Relatively easy to use. Auditors are there to guide, not castigate. Pentest team is terrific and easy to work with too.

Roadmap is super helpful. Review collected by and hosted on G2.com.

Sometimes roadmap + audit ERs feel disconnected. E.g. lots of work to put them into the roadmap items, then re-populating them in ERs.

AI review is not terrifically helpful - often misunderstands dates, etc. Review collected by and hosted on G2.com.

Thoropass proved invaluable in simplifying our SOC 2 compliance journey. It offers a comprehensive range of tools to ensure we have implemented all necessary controls. The platform facilitated a smooth transition with its intuitive interface. The responsive support team provided prompt assistance at every step, enhancing our confidence in our data protection efforts. Overall, Thoropass exceeded our expectations and is an ideal choice for businesses aiming for compliance excellence. We highly recommend it to any organization seeking an effective SOC 2 compliance solution. Review collected by and hosted on G2.com.

Does not support French. Hoping they will add multilanguage functionality in a near futur. Review collected by and hosted on G2.com.

Thoropass makes it easy to manage our compliance posture. The tool has improved significantly over the past few years, and the integrations have been particularly valuable in streamlining our audit processes and saving time. The audits are well-prepared and straightforward to complete, making the entire process much less cumbersome than traditional approaches. Review collected by and hosted on G2.com.

Thoropass has added many new features over the past two years. Due to our busy schedules and existing workflows, we haven't had time to adopt these new tools. We're already set in our current ways of working, which makes it hard to transition to the new features. Review collected by and hosted on G2.com.

Thoropass’s solution and support guide you all the way from the initial discovery phase through to final certification. They help at every step, provide solutions when needed, and the process is user-friendly even for non-technical users. Review collected by and hosted on G2.com.

This isn’t specific to Thoropass, but the required proof is often odd and difficult to demonstrate. Review collected by and hosted on G2.com.

As a small business perusing SOC 2 compliance, the path to certification is daunting. Using Thoropass made the entire process understandable and doable as tasks were broken into small chunks and never felt overwhelming. Overall, the platform has a clean and had an easy-to-use design. The portal's design made it simple for our small compliance team to collaborate throughout the whole project, as we were all able to see each other's progress and questions.

Our Customer Success Manager (CSM), did exactly what their job title says - they were committed to helping us achieve success throughout our SOC 2 journey! Throughout the entire time our Company has used Thoropass, we have a standing monthly call with our CSM. I have found these quick meetings to be very helpful to stay up-to-date on new features

The required employee trainings were easy monitor from the project management's side and easy to use and complete for all of our employees. The ease of use incentivized our employees to complete in a timely matter, despite their busy schedule.

We have been using Thoropass for over three years now, and I can attest that they are continually making positive updates to the user experience and additional ways to make it easier for the user to use. Review collected by and hosted on G2.com.

This may be a positive aspect for others, but as someone with a small and fairly simple Company, the number of new features can seem overwhelming at times. Review collected by and hosted on G2.com.

Thoropass combines readiness, evidence management, and auditor interaction in a single platform. This helps Roark maintain an organized audit trail, critical for a firm that documents every control, ticket, and policy for SOC 2 evidence. The ability to collaborate with the auditor directly in-platform reduces friction and prevents duplicative work. Thoropass’ account management (Patrick) and audit team (Alexandre) operate with professionalism, consistency, and responsiveness, qualities Roark mirrors in its client relationships. This shared service philosophy strengthens the partnership. Review collected by and hosted on G2.com.

Roark provides thorough, version-controlled documentation, frequently including screenshots, test results, and links to change tickets. However, Thoropass’s evidence upload interface can feel restrictive; the limited tagging and metadata options make it challenging to organize evidence by audit year, department, or control type. The bulk upload and version replacement features are also somewhat unwieldy, which hampers Roark’s audit preparation process. Introducing a more file-system-like interface or deeper integration with SharePoint, NinjaOne or Halo PSA could help make Roark’s workflow more efficient. Review collected by and hosted on G2.com.

In my role as the CTO of a small company, we started our SOCII Type 1 audit preparation with Thoropass, and the experience was smooth and positive.

Our account manager was very supportive guiding us through the process of adjusting our internal procedures and collecting evidences. It was also easy to submit the evidences through the online portal and to get some quick feedback about them. Review collected by and hosted on G2.com.

They are missing an easy way to categorize users and assign training to them based on that category. For instance, the "secure coding" training should be automatically assign to new employees if they are "developers", and ignored by others. Review collected by and hosted on G2.com.

Throughout our three years using Thoropass, we have always felt well supported by the team. Whether it was first learning the ropes as we obtained SOC2 Type I, migrating our primary cloud provider ahead of a SOC2 Type II audit, or facilitating a smooth penetration test, the team was always responsive and helpful. A special shout out to all of our auditors for their attention to detail when clarifying evidence request requirements. On the software side, the platform is organized and feature rich, allowing our team to quickly obtain the status of controls, which frameworks they align with, and delegate tasks. The ability to prematurely associate evidence with a control ahead of an audit is invaluable to staying organized. The built in risk register, vendor review, and access review components of the platform are well designed and powerful time savers. Review collected by and hosted on G2.com.

One feature that would help our team but is currently lacking would be the ability to define custom monitors. Review collected by and hosted on G2.com.

What I like best about Thoropass is how it simplifies and operationalizes complex compliance processes like SOC 2, ISO 27001, and HIPAA. The platform integrates seamlessly with our cloud infrastructure (AWS), version control systems (like GitHub), and ticketing tools, enabling automated evidence collection and real-time visibility into our audit readiness. Review collected by and hosted on G2.com.

While Thoropass is a powerful platform, there are a few areas with room for improvement. The UI can sometimes feel a bit cluttered, especially when navigating large sets of controls or evidence items—this can slow down workflows for engineers who want to move quickly. Additionally, some of the integrations, while helpful, occasionally require manual tweaking or don't capture edge-case scenarios automatically. Review collected by and hosted on G2.com.

I like Thoropass's easy interface as it's straightforward to use. The dashboard makes it simple to check the status of various audits. It's also user-friendly enough to bring new users up to speed, which helps integrate them into the system quickly, adding value to our audit management. The initial setup was smooth, and our customer service manager, Grayson, was excellent, which also positively influenced our experience. Review collected by and hosted on G2.com.

Some of the integrations for user reviews appear to have challenges and fail from time to time. Often some of the integrations with third-party platforms give false positives of issues. Review collected by and hosted on G2.com.