Brief

Nikunj introduces DeployGraph, a database of AI-company infrastructure assembled by scraping legally required subprocessor lists from SOC 2-related disclosures. His argument is that, even if SOC 2 is weak as a security signal, the vendor lists it forces companies to publish are useful for mapping which infrastructure providers AI-native companies actually depend on.

title: @nikunj: SOC II is in the news right now for being security theater.. You know what SOC I...
author: nikunj
contenttype: twitterpost
published: 2026-03-24T22:33:50+00:00
source_url: https://x.com/nikunj/status/2036572222081606065

word_count: 44

Tweet by @nikunj

SOC II is in the news right now for being security theater.. You know what SOC II is actually good for? Subprocessor lists. I scraped 417 companies subprocessors to investigate what AI native companies are using for their infrastructure. Introducing DeployGraph dot com 🥞

Posted: 2026-03-24T22:33:50.000Z
Engagement: 685 likes, 41 retweets, 83 replies