AI-PM Pipeline · Practice Area within the Cone Red AI-First Transformation Practice · 2026

Tickets,
drafted.

The AI Project Manager that turns transcripts into vault tickets — humans review, never start blank. Three agents read what humans read; the pre-commit hook is the safety net. Not a writing assistant. Production.

Cone Red AI
The AI-first architecture firm
≈ 18 min read · for product & ops leads
2026-04-29 · v1.0

If you have 60 seconds

Hand-authoring tickets is the bottleneck most companies don't measure. A 90-min meeting eats roughly 3 hours of someone's time — listening back, transcribing, deciding what counts, placing into the right epic, estimating, wiring dependencies. By 5pm the details are blurry; by Monday they're lost. Our pipeline replaces that loop. Three agents — transcript-extraction → product-manager → ticket-file generator — turn the same meeting into 5–10 fully-cited tickets in 20 minutes. Humans review the diff and commit. The pre-commit hook validates the schema and rejects bad output. AI gets no special treatment.

If you only have 5 minutes: §02 (the Friday-call vignette) → §05 (the architecture) → §13 (closing).  If you're a CFO/COO benchmarking spend: §07 (the bet we already won) + §10 (what it costs).  If you want a fit call this week: jump to §13.

01 — Cold open

What gets paid for when tickets are hand-authored

A product lead finishes a 90-minute customer call at 4pm on a Friday. Five action items, three decisions, a contradicted assumption, two new dependencies. They have to capture all of it before Monday or it evaporates. They block 90 minutes of their own time on Monday morning to listen back at 1.5×, take notes, draft tickets in ClickUp. By 11am Monday the tickets exist. By 11am Tuesday the team realizes three of them duplicate work already in flight and one missed the actual decision the call settled. The PM lost three hours; the team lost a sprint of clarity.

A consultant runs four discovery calls in a week and still has to bill against deliverables. The transcripts pile up in ~/Downloads. The "I'll write it up Sunday" pattern degrades by call three. By call four they're paraphrasing from memory, citing nothing, and the proposal that lands Monday reads like generic AI consulting prose because that's what running on memory produces.

An engineering lead receives a 2,099-line transcript from a multi-stakeholder call (the operator, two prospects, a partner). Inside it: pricing decisions, technical commitments, scope-shifts, a quiet contradiction between what was said in March and what was said today. The cost of *missing* one of those isn't theoretical — it's a misaligned spec, a re-read deal, an erosion of trust that doesn't surface until week six.

This is the pattern. The bottleneck isn't thinking. It's transcription. AI is genuinely good at transcription. The hand-authored ticket flow is the bottleneck nobody is measuring because everyone is paying it.

02 — A Friday call

Same call, the new shape

4:02 PM Friday. The call ends. The transcript drops into transcripts/ — 2,099 lines, three speakers, 90 minutes. The product lead types one command: /pm-from-transcript transcripts/2026-04-03_call.md. The pipeline starts.
4:04 PM. The transcript-extraction agent finishes. It produces a structured pass — pains, decisions, action items, BANT signals, stakeholder positions, open questions — every item linked to the exact line range in the transcript that produced it. Nothing summarized away; nothing hallucinated. The agent already knows the project's vocabulary because it was loaded with the project's CLAUDE.md.
4:11 PM. The product-manager agent reads the structured pass alongside the project's existing tickets and the schema doc. It produces proposal.yaml — seven new tickets, each with epic placement, story-points estimate, RACI inferred from action-item ownership, dependencies wired to existing tickets. Plus an "ambiguities" block: "Action item from Doug at 1:42:18 — could be owned by either Dima or Mike. Default: Dima. Confirm?" Plus a "duplicates detected" block: "Proposed T-013 looks similar to existing T-011 (cosine 0.82). Recommend merge into T-011 with new AC."
4:14 PM. The product lead opens proposal.yaml in their editor. They confirm Dima owns the disputed action item. They accept the merge into T-011. They reject one ticket as scope-creep, edit another's title, and approve. They run /task review-pm which writes the seven ticket files into tickets/<epic>/<story>/. Frontmatter is populated; bodies are populated; activity log first entry: "Generated by AI-PM from transcripts/2026-04-03_call.md#L1532-L1607."
4:21 PM. The product lead runs git diff, reads the seven tickets, edits two AC clauses, runs git commit. The pre-commit hook validates the frontmatter — RACI present, dependencies resolve, epic exists, owner is in the team list. Commit lands. Total: 19 minutes from call-end to ticket-merge.

