In saas selling to enterprises
For SaaS companies selling upmarket. Pass SOC 2 change management with evidence that builds itself, and give buyers a Trust page they can verify instead of a PDF they have to trust.
If this sounds familiar
An enterprise deal is waiting on your security questionnaire and your SOC 2 report.
- Control
- Approvals that keep up with continuous deployment: policy for routine, people for risky.
- How it works
- One rulebook
- Agents and contractors under the same rules as your staff, which is the question buyers now ask.
- How it works
Allow partial refunds from the merchant dashboard
Asked by A. Patel, with Claude Code · change CHG-2291 · 7d3a9c…41fe
- The change, in plain words
- Merchants can refund part of a payment instead of all of it. Adds a
refund_amountcolumn and one endpoint.14 files · +412 −38 · 1 migration - Risk, and why
- Touches payments code
- Includes a database migration
- Written with an AI agent
- Evidence
- 1,284 tests passed
- No secrets, 0 critical CVEs
- Built in CI, signed
- Verified in staging for 26 h
- Blast radius
- Business service Card payments. Impact tolerance: no more than 2 hours of disruption.Canary 5% → 25% → 100%, halts if errors pass 0.5%
- Backout plan
- One-step rollback to v4.17.3. The migration has a tested down-migration; the 06:00 verified backup is the fallback.
2 approvers, never the requester
- R. Lindqvist (you)
- Waiting
- J. Osei, Risk
- Waiting
- Rollout
- Not started
Your signature will cover change 7d3a9c…41fe and nothing else.
What to tell your boss
“Security reviews get shorter, because buyers can check our evidence themselves.”
Forward the one-page board briefRead next
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.