{
  "manifestVersion": 1,
  "process": {
    "slug": "start-soc-2-type-i",
    "title": "Start SOC 2 Type I",
    "phase": "compliance",
    "description": "Begin SOC 2 Type I compliance journey using Vanta, set up policies, and begin evidence collection."
  },
  "manifestUrl": "https://ultrametric.ai/productarena/processes/start-soc-2-type-i/manifest.json",
  "steps": [
    {
      "id": "n1",
      "title": "Create Vanta account",
      "kind": "computer-use",
      "route": "form",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [
        {
          "vendor": "vanta",
          "name": "Vanta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 15,
      "async": false
    },
    {
      "id": "n2",
      "title": "Connect integrations",
      "kind": "computer-use",
      "route": "form",
      "toolCall": null,
      "calls": [
        {
          "method": "OAuth connections for AWS, GitHub, etc.",
          "type": "rest",
          "description": "Connect cloud and code integrations"
        }
      ],
      "vendorOptions": [
        {
          "vendor": "vanta",
          "name": "Vanta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 30,
      "async": false
    },
    {
      "id": "n3",
      "title": "Generate security policies",
      "kind": "api",
      "route": "agent",
      "toolCall": null,
      "calls": [
        {
          "method": "GET /v1/policy_templates",
          "type": "rest",
          "description": "Fetch Vanta policy templates"
        }
      ],
      "vendorOptions": [
        {
          "vendor": "vanta",
          "name": "Vanta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 60,
      "async": false
    },
    {
      "id": "n4",
      "title": "Review and customize policies",
      "kind": "human",
      "route": "person",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 480,
      "async": false,
      "irreducible": "judgment or identity — work an agent shouldn’t stand in for"
    },
    {
      "id": "n5",
      "title": "Configure automated tests",
      "kind": "api",
      "route": "agent",
      "toolCall": null,
      "calls": [
        {
          "method": "PUT /v1/tests/{id}/configuration",
          "type": "rest",
          "description": "Configure compliance tests"
        }
      ],
      "vendorOptions": [
        {
          "vendor": "vanta",
          "name": "Vanta",
          "productId": null,
          "arena": null,
          "agentReady": null,
          "mcpEndpoint": null,
          "paProductUrl": null
        }
      ],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 60,
      "async": false
    },
    {
      "id": "n6",
      "title": "Remediate failing tests",
      "kind": "api",
      "route": "agent",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [],
      "approvalRequired": true,
      "riskLevel": "high",
      "estimatedMinutes": 480,
      "async": false
    },
    {
      "id": "n7",
      "title": "Employee security training",
      "kind": "human",
      "route": "person",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [],
      "approvalRequired": true,
      "riskLevel": "medium",
      "estimatedMinutes": 2880,
      "async": true
    },
    {
      "id": "n8",
      "title": "Engage auditor",
      "kind": "human",
      "route": "person",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [],
      "approvalRequired": true,
      "riskLevel": "high",
      "estimatedMinutes": 10080,
      "async": true,
      "irreducible": "judgment or identity — work an agent shouldn’t stand in for"
    },
    {
      "id": "n9",
      "title": "Complete audit",
      "kind": "human",
      "route": "person",
      "toolCall": null,
      "calls": [],
      "vendorOptions": [],
      "approvalRequired": true,
      "riskLevel": "high",
      "estimatedMinutes": 20160,
      "async": true,
      "irreducible": "judgment or identity — work an agent shouldn’t stand in for"
    }
  ],
  "provenance": {
    "source": "productarena",
    "url": "https://ultrametric.ai/productarena",
    "generatedFrom": "data/processes.json + data/process-chains.json (the ProductArena founder-process corpus), resolved against live arena leaderboards at build time. Regenerate by refetching this manifest URL — it always reflects the currently deployed data, not a pinned data commit.",
    "license": "ProductArena Data License (DATA-LICENSE in github.com/ultrametricai/productarena): querying and quoting with attribution to \"ProductArena by Ultrametric Inc\" is fine; bulk redistribution or use to build competing datasets requires written permission."
  }
}