What usually triggers a search?
Teams rarely switch SOC 2 platforms because of a single bad week. The trigger is usually a change in the company that the current plan was not bought for. Five come up again and again.
- Headcount. Some entry plans publish a staff limit. Drata's Foundation plan, for example, covers up to 50 FTEs on its plans page. Crossing a limit like that moves you to a different plan and a different price conversation.
- A second framework. Entry plans across this market often include one framework. When a customer asks for ISO 27001 or a regulator points you at a new standard, the plan you have may not cover it.
- Questionnaire volume. Where vendors publish allowances, they differ a lot: Vanta lists 25 questionnaires a year on Plus and 144 on Professional, and Sprinto lists 20 a year on Foundation. A sales team that doubles can outgrow an allowance quickly.
- Who does the work. Some platforms pair you with a named expert; others route services through partners or a support desk. If your team expected someone else to run readiness, the model matters more than any feature.
- The audit route. If you want the audit arranged close to the platform, or you want your auditor kept separate from your tool vendor, the platform's audit model has to match.
Is it the plan or the platform?
Before you plan a switch, separate the two. A plan limit can often be solved by moving up a tier with the same vendor, which keeps your evidence history, integrations and policies in place. A platform limit, such as a service model you do not want or a framework the vendor does not name, is a stronger reason to move.
Write down the limit you hit, the page where it is published and the date you read it. That one line becomes the first row of your shortlist criteria and the first question for every vendor demo.
What does a switch actually cost you?
The subscription is only part of it. A switch also costs the time to export and re-import evidence, re-connect integrations, re-approve policies, rebuild your trust center and brief your auditor. None of that is wasted if the new platform fits better for the next few years, but it is real work, and it lands on the same people who run day-to-day compliance.
A useful test: if the new platform would save less time in a year than the move costs, fix the setup you have first.
What should you do next?
- List the limits you have hit, with the vendor page that states each one.
- Ask your current vendor what the next plan includes and whether it removes the limit.
- If the answer is no, build a shortlist with the method in the next lesson.