When you’re a fast-growing SaaS company serving the education sector, proving you can protect sensitive data is essential. For Campfire Learning, customer trust is always essential. Earning SOC 2 Type 2 compliance was already part of their strategic roadmap.
The team knew compliance would open doors by demonstrating their commitment to security. The challenge was getting there quickly. Campfire didn’t want to lose momentum by pulling key engineers and leaders away from building the product their customers rely on.
“Security and compliance were already on our roadmap. The question wasn’t if we’d do SOC 2 — it was how quickly we could get there while keeping our team focused on growth.” — Rodney Green, COO, Campfire Learning
The Challenge
At the time, Campfire Learning had limited staff. They were lean, focused, and busy scaling their platform. Pursuing SOC 2 Type 2 meant:
- Running an independent internal audit function without bias.
- Managing documentation, controls, and evidence collection for the auditor.
- Meeting an ambitious timeline accelerated by new growth opportunities.
- Completing a HECVAT (Higher Education Community Vendor Assessment Toolkit) to meet higher ed vendor standards.
The leadership team worried that, without outside support, the process might last for months. This could put contracts at risk and drain resources from product development.
The Solution: Compliance as a Service
For a lean, fast-moving team like Campfire Learning, Trava’s Compliance as a Service model meant they didn’t have to slow down to figure out SOC 2 on their own. Trava handled the compliance heavy lifting. This gave Campfire Learning the time to focus on growing their platform and serving their customers.
While the Campfire Learning team still provided input and technical details when needed, Trava took ownership of:
- Independent internal audit services.
- Weekly checkpoint meetings to keep momentum.
- Direct coordination with the GRC tool, Drata and auditor, AssuranceLab.
- Control implementation guidance and documentation formatting.
- Penetration testing and remediation testing.
- Assistance completing the HECVAT form.
“It really felt like the Trava team was part of our organization — not just a vendor. They understood our goals, kept us on track, and brought the expertise we didn’t have in-house.” — Rodney Green, COO, Campfire Learning
The Journey
Trava’s partnership with Campfire Learning began at the end of 2024. From the very first meeting, the focus was on building a clear roadmap to SOC 2 Type 2 certification.
With weekly checkpoints and quarterly compliance meetings, Trava kept progress steady. When Campfire Learning needed specific expertise Trava brought in the right specialists immediately. This included filling out the HECVAT and addressing vulnerabilities identified during penetration testing.
By breaking the process into manageable steps and keeping the team ahead of schedule at every stage, Trava reduced the stress and uncertainty that often comes with compliance work.
The Results
Campfire Learning received their SOC 2 Type 2 attestation ahead of schedule in the spring of 2025.
Key outcomes:
- Ahead of schedule: Compliance achieved with time to spare, turning a stressful deadline into a confident finish.
- Customer wins: Secured two important customers whose contracts depended on compliance.
- Time + staff saved: Freed up the equivalent of 50–75% of a full-time role.
- Security maturity: Identified and remediated vulnerabilities during penetration testing.
If we’d tried to do this ourselves, we wouldn’t have hit the deadline — and it would have taken critical people off product development. Trava made it possible for us to get there faster and with far less strain.
Looking Ahead
With SOC 2 Type 2 compliance in hand, and the HECVAT completed, Campfire Learning now has a stronger competitive edge in the education technology market. Campfire Learning and Trava will team up to stay ahead of security and compliance with a proactive approach to changing needs.
“We treat our customers as partners, and that’s exactly how Trava treated us. It wasn’t just a transactional relationship — it was a true collaboration to reach a shared goal.” — Rodney Green, COO, Campfire Learning