Thoropass
ThoropassReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
575 reviews
from
External reviews are not included in the AWS star rating for the product.
Comprehensive Compliance Support, Needs Report Enhancement
What do you like best about the product?
I really like Thoropass for the personal assistance and the real-time value it provides. The platform walkthroughs and having auditors at my fingertips to ask questions are fantastic. I also appreciate the roadmap and the platform itself for helping with compliance and certification. The 1:1 conversations to understand the controls better and the breakdown of technical controls are hugely beneficial. Setting it up was easy, and I'd definitely use it again for other clients.
What do you dislike about the product?
The report itself was generic - in which the selected tools my client uses were not within the sections - instead it was listed out in the first 2 sections.
What problems is the product solving and how is that benefiting you?
Thoropass provides best practices, a checklist, and a roadmap for compliance and certifications. I appreciate the personal assistance, real-time value, and ability to converse 1:1 with auditors, helping understand and implement technical controls better.
Streamlined SOC 2 Compliance with Stellar Support
What do you like best about the product?
I appreciate Thoropass for its extremely well-thought-out and easy-to-follow process. They are always there through email and phone at every step of the way, offering communication that's both personal and professional. I also found their Roadmap very helpful as it allowed me to prepare all the necessary information before the audit, making the process very straightforward. The initial setup was extremely easy since they guided us through every step.
What do you dislike about the product?
Their automated metrics have a few problems. They sometimes disconnect from the service and when they do you have to go to each metric and refresh it. It would be nice if all the metrics would refresh when a connection comes back up.
What problems is the product solving and how is that benefiting you?
Using Thoropass, I can assure customers of our SOC 2 compliance; it also highlighted areas for process improvement, which benefits us internally and our customers.
Thoropass: A Comprehensive, Intuitive Audit Platform with Exceptional Support
What do you like best about the product?
1. Comprehensive and TRUSTED by the business community one-stop solution that covers and provides: 1. comprehensive and detailed audit; 2. reports with certified badges, 3. an actual legally binding audit certification (no need to find another accounting audit firm to provide = HUGE BONUS!)l; and 4. ongoing support team (we use it).
2. Professional Account Managers stay on top of the process from the start to the finish, checking in along the way to keep all stakeholders on track and to meet deadlines.
3. A superior audit team that seems to be available almost 24/7 to answer questions in a very timely manner and is very smart. They all provided great tips and guidance when navigating the platform, the implementation process (straightforward), and a few integrations we had to accomplish very complicated tasks.
4. Great UI/UX design makes it intuitive and easy for senior managers like me to ensure all tasks are completed as they should be and on time by my team AND monitor the Thoropass audit & tech teams' support tickets.
5. Pricing is very fair given all you get (see #1 above). We negotiated a longer team deal covering more than 1 year and are very satisfied given what friends at other companies have paid.
2. Professional Account Managers stay on top of the process from the start to the finish, checking in along the way to keep all stakeholders on track and to meet deadlines.
3. A superior audit team that seems to be available almost 24/7 to answer questions in a very timely manner and is very smart. They all provided great tips and guidance when navigating the platform, the implementation process (straightforward), and a few integrations we had to accomplish very complicated tasks.
4. Great UI/UX design makes it intuitive and easy for senior managers like me to ensure all tasks are completed as they should be and on time by my team AND monitor the Thoropass audit & tech teams' support tickets.
5. Pricing is very fair given all you get (see #1 above). We negotiated a longer team deal covering more than 1 year and are very satisfied given what friends at other companies have paid.
What do you dislike about the product?
1. Not the most inexpensive solution in the marketplace.
2. The platform’s AI suggestions are sometimes "off", but welcome to the world of AI, and we always check anyway.
3. Duplicate document uploads during the audit process are frustrating, but they are foxing nd making better via AI tools we noticed at the end of process
4. Would be nice to simplify some navigation menus related to complex tasks, but too bad
2. The platform’s AI suggestions are sometimes "off", but welcome to the world of AI, and we always check anyway.
3. Duplicate document uploads during the audit process are frustrating, but they are foxing nd making better via AI tools we noticed at the end of process
4. Would be nice to simplify some navigation menus related to complex tasks, but too bad
What problems is the product solving and how is that benefiting you?
1. Trust in my company across our security, compliance, InfoSec, and legals environment and infrastructure provided clients the required information their InfoSec and procurements teams needed in order to collaborate with us.
2. Solves the complexity, high cost, and time-intensive nature of achieving security compliance (SOC 2, ISO 27001, and HIPAA) by combining automated evidence collection, AI-driven verification, and expert guidance and final evidence.
3. Saves our internal security, compliance, InfoSec hundreds of hours each quarter in replying to and answering RFP/RFI/other information questions. Our SOC 2 report(s), audit(s), and certification(s) accelerate completion rates 50-75% faster and results in overall lower costs even including the annual Thoropass cost.
2. Solves the complexity, high cost, and time-intensive nature of achieving security compliance (SOC 2, ISO 27001, and HIPAA) by combining automated evidence collection, AI-driven verification, and expert guidance and final evidence.
