Compostable.ai (formerly Use Neuron) build GenAI tools to help re-imagine business operations. Their main product is essentially a SaaS platform, used to train, deploy, and run AI agents in production, on behalf of their enterprise customers. These agents are custom-built for each customer, following a consulting engagement by their team of expert data scientists.
The Challenge
AI Agents deliver their best results when they’re deeply integrated with customer information systems, but enterprise buyers are rightly protective of the platforms that hold their data assets. One such prospective buyer in the healthcare space wasn’t willing to commit unless Compostable could show that they were compliant with ISO 27001, an international standard for information security management.
The company’s broader goal is to redefine day-to-day business operations for the 2034 workplace and beyond, using agentic systems. Architectural decisions made today support three priorities: security, reliability, and enablement of rapid development velocity.
Scale Factory: AWS Expertise
Neuron co-founder Mohamed Zamzam, a former AWS employee, had known of Scale Factory since his time working as a Solutions Architect there. “In the Neuron team, we don’t have a huge amount of AWS expertise,” he told us. “Our customers expect a level of security, scalability, and reliability that we knew we’d need help to deliver on. We chose to work with Scale Factory because of their SaaS Competency, and because we know they have experience working with startups like us.”
We deployed a Foundational Landing Zone built on top of AWS Control Tower, and integrated this with Compostable’s third party identity provider using AWS Identity Center. Each Compostable AI customer receives a brand new AWS account dedicated to them. Every account has security and governance controls deployed on creation, following standards we developed together. The entire flow is driven by Infrastructure as Code pipelines, so onboarding a new tenant takes minutes, not days.
The Compostable AI platform uses a selection of LLMs hosted by Amazon Bedrock, matched to each customer’s unique workload based on the strengths of each model. The software is developed in Python, building on the LangGraph framework and LangChain libraries. The software is deployed into a combination of Amazon EC2 (for data ingest) and AWS App Runner. Data is stored in Amazon S3, with Amazon Aurora Serverless databases used as a RAG source.
These components are all deployed on a per-tenant basis, with strict security boundaries configured to ensure data isolation in line with industry best practices, giving Neuron both the isolation enterprises require and the rapid release cadence a start-up needs.
ISO 27001 at Speed
With the foundational work delivered, the next step was to deploy compliance tool Vanta from the AWS Marketplace. Vanta made it quick and easy to establish an ISO 27001 Information Security Management System, a framework to help manage information assets securely.
We integrated Vanta with the Landing Zone in AWS, to provide continuous reporting on the platform’s compliance with the policies defined in the ISMS.
Compostable were able to pass their ISO 27001 audit within just 6 weeks of deploying Vanta. With their new certification on show, they were able to close a substantial deal with their prospective healthcare buyer.
It was a real pleasure working with Scale Factory. From the initial consultation onwards, I was impressed by the structured and methodical approach adopted by the team. The solution delivered was instrumental in helping us achieve ISO 27001 certification, which was a key strategic goal for us.
Ongoing Support
Once our work was complete, we included three months of support. “The post-delivery support provided by Scale Factory team was excellent,” Ewan Dawson, Compostable.ai CTO, told us. “Being able to access help via our dedicated Slack channel saved hours, if not days of troubleshooting”.
“It was a real pleasure working with Scale Factory,” he continued. “From the initial consultation onwards, I was impressed by the structured and methodical approach adopted by the team. The solution delivered was instrumental in helping us achieve ISO 27001 certification, which was a key strategic goal for us”.