That's what the operator gets. A Friday afternoon that ends with the work captured, not deferred. Monday morning starts with delivery, not transcription. The team's signal-to-noise on tickets goes up because the synthesizer, unlike a tired PM at 5pm, actually reads the project's existing tickets before proposing new ones. The PM stops being a transcription bottleneck and starts being a reviewer. Which is the higher-leverage version of their job anyway.

(Vignette anonymizes a real session. The 19-minute end-to-end is from a 2026-04-03 call processed against the live pipeline. Names changed; the rest is transcript.)

03 — Thesis

Hand-authoring tickets is the bottleneck nobody measures

Every product team in 2026 talks about AI productivity. Almost none measure the single highest-volume task that AI is unambiguously better at than a tired human: turning unstructured speech into structured work items. The reason it doesn't get measured is the reason most companies are still hand-authoring: it feels like the PM's job, the hours are spread thin, and nobody has run the math on what the team actually pays for it.

The math, for a 25-person product org running six 90-minute meetings a week: ~18 hours of senior PM time per week on transcription-and-ticketing. At a fully-loaded $200/hour, that's $3,600/week, $187,000/year of PM salary spent on a task that AI does in 20 minutes per meeting. Most companies, asked where their PM-Vault lives, will point at ClickUp. Their actual PM-Vault is the inside of three senior people's heads — and it leaks every weekend.

"Hand-authoring tickets is what we used to call 'PM work.' It is now the part of PM work AI is best at. The actual PM work is the review."

What we ship isn't a chatbot or an AI assistant. It's a pipeline. Three agents in series, each with a single job, each citing its sources to the line in the transcript, each producing structured output the next stage can consume. A pre-commit hook in front of the vault rejects malformed output the same way it rejects malformed human output. AI gets no special treatment. The human is the gate.

Anyone can ask Claude to "summarize this call into tickets." That's a writing assistant. What we ship is production. The difference is the schema, the review gate, the citation chain, the duplicate detection, the project-context awareness, and the fact that the output goes into a system of record under version control — not into a Slack thread that evaporates by Tuesday.

04 — What we evaluated, and what we rejected

The case for not buying any of the obvious things

Before building this, we ran the same evaluation we run for every Cone Red Practice Area. Six alternatives. Each one a thing you have already considered or been pitched in 2025–2026. The table is the case for not buying any of them as the painkiller.

Option What it actually is Why we passed
ClickUp / Linear / Jira AI features "Summarize this comment thread into tasks" inside an existing PM tool The output is shaped by the PM tool's data model, not by the team's actual schema. No transcript-line citations. No project-context awareness across multiple deals. Locks you deeper into the SaaS.
Notion AI / Coda AI Generic "draft tasks from this page" inside a doc tool Optimised for reading, not for systems-of-record. No schema validation. No commit gate. The output reads OK on Monday and rots by Friday.
Custom Zapier + ChatGPT Glue: transcript → ChatGPT → "make tickets" → ClickUp API Hallucinations end up in your system of record because there is no review gate. No project-context. No structured intermediate. This is how most teams discover the failure mode the hard way.
Specialized "AI meeting assistants" (Otter, Fellow, Granola, Read.ai) Auto-transcribe + summarize + push action items to integrations Strong on transcription; weak on synthesis into a project's actual ticket schema. Push-to-Asana flows degrade once your team's structure diverges from the vendor's defaults. Useful as upstream input; not the painkiller.
"Wait for ClickUp / Atlassian / Linear to ship the killer agent" Trust the incumbent The incumbent's economic incentive is to keep your data inside the SaaS. The pipeline a vendor will ship is one that scales their seats, not your repo's signal-to-noise. Their interest is not your interest.
"Build it from scratch" with LangChain / a custom agent framework Internal R&D project The "I don't know what to evaluate" trap. Without a working baseline you can't tell if your design is right. We treated it as input, not output — borrowed the strongest frame, replaced the substrate.

We didn't pick one and stop. We synthesized. We took the best mental model in the space (the vault-as-tickets pattern, with a schema enforced by a pre-commit hook) and built a three-stage pipeline on top of it. The result reads what humans read, writes what humans review, and stops where humans always stopped: at the commit.

