Product-Market Fit: From Edtech Vitamin to $100M Painkiller

What It Covers

Adam Markowitz, cofounder and CEO of Drata, details how seven years selling a non-essential EdTech product shaped his approach to building a compliance automation platform that reached $100M ARR before its fourth birthday, covering customer acquisition strategy, AWS partnerships, auditor relationships, and scaling from 0 to 8,000 customers across 60 countries.

Key Questions Answered

• •Vitamin-to-Painkiller Transition: Spending seven years selling Portfolium into 500+ universities through brutal, long sales cycles gave Markowitz a calibrated appreciation for genuine product-market fit. When Drata launched, signing 100 customers in six weeks and 1,000 within the first year felt unmistakably different. Founders who have only sold painkillers may underestimate that signal; those who have sold vitamins recognize it immediately and can mobilize faster.
• •Pre-Launch Dogfooding as Positioning: Before accepting a single paying customer, the Drata team used their own product to achieve SOC 2 compliance. This created a credible proof point rooted in a prior painful experience — a university CIO had asked Markowitz to prove Portfolium's security posture and he couldn't. Requiring self-certification before launch directly addressed that failure and became a differentiator against competitors who skipped that step.
• •Narrow Problem Framing Before Expanding: Rather than attacking the full GRC market on day one, Drata committed to an automation-first approach targeting only the compliance layer — the "C" in GRC. Dozens of pre-build conversations with both prospective customers and audit firms revealed this as the clearest entry point. Solving one slice with depth before expanding to security assurance and third-party risk management created a scalable platform foundation.
• •Give-First Partnership Strategy with AWS: Drata became a top-five global ISV on AWS Marketplace by transaction volume within two years by consistently bringing net-new customers — many who had never transacted on Marketplace before — rather than extracting co-sell leads immediately. The principle: deliver measurable value to the partner for an extended period before requesting reciprocal benefit. This approach generated two-thirds of Drata's pipeline sourced or influenced by partners within five years.
• •Auditor Independence as Competitive Moat: Rather than competing with or acquiring audit firms, Drata built an Auditor Alliance Program that keeps audit relationships fully independent. Customers choose any auditor; Drata integrates with all of them. This neutrality addressed audit firms' core concern — that compliance software vendors might undermine audit integrity — and turned potential adversaries into referral sources, differentiating Drata from competitors who took a more controlling approach.
• •Aggressive Sales Culture as Intentional Design: Markowitz received complaints from CISO communities that Drata's sales team was aggressive during the first year. His response was deliberate: the aggression reflected the team's conviction that the problem was urgent and the solution was ready. He framed relentless follow-up as an expression of mission, not pressure tactics. Founders scaling into genuine pain-point markets should calibrate sales intensity to match market urgency rather than defaulting to polite, low-frequency outreach.