AI changed how we write software. It didn’t change how we ship it. The gap between those two things is where most startup time, money, and morale dies. This is about closing it.
Cursor closes tickets. Claude Code writes Postgres clients and FastAPI handlers before lunch. Windsurf wires MCP servers during meetings. Engineers don’t need a JIRA ticket and a sprint plan to start anymore. They just start. The cost of writing software has fallen by an order of magnitude in three years.
That is the good news.
For a typical Series A team going SOC 2: roughly $18K of cloud spend and roughly $162K of engineering time. Drawn at the same scale, the cloud line barely registers. The work to make that cloud compliant fills the rest of the chart.
// same scale, drawn honest
Series A team, year one. Same scale. The ratio holds at every scale — multiply your engineering count by ten and the chart looks the same.
That invisible work has a name nobody puts on the roadmap: landing zone wiring, hub-spoke networking, IAM and workload identity, GitOps and CI/CD, monitoring and audit evidence — the slow, grinding work of turning a cloud account into something an auditor and an enterprise customer can both live with.
Six categories. Roughly 2,570 engineering hours — sixteen weeks of full-team work — before a single feature ships to a paying customer.
Product complexity doesn’t determine infrastructure complexity. Enterprise readiness does.
A “simple” SaaS — web app, API, Postgres, Redis — needs the same landing zone as a complex AI platform with vector DBs and ML pipelines. The invisible work is the same whether you have three services or thirty.
The landing zone is the entry fee. The recurring tax is per service. A vector DB isn’t a vector DB. It’s HA, backups, TLS, secrets, alerting, and audit evidence. Multiply by every piece of the AI stack and the platform team becomes the bottleneck on every product decision.
Self-serve is a feature your competitors already ship. Until developers can publish a dependency on demand, you are the platform team.
An enterprise customer says “we need SOC 2 before signing.” You quote four weeks. Six months later, the engineer who owned it burned out. The customer signed with a competitor. The repo got archived.
To get to SOC 2, you hire DevOps, then platform engineering. They wire Vanta, configure GitOps, write Terraform modules. Six months in, before shipping a feature, you’re a platform company that happens to have one product. Your competitor chose differently. They’re shipping.
A marketing team buys Vercel + Supabase + OpenAI directly, on corporate cards. The Claude Code experiment ships, but customer data is outside the perimeter and the audit log doesn’t exist. The shadow IT spreadsheet grows by one more line.
IT and Platform are at capacity running the existing business. They don’t have bandwidth for someone in marketing who needs a Postgres, Redis, an LLM gateway, and a tracing instance for their Claude Code experiment. The ticket sits eight weeks. Then it dies on a laptop — or escapes onto a corporate card. Same two endings, refracted through a slow IT queue.
Four modes. Two compliance-shaped — the startup pain: there’s no place to put it because you’d have to build the substrate first. Two capacity-shaped — the enterprise pain: the place exists, but it’s saturated.
They share a cause: AI demand is outrunning the platform underneath it.
Deeper read on the startup pain: The Invisible Work →
On the IDE side, software engineering is the most disrupted job in the world right now. On the platform side, almost nothing has changed. The platform engineer is still wiring Terraform. The compliance team is still chasing screenshots. The interface to the platform was designed for humans in 2015 — the interface of the next decade is an editor with an AI inside it that can read code, hold context, and apply structured tool calls.
The platform should be ahead of the editors, not behind them.
// 01
SOC 2, ISO 27001, NIST AI RMF, HIPAA — these aren’t boxes you check the week before the audit. They’re the shape of the runtime. The cloud account, the cluster, the service mesh, the deployment pipeline, the audit trail — built compliant on day zero, not retrofitted on day six hundred. If the substrate doesn’t carry the controls, every team has to carry them on their own back.
// 02
The next generation of operators are AI editors. If your platform requires a human to click around a dashboard to provision Postgres or check a deployment, you’ve built it for the last decade. The platform of the next decade exposes itself as tools — typed, structured, plan-before-apply — that Claude or Cursor or Windsurf can drive directly. Not chat-with-your-infra. Apply-with-your-infra.
