Thoropass Reviews & Product Details

Mostly the UI and Navigation modules. Ease of uploading documents and sharing comments with the CSM and auditors.During our compliance, we used to login frequently and we never faced any challenges. The customer support was Swift and our queries were clarified in no time. The integration module was so simple that any non technical person can also integrate different service provider with Thoropass without any support. the ease of implementation different compliance module and uploading supporting docs is super easy and convinient Review collected by and hosted on G2.com.

As of now, we have been using it for around 3 years, We never faced any issues so far. Review collected by and hosted on G2.com.

As of now, it has been an awesome tool to get track of every single requirement on our Compliance roadmap and to take ownership on these processes. Review collected by and hosted on G2.com.

Maybe not a dislike but a suggestion, that somehow it could be even more resourceful if the alerts can be connected to Slack-Asana natively. So we can have a more close follow-up on the notifications, not only by email-console. Review collected by and hosted on G2.com.

1. Comprehensive and TRUSTED by the business community one-stop solution that covers and provides: 1. comprehensive and detailed audit; 2. reports with certified badges, 3. an actual legally binding audit certification (no need to find another accounting audit firm to provide = HUGE BONUS!)l; and 4. ongoing support team (we use it).

2. Professional Account Managers stay on top of the process from the start to the finish, checking in along the way to keep all stakeholders on track and to meet deadlines.

3. A superior audit team that seems to be available almost 24/7 to answer questions in a very timely manner and is very smart. They all provided great tips and guidance when navigating the platform, the implementation process (straightforward), and a few integrations we had to accomplish very complicated tasks.

4. Great UI/UX design makes it intuitive and easy for senior managers like me to ensure all tasks are completed as they should be and on time by my team AND monitor the Thoropass audit & tech teams' support tickets.

5. Pricing is very fair given all you get (see #1 above). We negotiated a longer team deal covering more than 1 year and are very satisfied given what friends at other companies have paid. Review collected by and hosted on G2.com.

1. Not the most inexpensive solution in the marketplace.

2. The platform’s AI suggestions are sometimes "off", but welcome to the world of AI, and we always check anyway.

3. Duplicate document uploads during the audit process are frustrating, but they are foxing nd making better via AI tools we noticed at the end of process

4. Would be nice to simplify some navigation menus related to complex tasks, but too bad Review collected by and hosted on G2.com.

I use Thoropass for their compliance platform to manage SOC 1, SOC 2, and GDPR internally and they perform our annual SOC 1 Type 2 and SOC 2 Type 2 audits. I appreciate how their tooling helps streamline our security and compliance efforts, with dramatically better reporting and some data collections being automated. The ability to assign and delegate tasks in one platform is very helpful. I find the usability to be excellent; it's very easy to navigate and use, and I was able to onboard as our compliance lead very quickly. Audit evidence requests were much easier with it. It also pulls data from our other tools for automated evidence collection. The initial setup was trivial, which made understanding the SOC requirements easier. Review collected by and hosted on G2.com.

I've hit some bumps with user access management and people management, and custom integrations would be awesome. Their questionnaire tooling is limited Review collected by and hosted on G2.com.

I’ve worked with Thoropass twice for SOC 2—once at a previous company and again at my current company—and both experiences were excellent.

The platform is easy to use, well-structured, and clearly shows what’s required, in progress, and audit-ready. Implementation is straightforward, even across organizations with different levels of security maturity.

Thoropass really stands out in customer support—their team is responsive, knowledgeable, and great at turning SOC 2 requirements into practical, actionable steps.

Feature-wise, Thoropass covers everything needed for SOC 2 in one place, including control management, evidence tracking, policies, vendor risk, and audit coordination.

Overall, Thoropass makes SOC 2 far more manageable and repeatable. I’d highly recommend it to any company pursuing or maintaining SOC 2 compliance. Review collected by and hosted on G2.com.

There’s very little to dislike overall. Some advanced features and reporting options may take a bit of time for first-time users to fully explore, but the learning curve is minor and well-supported by their customer success team. Review collected by and hosted on G2.com.

I like that Thoropass features help manage all aspects of compliance for my company, including employee management, policies, training, and vendor management. I also appreciate the audit process transparency. The initial setup was very easy, and our CSM helped migrate all the needed assets from Tugboat Logic. Additionally, we can integrate Thoropass with a few of our tools for vendor management, and the price and platform features were reasons we switched from Tugboat Logic. Review collected by and hosted on G2.com.

During the audit process, the evidence collection template could be customized for a SaaS product like ours. It would be better if the evidence collection template could be tailored to suit different types of workspaces. Review collected by and hosted on G2.com.

I really appreciate Thoropass for their communicative approach, which makes it easy as a leader to know where in the process we are, solve doubts, or get extra information about the findings. They help coordinate the process better with all parties involved. I also like the 90-day unlimited retest after receiving the penetration testing report because it allows us to make code improvements on their findings and reassess whether the fix has the expected impact, which secures solution quality and ensures an effective hardening process. The initial setup was really easy too, thanks to the Thoropass team who provided technical requirements and how-to guides, along with frequent communication from the customer success team to ease any challenges. Review collected by and hosted on G2.com.

I don't have anything in specific on my projects with Thoropass that I dislike. Review collected by and hosted on G2.com.

I really liked the people I worked with, especially Ritu, who was amazing, and the auditors were all super understanding and helpful. They really helped us get to the right spot. The evidence request feature is something I use the most, and I spent a lot of my time working in it and commenting back and forth with the auditors. The setup of Thoropass was very easy. Review collected by and hosted on G2.com.

The interface could maybe be a little bit more directed towards the audit experience. It's a little bit hard to get into all the evidence requests. Just from opening the application, but once you know how to do it, it's not too bad. It's just several clicks to get to it. But an audit, I would assume that that would be front and center. Review collected by and hosted on G2.com.

I like that Thoropass started well with sales support, where we got the relevant team members on board, which was promising for relevant areas. The kickoff was relatively prompt, and the policies in general were of pretty good quality. Review collected by and hosted on G2.com.

The main issue I have is with Thoropass's platform and evidence collection, which are extremely basic and manual. We were promised automated evidence collection, but it simply wasn't delivered. For companies undergoing ISO 27001 and SOC 2 type 2 certifications, the platform requires submitting identical evidence twice, wasting valuable time. It doesn't feel fit for purpose and we might have been oversold during the sales pitch with claims of automation and AI that are overstated. Additionally, ChatGPT provides faster and better responses in some areas compared to Thoropass tools, especially on the AI side, and even the team has confirmed not to rely on Thoropass's AI suggestions. Review collected by and hosted on G2.com.

I really like Thoropass for the personal assistance and the real-time value it provides. The platform walkthroughs and having auditors at my fingertips to ask questions are fantastic. I also appreciate the roadmap and the platform itself for helping with compliance and certification. The 1:1 conversations to understand the controls better and the breakdown of technical controls are hugely beneficial. Setting it up was easy, and I'd definitely use it again for other clients. Review collected by and hosted on G2.com.

The report itself was generic - in which the selected tools my client uses were not within the sections - instead it was listed out in the first 2 sections. Review collected by and hosted on G2.com.