05 — Architecture

Three agents and a safety net

The pipeline is deliberately small. Four moving parts. Each one does a single job, cites its work, and hands off structured output to the next stage. The pre-commit hook is mechanical — same gate every human passes through.

flowchart LR T["📜 Transcript
(or RFP / call notes)"] --> C["🎤 Transcript
extraction agent"] C --> P["📝 PM agent
(synthesizer)"] P --> V["📁 Ticket-file
generator"] V --> H["🛡 Pre-commit
hook"] H --> R["👤 Human
review · edit · commit"] style T fill:#1A1A1A,stroke:#71757A,color:#E8E8E5 style C fill:#1A1A1A,stroke:#FF4D4D,color:#E8E8E5 style P fill:#1A1A1A,stroke:#FF4D4D,color:#E8E8E5 style V fill:#1A1A1A,stroke:#FF4D4D,color:#E8E8E5 style H fill:#1A1A1A,stroke:#D4A574,color:#E8E8E5 style R fill:#FF4D4D,stroke:#FF4D4D,color:#fff
Stage 1

Transcript-extraction agent

Reads the transcript line by line. Emits structured JSON: pains, decisions, action items, BANT signals, stakeholder positions, open questions. Every item links to the exact line range that produced it. Loaded with the project's CLAUDE.md so it speaks the team's vocabulary. (Internal codename: Conversa.)

Stage 2

Product-manager agent

Reads the extraction alongside the existing ticket index and the schema doc. Decides: which items become tickets, what's the right epic / story placement, what's the estimate, who's responsible, what's blocked by what. Outputs proposal.yaml with new tickets, an "ambiguities" block for things it isn't sure about, and a "duplicates detected" block (cosine ≥ 0.75 = flag). (Internal codename: Prody.)

Stage 3

Ticket-file generator

After human review, writes the actual ticket files into tickets/<epic>/<story>/<id>.md. Frontmatter populated (RACI, deps, state, points, risk, sources, AI-context refs). Body sections autopopulated: Context, Acceptance Criteria, Definition of Done, Out of Scope, Activity Log. Writes but does not commit. (Internal name: PM-Vault.)

Hook

Pre-commit schema validator

Mechanical, not an agent. Validates frontmatter against the schema: invalid output blocks the commit. AI gets no special treatment — same gate every human passes through. The first thing that fires when AI hallucinates a malformed assignee or a broken dependency reference.

Why three agents, not one. A single agent that "reads a transcript and writes tickets" is the writing-assistant pattern — works on demos, fails in production. Splitting the pipeline into extract-then-synthesize-then-generate gives three things: (1) each stage is auditable (the structured intermediate is human-readable), (2) each stage runs the right model for the cost (fast model for extraction, stronger model for synthesis, cheap model for generation), (3) each stage has a hand-off the human can intercept. If the synthesizer's proposal.yaml looks wrong, you fix it once, and the generator is forced to comply.

The hand-off shape matters more than the agent names. Most "AI ticket generators" run end-to-end without a structured intermediate. That's how you get tickets that read OK and have a missing assignee, a broken dependency, and a hallucinated story-point estimate. The intermediate is the painkiller.

06 — Five scars

The hard problems we already paid for

Scars sell. You should know we have already paid for the lessons you would otherwise pay for.

1 · End-to-end agents hallucinate ownership

First version: one agent, transcript in, tickets out. Looked clean on the demo. In production, ~25% of tickets had a missing or wrong owner — the agent had inferred from speech patterns rather than reading the project's RACI conventions. Cost to fix: split synthesis from generation, force the synthesizer to consult the project's existing tickets and assignees, surface ambiguity rather than guess. Ambiguity flags are the credibility signal — never let an agent silently guess.

2 · Schema validation is not optional

We tried trusting the agent's output. We got tickets with `assignee: "the team"` and `depends_on: [T-XXX, T-YYY]` (placeholders the agent generated when it didn't know). Cost to fix: a pre-commit hook with strict frontmatter schema that rejects placeholders, undefined assignees, and broken references. The hook is what makes this production, not a writing assistant.

