← Back to Index
Delve Tech Due Diligence · Meta-Analysis

Score Deep Dive

What drives high scores — dimension analysis of 121 scored companies

Dimension Distributions

Each company is scored across 7 dimensions on a 1-10 scale. The box plots reveal how tightly or broadly each dimension varies across the portfolio.

dimension_boxplots.png

Box = IQR, whiskers = 1.5×IQR, dots = individual companies

DimensionMeanMedianStd DevMinMax
Infrastructure6.061.038
App Arch5.151.429
Data Layer5.051.338
Security6.970.759
DevOps5.660.948
BCDR5.960.748
Vendor Div4.341.829
Security (6.9/10) is the highest and tightest — most companies achieve a similar level via template SOC 2 controls. Vendor Diversity (4.3/10) is the lowest and widest — it's the dimension that most differentiates companies.

Dimension Correlations

How do dimensions relate to each other? Strong correlations suggest shared underlying drivers.

correlations.png

Key findings:

Strongest vs Weakest

For each company, which dimension is their strongest and weakest?

strongest_weakest.png
Pattern: Security is most often the strongest dimension, while Vendor Diversity is most often the weakest. This aligns with the template-driven compliance model — security controls are prescribed, but vendor choices are company-specific.
dimension_boxplots.png
correlations.png
strongest_weakest.png

Generated from score deep dive module · 485 SOC 2 compliance reports · 2026-03-24