// 03
Engineering hours are the most expensive thing your company buys. Spending them on Terraform modules and Helm values is a tax on every feature you will ever ship for the rest of the company’s life. The right answer is to stop paying it.
In your own cloud account — Azure first, with AWS and GCP behind it. Single-tenant by construction: your subscription, your data, your audit trail.
A LaunchSpace is a complete cloud environment provisioned inside the customer’s own account in 24 hours. Six dependency-tiered layers — identity, network, compute, data services, the platform layer, and DNS — wired together by construction, not by configuration. mTLS by default. Wildcard TLS, free, forever. The compliance posture is carried by the substrate: every control an auditor will ask about is already wired into the resources before the customer’s first deploy.
Your editor — Claude, Cursor, Windsurf — drives all of it. Plan a layer. Install a service. Run a compliance scan. Tail logs. Roll back. Query the graph. Without leaving the editor. Without clicking through a dashboard. Without a human in the loop where one isn’t needed.
intra publish— one command from the laptop you’re already on, to a live URL on infrastructure your auditor signs off on. No Dockerfiles. No Terraform. No tickets.
// from your editor
24h
from sign-up to a live LaunchSpace
296
compliance checks, continuous
6
layers wired by construction
0
DevOps engineers required
SOC 2 is two jobs. The paper half — policies, HR, vendor reviews, access reviews — lives outside the cloud. Vanta and Drata are excellent there.
The other half lives in the cloud itself. The encryption posture, the network shape, the audit trail at the resource, the drift detection, the evidence that controls are continuously met. Vanta reports on it. It doesn’t build it. If the cloud isn’t built that way, every control lights up red and the engineering work is yours.
We ship it built that way. Point Vanta at an IntraLaunch tenant, the cloud half is already green.
// Paper
60–70%
Vanta, Drata. They report.
// Cloud and delivery
30–40%
IntraLaunch. We build.
One integration. Both halves done. Their evidence collectors point at our infrastructure. Green on connection.
The most credible enterprise tooling is converging on one shape: a shared context graph holds the ground truth, agents reason over it, action flows through typed tools. The graph is the platform. The dashboard, when there is one, is incidental. Foundation Capital calls this agent-native enterprise. The OpenSRE community has been calling for the same shape on the cloud operations loop for two years.
// context for
Glean
Documents · conversations
// context for
PlayerZero
Code · runtime telemetry
// context for
Superblocks
Internal apps · ops
// context for
IntraLaunch
Cloud · DevOps · compliance · observability
That graph is IntraLaunch. An infrastructure operating system. The substrate crawls itself — every resource becomes a node, every deployment run, every compliance finding, every log stream feeds back into the same graph. The agent’s tools sit on top of that graph: plan a layer, scan for drift, query the blast radius, tail logs, roll back — all reasoning over the same shared state.
Without the graph, agents hallucinate. With the graph, they reason.
// from your editor
Your editor talks to the cluster directly — typed tool calls, plan before apply, every action signed at the resource.
Resources, deploys, alerts, incidents, drift — one graph the agent queries.
The last decade of cloud platforms shipped dashboards, forms, webhooks, email alerts, and quarterly audit reports. Features as deliverables. Humans as users. The interface was the product.
We don’t think that’s the shape of the next decade.
We assume your engineers don’t open a dashboard anymore. They open Claude, and they want the platform a tool call away. We assume your auditor doesn’t want a slide deck of screenshots. They want a live evidence vault, queryable on demand, signed at the resource. We assume your compliance posture isn’t a quarterly review. It’s a live state, scanned continuously, drift surfaced to the agent that’s already in the loop.
We assume the platform is invisible. You feel its presence by what you don’t have to do.
That’s the company we’re building. Not a SaaS that sits on top of your cloud. The substrate underneath it.
// last decade
// this decade
If that future is the one you want to build in, talk to us. We’re onboarding design partners now. Pick the door that fits.
// for startups
Audit-ready cloud for SOC 2, ISO 27001, NIST AI RMF, and HIPAA — in 24 hours, in your cloud. The invisible work, done.
For startups →// for enterprise
A self-serve landing zone for teams innovating with AI. Governed by default. Driven by MCP.
For enterprise →— IntraLaunch · MMXXVI