FEDRAMP compliance isn’t cheap, and it’s not really something startups have the wherewithal of handling until they are a midsized company.