Sample listing
A worked example, not a real product — it shows what an audited listing looks like before the first real ones are published. The audit described here did not happen.
AuditTrail CI
devtools · built by Northwind Labs (sample)
Engineering managers at fintechs who fail SOC 2 evidence collection.
Builder-attested — not independently audited.
What the audit found
Checked 2026-08-04SAMPLE — this audit did not take place. It illustrates how a compliance claim gets qualified rather than repeated. A real finding would note that the SOC 2 badge is backed by a Type I report — a point-in-time check of design — while Type II, which tests whether controls actually operate over months, is not done, and the product's own site does not draw that distinction. Self-hosting is advertised but currently needs a support call to enable.
Written by the person who tested it, published unedited — including the parts that don't flatter the product.
Before you decide
30 minutes with someone who actually runs AuditTrail CI in real work. They're paid the same whether you buy or not, and they're not allowed to sell — so “don't buy it” is a normal answer.
Nobody on Distro will contact you. Research at your own pace.