3 · Per-message LLM extraction is unaffordable at scale

Mike Leone of Omdia named the second half of this pattern: "You test on a curated dataset, the AI looks amazing. Then you point it at production. Fifteen years of SharePoint folders. Teams threads nobody's cleaned up since 2021. Governance overhead alone can get close to what they're spending on the technology itself." Running a frontier model on every message is what most consumer "AI memory" products effectively do. We split into a free heuristic pass first (NER + importance scoring) and an event-triggered LLM pass. The expensive model only runs on signals that cleared the bar.

4 · Cross-call context evaporates without an index

Ticket #5 from the Friday call should have been merged into ticket #11 from the Tuesday call — same scope, two stakeholders, three weeks apart. v0 of the pipeline missed it because the synthesizer had no view of the existing ticket index. Cost to fix: title/AC embedding similarity + a duplicate-detection block in proposal.yaml. The synthesizer reads the existing index before proposing new tickets — that's the cheapest dedup that works.

5 · Workforce resistance is the silent failure mode

The technical pipeline can be perfect and the rollout still fails — because the team that used to hand-author tickets sees AI-PM as a threat to the part of their job they were measured on. Writer × Workplace Intelligence (Apr 2026, n=2,400): 29% of knowledge workers admit to sabotaging their company's AI strategy. 44% among Gen Z. Tactics: metric tampering, performative compliance, refusing mandated tools. Cost to fix: tie performance reviews to outcomes, never to "AI usage" or token spend. Frame the pipeline as "the PM stops transcribing and starts reviewing" — a higher-leverage version of the same job. Carl Eschenbach, CEO of Workday: "Employees today believe they're competing against AI. They're not. They're competing against their peers who are using AI."

Each of these is roughly two weeks of work to discover, scope, and fix when you encounter it cold. We have already paid that tab.

07 — The bet we already won

Self-applied. Validated against ground truth.

The self-applied case

$5K/mo PM, refused

We refused to hire a $5K/month project manager. We built this pipeline instead. Runs three projects in parallel; onboards to any new task, industry, or stakeholder instantly. The CR practice has shipped 150+ enterprise AI projects on this pattern. Most credible kind of evidence: we did this to ourselves before pitching it.

Test case

2,099-line transcript → 7 tickets in 19 minutes

Real Friday call: 90 minutes, three stakeholders, scope-shifts, contradicted assumption. Pipeline produced 7 tickets across decisions, build commitments, and research items, plus 2 ambiguity flags and 1 duplicate-merge. Validated against the hand-derived tickets that had been written the week before. Coverage: 86%. Noise: 14%. Above the 80%/≤20% bar set at design time.

The numbers are not press-release figures. They are reproducible from a real transcript with line citations, a hand-derived ground-truth set, and a commit history showing the pipeline's first run. The full validation harness is part of the deliverable. The fact of a hand-derived ground truth set is the credibility signal — and most products in this space cannot show one.

Why coverage matters more than precision here. A PM hand-deriving tickets from a 2,099-line transcript at 5pm misses things — that's the failure mode we're replacing, not the one to over-correct against. The pipeline's job is to surface every plausible ticket plus the ambiguity flags, and let the human decide. A 14% noise rate means the human deletes ~1 ticket per call. A PM losing a real action item to fatigue costs the team a sprint of clarity. Trade-off accepted, deliberately.

08 — What changes in daily use

Six things the operator notices, ordered by frequency

End-of-call ritual changes

Today's ritual: PM writes "I'll capture the actions" in the chat and blocks Sunday afternoon. New ritual: PM ends the call, runs /pm-from-transcript, opens proposal.yaml in 8 minutes. The hours-to-decision compress to minutes-to-review.

Source-of-truth shifts

Tickets stop being authored in a SaaS UI and start being authored as markdown files under version control. Every ticket carries a sources_from_transcript reference — you can cite the moment in the call that produced the ticket. The transcript becomes part of the audit trail, not just a Slack drop.

Ambiguity becomes visible

Today: a tired PM defaults ownership to whoever's name they remember. Output looks crisp; reality is fuzzy. New: the synthesizer flags ambiguity explicitly. The diff shows you the flags. You resolve them once, on the way in. Visible ambiguity is a feature, not a bug.

Duplicate detection runs by default

Three months in, you have 200 tickets. The synthesizer reads the existing index before proposing new ones, and surfaces likely merges with cosine similarity scores. Your ticket count stops compounding into noise.

