What do you like best about the product?

This is a big app that wraps around a large process. You need policies, training, monitoring of your infrastructure - and then you need to pass an audit that will include hundreds or thousands of pieces of evidence... And Thoropass can help with all of that!

I love the integrations (Thoropass can tell when my AWS infrastructure falls out of compliance), task reminders and when I'm using a new vendor who needs review) and the automations (I need reminders to stay on top of my compliance tasks).

Three quarters of the year I live in my Dashboard which keeps me up to date on what I need to be doing. And during audit season I live in the audit module which guides me through the audit evidence process.

I should also mention that the support I've gotten from Thoropass customer service reps has been outstanding and very responsive to questions about the product, reporting bugs, or helping me find best practices to improve. My background is not in compliance so the hand-holding with a personal touch has really made a positive difference in my comfort level doing the ongoing work needed to maintain our certification level.

What do you dislike about the product?

Lots of improvements and new features during my three years experience but the training module (assigning/tracking required course completions) still isn't great.

What problems is the product solving and how is that benefiting you?

As an enterprise SAAS vendor, SOC2 compliance is table stakes to even have a conversation. Thoropass helps us adopt the processes and policies needed to pass the SOC2 audit. It helps me stay organized and pay regular attention to all those "important but not urgent" things that otherwise might sometimes fall through the cracks.