The platform is simple and intuitive and we had a dedicated person along the way that helped us with everything. This was the crucial part and i want to thank Nicole Alvaro for her dedication. Review collected by and hosted on G2.com.

All these platforms are on the expensive side of doing operations. It's not specific for Scytale, I did a thorough research prior to that and Scytale was the best in class, but again all these platforms cost a lot. Review collected by and hosted on G2.com.

We had an excellent experience working with Scytale throughout our SOC 2 compliance journey.

The platform itself was intuitive, well-structured, and significantly simplified what could otherwise have been a complex and time-consuming process. The Scytale team provided clear guidance, practical recommendations, and helped us stay focused on the controls and evidence that mattered most.

A special mention goes to Liya Sarfudin, who was outstanding throughout the engagement. Liya consistently demonstrated deep expertise in compliance and GRC, while also being highly responsive, organized, and proactive. She guided us through every stage of the SOC 2 process with professionalism and patience, ensuring that requirements were clearly understood and that we always knew what the next steps were.

What stood out most was Liya's ability to translate compliance requirements into practical actions that fit our organization's size and stage. Rather than taking a purely checklist-driven approach, she helped us build processes that were both audit-ready and operationally realistic.

Thanks to Liya's support and Scytale's platform, our team was able to progress efficiently, stay organized, and successfully prepare for our SOC 2 audit with confidence.

I would highly recommend both Scytale and Liya Sarfudin to any company looking to establish or strengthen its compliance program. Review collected by and hosted on G2.com.

Very little to dislike. Some of the compliance requirements can feel overwhelming at first, and additional examples or guidance within the platform would be helpful. Overall, the experience was excellent. Review collected by and hosted on G2.com.

What stands out most about Scytale is the combination of a user-friendly platform and exceptional consulting support. The team has been highly proactive throughout our SOC 2 and ISO 27001 journey, helping us stay organized, on track, and confident in our approach. A special mention goes to Romy Spencer, whose responsiveness, quick turnaround times, and practical guidance have made a significant difference. Rather than simply answering questions, Romy consistently provides clear direction and support, making the compliance process far more manageable for our team. The overall service has been outstanding and feels like a true partnership. Review collected by and hosted on G2.com.

Nothing, its been amazing! Romy has been soo helpful! Review collected by and hosted on G2.com.

What I like best about Scytale is that it made the process feel much more structured and manageable.

The UI is clean and easy to navigate, and the task breakdown, evidence collection, and progress tracking made this practical and simple workflow. Review collected by and hosted on G2.com.

What I dislike most is that the review cycle for certain tasks could be more complete. For example, reviewers can add notes or comments, but the task status, ownership, or assignment does not always change clearly based on that feedback.

Some open items can be harder to track directly in the system, especially when trying to understand what still needs action and who owns the next step. We were able to manage this through follow-up meetings, but it would be helpful if the flow was supported better in the system. Review collected by and hosted on G2.com.

Scytale was an absolute breeze to work with. Their platform is intuitive and easy to use, and it helped us track all the necessary metrics to get compliant more quickly. The price was well worth it, and the speed at which we were able to become compliant thanks to Nicole Alvaro, along with the overall support we received from the team from day one, was incredible. Overall, everything felt smooth, straightforward, and simple to manage within their well-structured platform. Review collected by and hosted on G2.com.

Absolutely nothing. there were only positives Review collected by and hosted on G2.com.

We use Scytale for SOC 2 compliance and penetration testing. Their personalized support is absolutely incredible, it's what stood out the most. The platform also offers a great set of well-built policy templates and high-quality automated evidence collection through integrations. It has made our entire audit process much smoother. Highly recommend. Review collected by and hosted on G2.com.

Very little to dislike. The only minor gap is that some integrations for specific tools we use aren't available yet. Nothing serious. I just would have liked a bit more coverage on the integrations side. Review collected by and hosted on G2.com.

Scytale’s platform made it incredibly easy to manage every part of our ISO27001 certification process. Evidence can be uploaded directly into the portal and mapped to the relevant controls. They also offer heaps of integrations with common business apps, which enables automatic evidence collection and keeps everything organised.

When it came time for the audit, it was handled completely offline. The auditor was given access to review our policies and evidence, and then left comments and feedback whenever further clarification was needed. This saved days compared with past audits where I’ve been locked in meetings with the auditor.

The pricing structure is straightforward, predictable, and great value. It also includes weekly meetings with a Scytale consultant—Ashna, in my case—and she was wonderful: easy to work with, efficient, and clearly an expert in her field. She made the entire process painless. If this is your first time getting certified, I highly recommend working with Scytale’s consultants to help guide you through it. Review collected by and hosted on G2.com.

Overall, I found Scytale’s approach to certification very good. Working with the consultants, having regular meetings, and using the portal all fit together well and made the process feel coordinated. One feature they could improve is the inline policy editor in the portal. Scytale lets you draft your policies directly in their web-based editor, but I found it a bit tricky coming from a Microsoft world. Copying and pasting policies from MS Word documents led to formatting issues once the content was brought into the Scytale UI. Review collected by and hosted on G2.com.

The platform’s automation and evidence collection are a real positive for anyone looking for this kind of service. The combination of automation with evidence collection, cloud integrations, GitHub, risk management, and continuous control monitoring makes for a strong overall platform. The GRC manager felt like an extension of our team, rather than just standard software support. Review collected by and hosted on G2.com.

No platform is perfect. At times, I found issues with navigating the controls, along with evidence synchronization. It’s also always difficult to replace knowledgeable compliance staff and/or maintain strong process ownership. Review collected by and hosted on G2.com.

Scytale is resourceful in automating most of the compliance processes, for instance policies such as SOC 2, PCI DSS, HIPAA, among others

The software saves time, more so during the security audit preparations

The dashboard is very organized, with reliable compliance tracking measures

Scytale gives brilliant guidance for users and this improves their compliance experience

The integration that Scytale has with systems such as identity providers, cloud platforms, security tools and others are brilliant

The process of evidence collection is highly centralized and this makes the process of policy management more efficient

Scytale creates solid visibility into compliance and security status Review collected by and hosted on G2.com.

The program has challenges in integration mapping, and this demands extensive time

Some security workflows demands extra manual involvement and follow up Review collected by and hosted on G2.com.

Scytale offers a comprehensive audit management framework in addition to dozens of automations for collective evidence. What is most helpful, however, is their consultant engagement model. Their staff is available to not only answer questions about their product, but to proactively refine controls, processes, and practices to enable a smooth audit experience. Review collected by and hosted on G2.com.

The product is comprehensive and so can be overwhelming in places. It's not always clear where to find a control or data point you're looking for. Some of the integrations fail and it's not entirely clear why; whether it's a Scytale problem or an external system configuration issue. Review collected by and hosted on G2.com.