An SF B2B SaaS · $80K → $620K ARR.

This archetype is a pattern we ship into reliably in San Francisco. Picture a B2B productivity or developer-tooling SaaS in SoMa, Mission, or Hayes Valley. Revenue sits at $80K-$200K ARR. The team is founder-led, with one or two engineers. Product-market fit is real. Enterprise readiness is not.

The pre-engagement state: $80K ARR on a single-tenant Supabase backend. Basic email-password auth. Stripe Checkout for self-serve. No SSO, no SOC 2, no admin dashboard, and no observability beyond Sentry. The first three enterprise prospects asked for SOC 2 and SSO, and walked when neither existed.

Three structural problems compounded the revenue ceiling. First, no SOC 2 Type II. Every enterprise security review, each an estimated $50K+ ACV opportunity, ended in "come back when you have SOC 2." Second, no SSO. Every team account had to invite users one-by-one via email-password, a workflow no 100-seat enterprise customer will accept.

Third, the activation flow lost 72 percent of free signups before the first valuable action. PLG metrics were broken because the onboarding never matched the marketing promise.

Workstream 1 · SOC 2 Type II readiness. We built the foundations first: audit-log architecture, RBAC primitives, encryption-at-rest, vulnerability scanning, and incident-response runbooks. Vanta handled continuous-compliance evidence collection. The Type II audit window ran weeks 18-30, and the report shipped in week 32. That report unlocked the first 4 enterprise contracts inside 6 months.

Workstream 2 · SSO + RBAC + team accounts. We migrated auth from email-password to Clerk, with SAML / OIDC support for Okta, Google Workspace, and Azure AD. A team-account model added workspace-level role permissions: admin, member, viewer. Enterprise customers got a custom domain-claiming flow.

Workstream 3 · Activation flow rebuild. We rebuilt PLG onboarding from scratch. The new flow: signup, a single-question intent capture, a 3-step interactive product tour, and a first-valuable-action trigger inside 4 minutes. PostHog instrumented the activation funnel. Free-to-paid activation moved from 28 percent to 61 percent over 4 months.

Workstream 4 · Admin dashboard + support tooling. We built an internal admin so the support team could impersonate users, view org billing, force password resets, and audit-trail every action. Intercom supplied inline ticket context. Support resolution time fell from 14 hours to 2. Monthly logo churn dropped from 5 percent to 2.1 percent.

Workstream 5 · Expansion-pricing tier + sales-led motion. We layered an expansion-pricing tier on top of the existing self-serve plan: per-seat for >10 seats, usage-based for high-volume API. The sales-led pipeline 4x'd over 6 months as the first 10 enterprise customers expanded. NRR moved to 118 percent.

If your San Francisco SaaS matches this pattern, the playbook transfers directly. The shape: B2B SaaS in productivity, developer tooling, or vertical workflow. $80K-$300K ARR, founder-led, post-PMF but pre-enterprise-readiness. The first 3-5 enterprise prospects asked for SOC 2 + SSO and walked. This is one of our most-shipped engagement shapes in San Francisco.

The 26-week timeline holds steady. The workstreams compress or expand in the same proportions, and the metrics typically land within plus or minus 25 percent of the archetype numbers.

Five capabilities transfer directly: SOC 2 Type II readiness with Vanta or Drata, SSO + RBAC + team accounts with Clerk + WorkOS, a PLG onboarding rebuild with PostHog instrumentation, internal admin + support tooling, and an expansion-pricing tier launch with Stripe Billing usage metering. Every SF engagement starts with a 30-minute discovery call. Pacific Time, same-day response, Monday to Friday 9 to 6.