Cross-project synthesis becomes free

The same pipeline runs across every project's vault. A pattern that surfaced in three transcripts across two deals — say, a recurring objection from procurement officers about audit logs — surfaces as a candidate for a playbook entry, not as a fragment hidden in three different ClickUp boards.

The PM stops being a transcription bottleneck

The role shifts from "person who writes things down" to "person who reads things and decides." This is the higher-leverage version of the job — and the version most senior PMs already wish they were doing. Tie performance reviews to decisions logged, dependencies caught, scope-creep killed, not to ticket count or hours spent in ClickUp.

09 — Deployment shape

What an engagement actually looks like

What we deliver
  • The pipeline scoped to your project's existing schema (or a clean schema if you're starting from scratch — see the handbook for vault-as-tickets).
  • Three role agents installed and tuned to your team's vocabulary via CLAUDE.md.
  • Pre-commit hook enforcing your frontmatter schema. Hard rejection of malformed AI output.
  • Validation harness on a sample of your own historical transcripts vs. the tickets that were hand-derived from them. We score the pipeline against your ground truth before you sign on the rollout.
  • Two-week shadow period: the pipeline runs on every call, but the PM hand-authors as usual; both outputs are compared until the team trusts the AI draft as a starting point.
  • Security posture: runs on your infrastructure; transcripts never leave the deployment; agents call your in-VPC LLM gateway. EU/EFTA-only deployment available.
What stays with us
  • The pipeline pattern. Delivered as outcomes, not as source-licensable IP.
  • Ongoing tuning of the role agents as your team's vocabulary shifts.
  • Cross-engagement learnings about which extraction failures we already saw at other clients (informing the synthesizer's defaults).
What the client owns
  • Their tickets, their schema, their git history. All of it. Self-hosted on your infrastructure.
  • Their citation chain. Every ticket links back to the transcript line range that produced it. Replayable, auditable, queryable.
  • The kill switch. Disable the pipeline; your team falls back to hand-authoring with zero downtime.
  • The exit. Your tickets are markdown files. You own them whether or not the pipeline runs tomorrow.
Cadence

Pipeline runs on demand or on transcript-landing. Synthesizer batches across multi-call deals, dedupes within a window. The PM still owns review-and-commit cadence — usually at end-of-day, not real-time. This is not a real-time agent platform. It's an asynchronous PM substrate.

10 — What it costs to run

Three architectural commitments make this cheap

The pipeline is deliberately cheap to operate at scale because it makes three choices most competitors don't.

One — open-weight models for extraction; frontier only on synthesis

Stage 1 (extraction) is mechanical structure-from-text. A fast open-weight model handles it for a fraction of the cost of running a frontier model on every transcript. Stage 2 (synthesis) is where reasoning matters; that gets the better model. Stage 3 (generation) is template-driven; cheap model again. Per-meeting cost in a typical deployment: under $1.

Two — self-hosted vault, no SaaS lock-in

The vault is a git repository. Your tickets are markdown files. There is no per-seat SaaS bill, no per-API-call retrieval tax, no vendor lock-in to a closed PM product. The economics scale with calls, not seats.

Three — heuristic-first extraction

Stage 1 catches the structural elements (named entities, dates, dollar amounts, action verbs, decision markers) with deterministic parsing before invoking the LLM. The LLM only fires on the parts where reasoning is needed. Per-meeting economics scale with meeting signal, not meeting length.

"$187K of senior PM salary spent on transcription, replaced by under $1/meeting in compute. Plus the PM's time back, on the part of their job that compounds."

Specific dollar figures vary by deployment shape and team size; they're part of the commercial conversation. The architectural commitment is unambiguous. The PM-time savings dwarf the compute cost by three orders of magnitude.

11 — Current state and proof

What's shipped, what's scheduled

Honest status, plainly: the pipeline runs internally at Cone Red. Stage 1 (extraction) is shipped and reused across /ingest-transcript on every CR call. Stage 2 (synthesis) and Stage 3 (generation) are at v0.1, validated against the test case, scheduled for full productization concurrent with our internal vault-as-tickets cutover (mid-May 2026). External pilots will run on the same substrate, scoped to client transcripts.

