I really enjoyed working with Thoropass specifcally on our penetration test, SOC 1 Type 1 and HITRUST audits. They are super responsive when there are problems and helped us get across the finish line ahead of schedule. The penetration testers were very competent and gave great detailed reports of their findings and remediations. Review collected by and hosted on G2.com.

Occasionally there are issue with certain evidence requests having very vague requirements, which required some recycle. I know there isn't always a 'one size fits all' answer to every problem, but it would be great to incorporate some of the results of our conversations into the requirements generated for each certification path. Review collected by and hosted on G2.com.

Thoropass Staff were able to work with us to guide our growing company through the SOC 2 Type 2 Process to help us achieve a completed report. Their staff were friendly, responsive, professional, and very competent. Thank you very much, Thoropass! Review collected by and hosted on G2.com.

When working in SOC2 Type1, there were some times when there were some slow - loading pages, but those problems have been completely fixed and no longer happen on their platform. A++ rating! Review collected by and hosted on G2.com.

I appreciate Thoropass for its ease of use and simplicity, enabling smooth integration into our work process. The seamless operations with our existing platforms, like accounting and payroll systems, are highly beneficial. I find the support team incredibly helpful and the automation features, such as checklists, streamline our compliance efforts, reducing unnecessary tasks and saving man-hours. The roadmap tool is invaluable for guiding us through necessary components and protocols, ensuring documentation and evidence are automatically handled, allowing us to concentrate on core responsibilities. Review collected by and hosted on G2.com.

Some bugs early on with some integrations but they have been fine tuning and system has been great. Review collected by and hosted on G2.com.

The platform itself and the team around it are both phenomenal. Everything is laid out, and every question is answered almost immediately. We have regular calls to ensure no outstanding items are sticking points, and Danny has been superb at resolving any issues.

The ability to ask questions and communicate via the platform as you go through the various points has helped massively. The majority of our integrations were supported, so any information needed that already existed was imported from the off!

We recently had our pen testing done via Thoropass and the communication and level of details was excellent. We had our pen test done by a recommended partner last year and its good to see that the in-house team are on the same level when delivering the test and helping work through any issues. Review collected by and hosted on G2.com.

Could have a few more implementations to tie into Review collected by and hosted on G2.com.

Thoropass stands out for its user-friendly interface and clear navigation, which make uploading documents, managing tasks, and collaborating with auditors straightforward. The platform’s integration capabilities with services like AWS, Jira, and Google Workspace automate the collection of compliance evidence, saving significant time and reducing manual effort. The dashboard provides a transparent view of progress and pending tasks, while regular notifications ensure nothing falls through the cracks. The support team is highly responsive and knowledgeable, always available to answer questions and guide us through complex compliance requirements Review collected by and hosted on G2.com.

While Thoropass covers the essentials very well, there are areas for improvement. Some users have noted that customization options are limited, occasionally requiring manual work outside the platform for unique processes or niche integrations. Review collected by and hosted on G2.com.

I appreciate Thoropass for its quick onboarding process and friendly pricing, which made the transition from our previous system smooth and cost-effective. I find the customer service exceptional, with ultra-fast responses to emails. The compliance-focused training features are invaluable, ensuring all our team members are properly trained and certified. Lastly, Thoropass is constantly ahead of the curve in compliance, acting as a comprehensive solution that meets all my company's needs. Review collected by and hosted on G2.com.

I think there could be better tutorials for each step in the setup process. Additionally, the pricing seems to be a barrier for smaller companies trying to get on board with Thoropass. Review collected by and hosted on G2.com.

Thoropass has made our SOC 2 process virtually painless. It also provides a lot of really helpful integrations with our cloud service provider and other utilities that makes it easy for us to show our customers that we are compliant. Review collected by and hosted on G2.com.

I haven't found much use for the questionnaire tool; in general each one we get is specialized enough that answers to other questionnaires aren't responsive, so it typically makes me do even more work than just filling it out myself.

The platform itself occasionally has some buggy behavior, but the team has been great about responding to issues that I raise, so that's less of a problem. Review collected by and hosted on G2.com.

We are using thoropass to get compliant with SOC2 Type 2 certification

* Patient, quick and reliable customer support.

* Flexibility, we needed to go through compliance ASAP and got allocated earliest possible date of audit.

* Many controls are implemented automatically through Thoropass UI

* AWS integration and automatic population of evidence. Review collected by and hosted on G2.com.

I think frontend UI/navigation can be improved, it's not easy to navigate through ERs, there is no indication of file upload, it can take a few minutes to upload 10 files and until upload is done, it is not clear if file is being uploaded or not Review collected by and hosted on G2.com.

Thoropass turned our HIPAA program from spreadsheets and guesswork into a clear, repeatable process. The control mapping to the HIPAA Security Rule, policy templates, and evidence automations (cloud/IDP/code repo integrations) saved our team a ton of time and kept us audit-ready year-round. Their support and in-platform auditors were responsive and pragmatic. Review collected by and hosted on G2.com.

There is not a lot to dislike about using Thoropass. Review collected by and hosted on G2.com.

I love how user-friendly the platform is and how it simplifies our work for SOC audits. The checklist and security manual are vital in guiding us efficiently through the audit process. Having Harrison, our account manager, offer thorough assistance significantly eased our onboarding and use of Thoropass, making it a pleasant experience. Review collected by and hosted on G2.com.

I found it challenging at first to understand what we're supposed to do because there are a lot of tasks in the program. Initially, it was a bit overwhelming to understand what we needed to do and how to do it. Review collected by and hosted on G2.com.