Overview
At Nyntax, I engineered a compliance automation platform that dramatically reduces the manual effort required for security audits. The system integrates with 40+ third-party platforms via their APIs and browser-based automation (Puppeteer / CUA) to gather audit-ready evidence automatically.
The platform was purpose-built to support Delve, a Y Combinator-backed compliance startup, enabling their customers to achieve and maintain certifications in SOC 2, HIPAA, GDPR, and PCI without tedious manual evidence gathering.
Core engineering challenges included handling rate-limited APIs reliably, building resilient browser automation that survives UI changes, and designing a workflow engine that parallelises evidence collection across dozens of platforms while keeping results consistent and idempotent.
The result: control testing that previously took days of analyst time now runs in hours, with a structured evidence corpus ready for auditors.
Key Highlights
- Integrated 40+ compliance platforms (AWS, GitHub, Google Workspace, Jira, etc.) for automated evidence collection
- Built resilient Puppeteer/CUA automation for platforms without public APIs
- Designed idempotent workflow engine for parallel control testing
- Delivered SOC 2, HIPAA, GDPR, and PCI audit-ready evidence for Delve (YC-backed)
- Reduced manual evidence collection from days to hours