3. Saves our internal security, compliance, InfoSec hundreds of hours each quarter in replying to and answering RFP/RFI/other information questions. Our SOC 2 report(s), audit(s), and certification(s) accelerate completion rates 50-75% faster and results in overall lower costs even including the annual Thoropass cost.
Effortless Compliance Management with Customizable Templates
What do you like best about the product?
I like that Thoropass features help manage all aspects of compliance for my company, including employee management, policies, training, and vendor management. I also appreciate the audit process transparency. The initial setup was very easy, and our CSM helped migrate all the needed assets from Tugboat Logic. Additionally, we can integrate Thoropass with a few of our tools for vendor management, and the price and platform features were reasons we switched from Tugboat Logic.
What do you dislike about the product?
During the audit process, the evidence collection template could be customized for a SaaS product like ours. It would be better if the evidence collection template could be tailored to suit different types of workspaces.
What problems is the product solving and how is that benefiting you?
Thoropass helps manage compliance frameworks for my company, including HIPAA asset management and audits. It supports comprehensive compliance processes like employee policies, training, and vendor management, ensuring audit process transparency. Thoropass also perform HIPAA assessment where other platforms only do record keeping.
Thoro-ly disappointed. Immature platform, missing basic functions, inflexible to use, slow to fix.
What do you like best about the product?
I like that you can (theoretically) have a functionaly GRC tool, auditors, and penetration testing in one package.
What do you dislike about the product?
Thoropass is not even close to as good as its competitors Vanta, Sprinto, or Qalea.
From the backend to the frontend, the platform is horribly designed and there is already so much technical debt, that it takes them half a year to fix small issues.
From the backend to the frontend, the platform is horribly designed and there is already so much technical debt, that it takes them half a year to fix small issues.
What problems is the product solving and how is that benefiting you?
It is supposed to be helping us with compliance management and audits. It is doing that very poorly.
Easy-to-Use Portal That’s Simple to Navigate
What do you like best about the product?
Their portal is easy to navigate and simple to use. The features feel complete, and I often use them to support our processes, especially for new-hire onboarding and offboarding. The implementation was quick, which has made our workflow easier overall, particularly when it comes to tracking and reviewing access.
What do you dislike about the product?
I encountered a minor bug before, but it was quickly addressed by our Customer Success Manager.
What problems is the product solving and how is that benefiting you?
Thoropass overall is helping us become equipped with knowledge to ensure our business is secure from any threat
Simplifies Audits with Reliable Support
What do you like best about the product?
I really liked the people I worked with, especially Ritu, who was amazing, and the auditors were all super understanding and helpful. They really helped us get to the right spot. The evidence request feature is something I use the most, and I spent a lot of my time working in it and commenting back and forth with the auditors. The setup of Thoropass was very easy.
What do you dislike about the product?
The interface could maybe be a little bit more directed towards the audit experience. It's a little bit hard to get into all the evidence requests. Just from opening the application, but once you know how to do it, it's not too bad. It's just several clicks to get to it. But an audit, I would assume that that would be front and center.
What problems is the product solving and how is that benefiting you?
Thoropass is our system of record for auditing documents, keeping track of all documentation. It connects with many of our systems and helps manage administrative documentation for employees, doing a great job at keeping everything organized.
Automation Disappointment, Manual Work Still Needed
What do you like best about the product?
I like that Thoropass started well with sales support, where we got the relevant team members on board, which was promising for relevant areas. The kickoff was relatively prompt, and the policies in general were of pretty good quality.
What do you dislike about the product?
The main issue I have is with Thoropass's platform and evidence collection, which are extremely basic and manual. We were promised automated evidence collection, but it simply wasn't delivered. For companies undergoing ISO 27001 and SOC 2 type 2 certifications, the platform requires submitting identical evidence twice, wasting valuable time. It doesn't feel fit for purpose and we might have been oversold during the sales pitch with claims of automation and AI that are overstated. Additionally, ChatGPT provides faster and better responses in some areas compared to Thoropass tools, especially on the AI side, and even the team has confirmed not to rely on Thoropass's AI suggestions.
What problems is the product solving and how is that benefiting you?
I use Thoropass to create policies, organize evidence, and automate submissions for ISO 27001 and SOC 2 certification, making it easier for a small team to handle without hiring consultants. It reduces time spent on simple tasks with coordinated evidence collection.
Quick Audit Turnaround, Needs UI Improvement
What do you like best about the product?
I like that Thoropass is very easy to set up and is transparent in Slack. It's impressive that the audit was completed in just a few days.
What do you dislike about the product?
The browser UI is confusing, with lots of windows and confusing designations between tasks and audit items. The initial setup was unclear because of the UI confusion.
What problems is the product solving and how is that benefiting you?
Thoropass helps satisfy SOC II audit requirements and validate security measures. It's easy to set up, transparent in Slack, and completes audits in a few days.
Thorough, Easy Tool That Helped Us Catch Issues Before the Pentest
What do you like best about the product?
Very thorough and the tool made the process very easy. The account manager is very responsive and explained the entire process very well. With regards to the Pentest, the tool helped us identify a few issues ahead of the actual pentest, saving time for us and the pen-testers.
What do you dislike about the product?
Some of our documentation tools are not yet supported by the tools.
What problems is the product solving and how is that benefiting you?
SOC-2 compliance
showing 1 - 10