A payments start-up passes its first audit

Sample story: from no security policies to an audit-ready evidence link in one quarter.