Comp AI Teardown: $12K in Monthly Subscriptions vs. $791K in 30-Day Cash — Inside the 66x Gap

What It Sells: Enterprise Deal-Unlocks, Not Certificates

When a SaaS startup sells to enterprise buyers, procurement teams demand a SOC 2 report (governed by the AICPA and legally requiring a licensed CPA firm's signature) or ISO 27001 certification. As Comp AI's own cost guide notes, a standalone SOC 2 audit traditionally runs $10,000 to $50,000.

Founded in January 2025 in Miami and New York by CEO Lewis Carhart, COO Claudio Fuentes, and CTO Mariano Fuentes (who previously built workflow platform LeapAI to 1M+ users before shutting it down), Comp AI uses AI agents to draft security policies, collect evidence, and monitor controls — bundling the platform, independent CPA audit, and penetration test into one unlisted quote delivered on a 20-minute demo call.

As Harvard's Theodore Levitt wrote in 1969 citing New York Daily News publicity manager Leo McGivena: 'Last year 1 million quarter-inch drills were sold, not because people wanted quarter-inch drills but because they wanted quarter-inch holes.' Comp AI's homepage headline reads 'Compliance that helps you close deals' — the 'hole' is the enterprise contract.

Checking the Books: Where Does the 66x Gap Come From?

According to the October 24, 2026 read-only Stripe sync on TrustMRR, Comp AI collected $791,006 in the last 30 days (+9.4% MoM), $5,783,399 over the last 12 months, and $6,305,597 all-time. Monthly cash rose 4.62x from $155,077 in November 2025 to $716,935 in September 2026, with $522,198 collected before the 12-month table begins.

Yet the same Stripe account logs just $12,048/month in recurring subscriptions across 52 active subscriptions ($231.69/sub). TrustMRR's FAQ notes up to 30% reconstruction variance — which cannot explain a 66x gap. When COO Claudio Fuentes told Refresh Miami in July 2026 that Comp AI grew from 0 to 900 customers and $7M+ ARR?ARR (Annual Recurring Revenue)Annualized recurring subscription run-rate (MRR × 12). Beware of founders multiplying a single viral launch spike by 12 and calling it ARR. in 14 months, annualizing May–July Stripe cash ($6.63M) confirmed the same order of magnitude.

The sole official clue sits in Section 3.2 of Comp AI's Terms of Service (updated January 16, 2026): 'All subscriptions have a minimum 12-month commitment period regardless of billing frequency. Whether you pay monthly, quarterly, or annually, you are obligated to pay for the full commitment period specified in your Order Form.' Annual upfront invoicing is contractually permitted, though the exact payment routing remains undisclosed.

Three Risks: Conflicting Counts, CPA Bottlenecks & Cost Reality

First, conflicting self-reported customer counts: a August 2025 pre-seed release cited 3,500+ beta companies, its paid landing page (lp.trycomp.ai/soc2) claims '4,000+ companies,' while the homepage and September 2026 Series A release state '1,000+ customers.'

Second, the CPA bottleneck: only a licensed CPA firm can sign a SOC 2 opinion, and Carhart told TechCrunch the software 'doesn't replace actual independent audit review.' The highest-value link sits with partner CPA firms. Third, fierce competition: category leader Vanta crossed $300M+ ARR across 16,000 customers in April 2026, Comp AI open-sourced its own community edition under AGPLv3, and rival ComplyJet publicly prices its platform at $5,000/year (audit separate).

On unit economics: dividing $5.78M LTM cash by ~1,000 claimed clients implies ~$5,800/year per customer. Modeled annual Claude API compute (16M input + 1.2M output tokens) runs $2.20 on Haiku 5.5 to $88.00 on Opus 5.5 — under 2% of ACV. Real money goes to wholesale CPA audit fees and payroll: 23 staff at the $135,980 BLS software developer median wage equals $3.13M/year (54.1% of LTM cash), and scaling to 50 staff by year-end hits $6.80M/year (117.6% of LTM cash). Comp AI is using its $37.5M war chest to buy market share.

Ceiling & Valuation Matrix: $19.56M to $166.49M

Carta's study of 12,249 seed rounds shows no cohort since Q3 2021 has reached a 30% Seed-to-Series-A graduation rate — yet Comp AI went from Pre-Seed ($2.6M, Aug 2025) to Series A ($34M, Sep 2026) in 13 months. Two tactics stand out: risk reversal ('get SOC 2 audit-ready in 2 weeks or get your money back' and 'we work with you until you pass') and explicit human-in-the-loop governance ('an agent might draft a policy, but a person still reviews and approves it').

Starting from its rolling 3-month annualized cash run-rate of $8.52M (~1/35 of Vanta), our 12-month sensitivity model projects: Bull (+29.3% QoQ) reaching ~$23.78M; Base (+10% QoQ) reaching ~$12.47M; Bear (-10% QoQ) falling to ~$5.59M.

Applying FE International's August 2026 private SaaS multiples (3.5x–5.5x for $5M–$10M; 5x–7x above $20M) yields a modeled valuation range of $19.56M to $166.49M.

Can You Do It? The High-Margin B2B Studio Play

Who it fits: operators who understand enterprise compliance workflows, have CPA/auditor relationships, and can manage B2B sales cycles. Who it does NOT fit: indie hackers hoping to launch a self-serve monthly app.

How I would build it: skip fighting Vanta head-on and target cross-border SaaS/hardware exporters selling into US/EU enterprises. Step 1: help 10 vendors clean up cloud controls and prepare bilingual audit-ready evidence binders on a $6,500–$14,500 project basis. Step 2: partner with 2–3 independent licensed CPA firms (maintaining a strict legal firewall between consulting and attestation — China's CNCA revoked 26 certification agencies in 2025 out of 4.38M+ certificates across 1.15M+ organizations). Step 3: charge a $2,500/month retainer to turn around 200-question enterprise buyer security questionnaires in 48 hours.