Thoropass

What do you like best about the product?

I appreciate Thoropass for its extremely well-thought-out and easy-to-follow process. They are always there through email and phone at every step of the way, offering communication that's both personal and professional. I also found their Roadmap very helpful as it allowed me to prepare all the necessary information before the audit, making the process very straightforward. The initial setup was extremely easy since they guided us through every step.

What do you dislike about the product?

Their automated metrics have a few problems. They sometimes disconnect from the service and when they do you have to go to each metric and refresh it. It would be nice if all the metrics would refresh when a connection comes back up.

What problems is the product solving and how is that benefiting you?

Using Thoropass, I can assure customers of our SOC 2 compliance; it also highlighted areas for process improvement, which benefits us internally and our customers.

What do you like best about the product?

1. Comprehensive and TRUSTED by the business community one-stop solution that covers and provides: 1. comprehensive and detailed audit; 2. reports with certified badges, 3. an actual legally binding audit certification (no need to find another accounting audit firm to provide = HUGE BONUS!)l; and 4. ongoing support team (we use it).

2. Professional Account Managers stay on top of the process from the start to the finish, checking in along the way to keep all stakeholders on track and to meet deadlines.

3. A superior audit team that seems to be available almost 24/7 to answer questions in a very timely manner and is very smart. They all provided great tips and guidance when navigating the platform, the implementation process (straightforward), and a few integrations we had to accomplish very complicated tasks.

4. Great UI/UX design makes it intuitive and easy for senior managers like me to ensure all tasks are completed as they should be and on time by my team AND monitor the Thoropass audit & tech teams' support tickets.

5. Pricing is very fair given all you get (see #1 above). We negotiated a longer team deal covering more than 1 year and are very satisfied given what friends at other companies have paid.

What do you dislike about the product?

1. Not the most inexpensive solution in the marketplace.

2. The platform’s AI suggestions are sometimes "off", but welcome to the world of AI, and we always check anyway.

3. Duplicate document uploads during the audit process are frustrating, but they are foxing nd making better via AI tools we noticed at the end of process

4. Would be nice to simplify some navigation menus related to complex tasks, but too bad

What problems is the product solving and how is that benefiting you?

1. Trust in my company across our security, compliance, InfoSec, and legals environment and infrastructure provided clients the required information their InfoSec and procurements teams needed in order to collaborate with us.

2. Solves the complexity, high cost, and time-intensive nature of achieving security compliance (SOC 2, ISO 27001, and HIPAA) by combining automated evidence collection, AI-driven verification, and expert guidance and final evidence.

3. Saves our internal security, compliance, InfoSec hundreds of hours each quarter in replying to and answering RFP/RFI/other information questions. Our SOC 2 report(s), audit(s), and certification(s) accelerate completion rates 50-75% faster and results in overall lower costs even including the annual Thoropass cost.

What do you like best about the product?

I like that Thoropass features help manage all aspects of compliance for my company, including employee management, policies, training, and vendor management. I also appreciate the audit process transparency. The initial setup was very easy, and our CSM helped migrate all the needed assets from Tugboat Logic. Additionally, we can integrate Thoropass with a few of our tools for vendor management, and the price and platform features were reasons we switched from Tugboat Logic.

What do you dislike about the product?

During the audit process, the evidence collection template could be customized for a SaaS product like ours. It would be better if the evidence collection template could be tailored to suit different types of workspaces.

What problems is the product solving and how is that benefiting you?

Thoropass helps manage compliance frameworks for my company, including HIPAA asset management and audits. It supports comprehensive compliance processes like employee policies, training, and vendor management, ensuring audit process transparency. Thoropass also perform HIPAA assessment where other platforms only do record keeping.

What do you like best about the product?

I like that you can (theoretically) have a functionaly GRC tool, auditors, and penetration testing in one package.

What do you dislike about the product?

Thoropass is not even close to as good as its competitors Vanta, Sprinto, or Qalea.
From the backend to the frontend, the platform is horribly designed and there is already so much technical debt, that it takes them half a year to fix small issues.

What problems is the product solving and how is that benefiting you?

It is supposed to be helping us with compliance management and audits. It is doing that very poorly.

What do you like best about the product?

Their portal is easy to navigate and simple to use. The features feel complete, and I often use them to support our processes, especially for new-hire onboarding and offboarding. The implementation was quick, which has made our workflow easier overall, particularly when it comes to tracking and reviewing access.

What do you dislike about the product?

I encountered a minor bug before, but it was quickly addressed by our Customer Success Manager.

What problems is the product solving and how is that benefiting you?

Thoropass overall is helping us become equipped with knowledge to ensure our business is secure from any threat