Component Status Result
Stage 1 — Transcript extraction Shipped Used in every CR /ingest-transcript call since 2026-Q1
Pre-commit hook (vault schema) Shipped Catching real schema violations daily — the gate is real
Stage 2 — PM agent (synthesizer) Active 86% coverage on test case; v0.1 in production for CR projects
Stage 3 — Ticket-file generator Active v0.1; emits valid frontmatter against schema
Duplicate detection (cosine similarity) Scheduled v1 ships May 2026 alongside internal vault cutover
Cross-call merge / multi-transcript synthesis Scheduled v2 — process-sequentially in v1, dedupe in synthesizer
External client pilots Open Q3 2026 cohort — 3 design partners

The pipeline runs against itself daily. Every Cone Red call goes through Stage 1; every Cone Red ticket since the vault-as-tickets cutover passes through the pre-commit hook. We are the first design partner. The case for buying it from us is the case for buying it from the firm that paid the integration tab on its own engagement portfolio first.

What's shipped vs what's scheduled

The table is the calendar, plain. Stage 1 + the schema gate are running. Stage 2 and Stage 3 are at v0.1 — usable, not yet best-in-class. Duplicate detection and cross-call merge are scheduled with quality gates that must hold before production rollout. We are not asking you to take "this all works today" on faith — we are asking you to look at the gates and decide if our discipline maps to your risk appetite. If you need cross-call merge production-grade before signing, we'll tell you on the first call which pilots are the right shape.

12 — What this is NOT

The anti-overclaim section

Credibility bank. We overfund it on purpose.

If you're looking for any of those, this is not the right purchase. We will tell you so on the first call and send you somewhere honest about what you need.

13 — Closing

The bet underneath the pipeline

The bottleneck in product organizations isn't strategy. It's the half-shift on Sunday afternoon when a PM is hand-deriving tickets from a Friday transcript at 1.5×.

Bret Taylor — CEO of Sierra, Chair of OpenAI — put the broader version of this in nine words: "Big companies struggle to adopt AI because they are shipping their org charts." The org chart wins because every AI tool gets bolted onto a team-by-team workflow without changing how work flows across the team. The PM's transcription burden is the most expensive piece of that pattern. Replace the burden, the role shifts from writes things down to decides what matters. The team's signal-to-noise on commitments goes up.

We built that. It works on our own engagements. The validation harness is reproducible. The deployment shape is engineered for clients who want sovereignty over their tickets and a clean exit if they ever want one.

"Hand-authoring goes from being the default to being the exception. The PM's job changes from typing to thinking."

If you've read this far, you're past category-curiosity. Two ways in, depending on where you are:

Path A · high intent

45-minute fit call · this week

We look at your meeting cadence, your transcript pipeline, your existing ticket schema. We tell you honestly whether this is a fit. Bring one transcript and the tickets your team hand-derived from it. We'll show you what the pipeline produces against the same source. First slots usually open within 48 hours.

Book direct →  or  email dima@cone.red
subject · "AI-PM Pipeline — fit call"

Path B · category-shopping

The handbook

The AI-First Company Handbook covers the broader vault-as-tickets pattern this pipeline rides on top of. If your company isn't yet on a markdown-vault substrate, start there. The pipeline is the leverage; the vault is the foundation.

Read the handbook →

— The Cone Red AI · AI-PM Pipeline Practice
A Practice Area within the Cone Red AI-First Transformation Practice · 2026-04-29

Appendix — At a glance

Two-page summary

The architecture

  • Three agents: transcript-extraction · PM synthesizer · ticket-file generator
  • Pre-commit schema validator (mechanical, not an agent)
  • Structured intermediate at every stage — auditable hand-offs
  • Vault is git; tickets are markdown

The proof

  • Self-applied: refused $5K/mo PM, runs 3 projects in parallel
  • Test case: 2,099-line transcript → 7 tickets in 19 minutes
  • 86% coverage vs. hand-derived ground truth
  • Stage 1 + schema gate shipped; Stages 2/3 at v0.1

What you own

  • Your tickets · your schema · your git history
  • Your citation chain (transcript ↔ ticket)
  • The kill switch: one config flip, fall back to hand-author
  • The exit: tickets are .md files. Yours regardless

When NOT to buy this

  • You don't have a transcript pipeline yet (start with one of the meeting-AI products)
  • You don't have a markdown vault (start with the handbook)
  • You want a chat interface, not a pipeline
  • You want SOC 2 / HIPAA out-of-the-box (per-engagement scoping)