How I built ZeroAudit — AI-powered SOC 2 compliance automation with AWS DynamoDB and Vercel

Short summary

The author built ZeroAudit, an AI-powered SOC 2 compliance automation tool that replaces months of manual evidence collection and $15-50k consultant costs. It uses Grok AI to classify compliance evidence, connects to GitHub/AWS CloudTrail/PagerDuty for real data, and stores it in DynamoDB using a single-table design. The tool runs as a background agent on Vercel, fetching evidence, classifying it against controls, and generating audit-ready reports.

• •AI agent automates SOC 2 compliance evidence collection from GitHub, AWS, PagerDuty
• •Single-table DynamoDB design with GSI patterns for querying by control and coverage status
• •Reduces audit time from months and $15-50k to automated process via Grok-powered control classification

Generated with AI, which can make mistakes.