Girish Redekar

Drinks copious amounts of tea.
Programmer.
Prone to day dreaming & distraction.
Building @sprintoHQ. Previously built @recruiterbox.

[Sprinto @sprintoHQ]

📍San Francisco, we’ve arrived.

We’re ready and excited to meet everyone at #RSA Conference 2026🔥

Find us at Booth S-2437 for autonomous trust & AI governance.

We didn’t come empty-handed👀

Come find out!

#RSAC2026

[Girish Redekar @grease_]

Fair question.

Let's step back for a second: before any of these platforms existed, companies still worked with auditors, and replaced them based on experience. That dynamic didn’t start with platforms.

If an auditor consistently caused issues without justification, they wouldn't get hired, regardless of where they’re listed. Platforms don’t create that dynamic.

My view: The real question isn’t “should platforms have lists?”.

It’s whether auditors remain independent in how they evaluate evidence. That’s what actually determines trust in the system.

[Girish Redekar @grease_]

Compliance has been broken❗in the same way for decades. Not the tools. The model.

Every generation of GRC gave us better ways to track trust work. Spreadsheets. Software. Automation. Dashboards. Each one is more sophisticated than the last. Each one still fundamentally dependent on humans to notice change, interpret it, chase it down, and push it to closure.

We accepted that. We built entire teams around it. We called it "good process."

It was never good enough.

The attack surface keeps growing. 📈 Frameworks keep multiplying. Vendors slip through. AI gets adopted before anyone's assessed it. And somewhere in every organization, someone is manually rebuilding proof, chasing the same approvals, answering the same questionnaires — again.

Trust doesn't collapse in a single event. It erodes. Quietly. Continuously. Until someone asks and the proof isn't there.

We believe there's a fundamentally different way to operate. 💡

One where your systems understand change as it happens. Where agents execute the work — not report on it. Where humans show up for decisions that actually need judgment, not to chase screenshots or coordinate follow-ups.

Where staying trustworthy is the default, not the fire drill.

Automation reduced the clicks. It never reduced the burden. Autonomy changes what the system is capable of entirely.

Today, we introduce the Autonomous Trust Platform. 🚀

Not a faster compliance tool. The operating system for Trust Ops.

This is the shift we've been building towards. And we're just getting started.
→ https://t.co/BCtwmCvFmp

#autonomoustrust #grc #vendorrisk #aigovernance

[Girish Redekar @grease_]

@ZackKorman for framework with different auditors.#

[Girish Redekar @grease_]

@ZackKorman I ll share a quick anecdote from the early days at Sprinto when we used to position the audit experience as "No Touch Audits" which basically meant you had someone from within our team(Solution expert with ISO Lead Auditor Certification) to handle auditor to & fro and provide with all evidences already collected in Sprinto.

But if in cases there were exceptions or last min evidence requests for deeper insights - it would sometimes lead to customer dissatisfaction because they dint want to deal with Auditor to & fro. So we chose to move towards "Low Touch Audits" to set better expectations.

When Audit experiences are being highlighted they are usually a reflection of how thorough we go with Audit preps and how you would have experts at your disposal to handle Auditor to & fro - it does not mean cutting corners or finding you a less problem-causing one.

Helping you with a list of auditors you can trust - forms one of the biggest value adds, as part audit experience, for early stage startups or businesses with less mature security programs.

Most mid-market companies have already engaged auditors - but startups need the network as vendor selection and auditor selection is not easy for them.

The choice of an auditor has multiple factors:
- Clients budget
- Framework expectations
- Relevance to business goals

Sprinto has no upside of having you pick one auditor over the other except for maybe if the auditor has handled enough Sprinto customers - they might know their way around the Auditor Dashboard, which is anyway not needed as the tool can export evidence by requests list as well.

Btw.. Sprinto is SOC 2 Type 2 compliant by one of the big 4s and we keep getting audited for frameworks to understand auditor interactions and experiences with different auditors.

[Girish Redekar @grease_]

@haridigresses The security critique is fair. SOC-2 was never designed to prove you're secure. It was designed to prove that someone independent checked whether your controls exist and work as described.

But the Delve issue creates a problem for the theater argument. If attestation has no real consequence, fake versions of it shouldn't matter. The companies affected here would be facing legal exposure and commercial damage precisely because the reports were load-bearing.

Theater doesn't have consequences. This does.

[Girish Redekar @grease_]

The question worth asking isn't whether providers are fraudulent or if the market cap is too big.

It's whether buyers have ever been given the tools to tell the difference.

Ask any platform: are your auditors genuinely independent or affiliated in ways that aren't obvious? Do they bring their own methodology or are they constrained by the platform's templates? What happens when a control doesn't pass?

Those questions have answers. Not every platform will welcome them.

Every auditor on Sprinto's platform is a fully independent entity. No affiliated firms. No quietly controlled partners. Customers choose their auditor freely and sign an independent contract directly with them.

[Girish Redekar @grease_]

Compliance, when done properly, is one of the most important trust-building exercises a company can go through. It creates a verifiable, independently attested record of the commitments your organisation has made about how it handles data.

The value of that signal depends entirely on whether the process behind it was real.

A certificate that satisfied a procurement checkbox last year may not hold up when a Fortune 500 buyer pushes back or a regulator asks to see the evidence behind it.

