Stratus operates infrastructure for regional banks, which means every internal account is roughly one degree of separation from a regulated production system. Their previous MFA setup passed the letter of every audit they sat — and still left Daniel's team uncomfortable with how easy enrollment had become.
"We were one self-serve QR code away from a successful onboarding phish," Daniel says. "The auditor wasn't asking, but I was."
Vercrio's PeerProofing flow was the part the team didn't realize they needed. A new hire's first factor gets bound on a recorded video session with their manager. Recovery uses the same path. Every event is signed and exported to their SIEM with no extra plumbing.
The second-order win was operational. Their next SOC 2 Type II review took about half the time it had the previous year. The auditor pulled their identity-related evidence pack in one click and moved on.