partners shipping with us today.
We're onboarding the first wave of design partners under NDA through Q2-Q3 2026. Public logos + verbatim quotes follow at GA. Below are the patterns we're seeing in the rooms we're in.
What design partners are saying
“
The agent caught a Trust-page claim that contradicted our actual KMS posture. None of our prior tools could connect those dots. That alone paid for the trial.
— Director of Cloud Platform · Series B fintech
“
We were maintaining a 600-row spreadsheet mapping HIPAA Security Rule sections to our controls. CME's first audit run produced the mapping with cited evidence in 40 minutes.
— Head of GRC · Healthcare SaaS
“
The codegen output isn't a snippet — it's a working CFT template with the parameters filled from our actual config. PR landed same day.
— Staff Security Engineer · DevOps tooling vendor
“
Pricing is the part we keep coming back to. We've grown 10x on AWS without our compliance bill moving.
— VP Engineering · Late-stage growth company
Common deployment patterns
01
SOC 2 Type II prep, replacing a hand-coded checklist
Who: Series B/C with first SOC 2 expiring + multi-framework on the roadmap
Run weekly Pro audits across WAR + SOC 2 + ISO 27001. Findings export to the auditor's evidence drive. Codegen accelerates remediation between cycles.
02
Post-incident customer-doc verification
Who: Companies that recently published a Trust page or DPA and want to verify they actually meet what they claim
Upload the public security commitments. Agent extracts hypotheses (e.g. 'data encrypted at rest with KMS'). Verifies against AWS config. Flags drift.
03
Org-wide audit dispatch for landing zones
Who: Platform teams running 20-200 child accounts under AWS Organizations
One Pro/Enterprise dispatch fans out across AssumeRole into every account. Aggregated findings, per-account drill-down, framework-level rollup.
04
Custom-corpus enterprise (regulated industries)
Who: Healthcare, financial services, public sector with internal control libraries
Upload internal compliance corpus (PDFs, SharePoint exports). Agent treats them as another framework. Enterprise plan only.
Want to be a design partner?
Two slots open per month. Discounted pricing through GA + direct line to the founders + your asks land in the roadmap.
Apply →