The companies affected are about to find out which kind they had.

If you're one of them - feel free to reach out. We'll help you figure out where you stand.

[erin griffith @eringriffith]

A detailed and brutal look at the tactics of buzzy AI compliance startup Delve

"Delve built a machine designed to make clients complicit without their knowledge, to manufacture plausible deniability while producing exactly the opposite."

https://t.co/eiicE64eGr

[Girish Redekar @grease_]

Auditor independence isn't a feature. It's the condition under which an audit report means anything at all.

Enron-Andersen case wasn't about bad actors - it was about what happens when the incentive structures make independence impossible. Same principle.

Most importantly, these certificates don't sit in drawers. They're woven into enterprise contracts, insurance decisions, vendor approvals - real commitments made in good faith.

The companies with these reports did everything right. They hired a vendor, ran the process, got certified - but are at a difficult position right now.

If you are one of the companies affected, we at Sprinto will be happy help in anyway we can.

[Girish Redekar @grease_]

https://t.co/oLimASsrTH

[Girish Redekar @grease_]

What happens when you mix SaaS founders, great vibes, and seriously good food?

You get a sold-out C-Suite Happy Hour that was so packed, we were warned we might be breaking fire codes!

@sprintoHQ and @younium seriously kicked off SaaStr with an explosive start! 🚀 The evening was a blend of networking with fellow SaaS leaders, mouthwatering Greek cuisine, and capturing the fun with caricature artists.

But hold on—this was just the beginning. We're just warming up for @saastr!

https://t.co/lXlgL4LhVp

[Girish Redekar @grease_]

When I co-founded Recruiterbox, the very first wall I hit was decoding security questionnaires for enterprise deals.

There we were, riding high on our growing client list when suddenly, these incredibly detailed security reviews appeared. We had strong security measures in place, but breaking them down and conveying their effectiveness to enterprise clients? It had us stumped.

I vividly remember sitting on calls, confidently answering specific questions about our practices, only to be frustrated when concepts came wrapped in unfamiliar, sophisticated jargon.

I did eventually find my way by reaching out to other founders who had been in my place.

This experience stuck with me. I realized there was a gap in the market—companies of all sizes needed a guide who knew what they were doing. A guide who could help them side-step the steep learning curve we faced.

🎉 That's why we're launching Sprinto's newsletter. 🎉

Think of it as the resource I wish I'd had back when I was starting out:

👉 Want to swap war stories with fellow founders? RSVP to our brunches.
👉 Hungry for knowledge? We've got events and webinars that will get you up to speed in no time.

Our goal? Create a valuable resource for you that is devoid of any jargon, and most of all, accessible.

Subscribe to the newsletter here: https://t.co/zMtAi9LEVV

[Girish Redekar @grease_]

After a long hiatus, I had the pleasure of attending an engineering summit, and it was a truly enriching experience. Every moment at Sapphire Ventures’ 3rd Annual Hypergrowth Engineering Summit was invaluable.

I joined over 200 engineering executives at The Pearl in San Francisco for a day brimming with insightful sessions, culminating in a vibrant networking reception.

The speakers covered a range of crucial topics, including strategies for integrating LLMs into products, leveraging AI for developers, and principles for scaling large engineering teams, among many other essential discussions.

It was a highly relevant and forward-looking event, and I am eagerly anticipating the next one.

#SapphireHypergrowthENG #GenAI #engineering

[Girish Redekar @grease_]

Tech Founders from Austin! Free on 25th April?

We’re bringing together tech founders for a fun and breezy networking mixer at the Backspace, Downtown Austin!

No agenda, no PPTs, just good old-fashioned networking!

You should definitely join us!

RSVP here: https://t.co/PgFB1SsYVu

[Girish Redekar @grease_]

@BrianNorgard @getairchat Yep, please

[Sanjay Nath @sanjaynath]

So proud to see our @sprintoHQ announce their Series B round!

Having seeded @grease_ and @notraghu since inception, a special & specific set of qualities stand out - a founding team and organization that is very customer-focused and heads-down, building a performance and growth oriented culture.

Sprinto today counts a diverse and fast growing global customer base, and @BlumeVentures is excited to continue supporting them in their quest to become a category leader in GRC!

@accelindia @ElevCap @BKartRed @AshishFafadia

[Girish Redekar @grease_]

I had the pleasure sharing the screen on @CNBCTV18Live with @skirani (@Accel) to share more details about @sprintoHQ's Series B funding.

Many thanks to @_ritusingh for her coverage of the story.

#funding #cnbc #compliance

[Elevation Capital @ElevCap]

We are super excited to deepen our partnership with Sprinto as they continue to disrupt cloud security and compliance.

@grease_, @notraghu and the team have created a superior and comprehensive product, enabling hundreds of customers to achieve their compliance necessities. Sprinto's reviews and customer feedback are a testament to the product quality, which has enabled the company to grow over 20 times in a highly capital-efficient way since we led their Series A in 2021.

Hearty congratulations to the team, and super thrilled to have a ringside view of this journey as Sprinto disrupts cloud security and compliance.

Onwards and upwards! 
@radusuma @mukularora @AkarshS27

https://t.co/wofnDqkcqb