Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Amazing Service and Easy to Use Platform
What do you like best about the product?
We walked into this process pretty blind. Our rep helped us from day 1 and made it really easy for us to get through it and understand!
What do you dislike about the product?
The first version of the platform was a little confusing and it was tough to switch to the new version but once we got it we saw how much easier it was!
What problems is the product solving and how is that benefiting you?
We have large companies that would not work with us unless we were Soc2. This is the problem we needed solved and Thoropass solved it!
- Leave a Comment |
- Mark review as helpful
High-touch, high-quality program support
What do you like best about the product?
The professionals at Thoropass are great. They walk with you through the whole process and automate / do for you whatever they can. There's no way for SOC 2 to be turnkey but they do their best to make it easy for you. There are many different phases so the high-touch experience was very helpful for our small company.
What do you dislike about the product?
We were surprised to find little differences between SOC 1 Type 2 and SOC 2 Type 2 processes and content. We assumed Thoropass was stronger with SOC 1 but it turns out they fit us really well on SOC 2. Overall, this is not a strong dislike, just a surprise.
There was some confusion at some phases what exactly we were supposed to do. This was during the last steps so it was a little more stressful. Perhaps a dress rehearsal or something like that could be worth the time.
There was some confusion at some phases what exactly we were supposed to do. This was during the last steps so it was a little more stressful. Perhaps a dress rehearsal or something like that could be worth the time.
What problems is the product solving and how is that benefiting you?
Thoropass is helping us define and maintain compliance throughout our organization. They helped us complete Type 1 and Type 2 of SOC 1 and SOC 2 audits, and will help us keep those up to date.
Super platform
What do you like best about the product?
I worked with Thoropass since it was originally Laika.
This siginificantly reduced the time to implement SOC2 audit for my platform.
I highly recommend Thoropass to everyone.
This siginificantly reduced the time to implement SOC2 audit for my platform.
I highly recommend Thoropass to everyone.
What do you dislike about the product?
Overall I am happy with using Thoropass.
What problems is the product solving and how is that benefiting you?
It guided me step by step when processing audit management.
Solid platform for collecting evidence for SOC-2 Auditing
What do you like best about the product?
The notification system, and corresponding emails, made it very easy to quickly react and update comments and/or evidence files when undergoing the preparatory work for our SOC-2 audits. This drastically cut down on the amount of required phone-calls and back-and-forth. Additionally, AWS direct monitoring allowed for massive time savings as evidence was 'automatically' collected -- with no human work required!
What do you dislike about the product?
It can be hard to find evidence you have previously submitted to the platform, once an aduit period has concluded. There are scenarios where it took longer to find the item in the nested UI than to just re-gather the materials.
What problems is the product solving and how is that benefiting you?
Our primary use-case is in Audit-management, and as a hub for all our vendor security questionaire responses. Having this information in a centralized location, helps improve response time to security assessments and maintaining certain compliance standards helps in making the company more attractive as a vendor.
SOC2 made easy
What do you like best about the product?
Using Thoropass made SOC2 Type 1 certification possible in just about 3 months for our company. Their tool helped immensily to ensure we had the right processes in place, that we were covering all the requirements for the certification and whenever we had questions we always had someone in their team to help us out. What was believed to be a painful and long process when we decided to chase SOC2 compliance became a resoanably short and painless process with Thoropass.
What do you dislike about the product?
Based on our experience with Thoropass it is hard to say what I disliked about them. Maybe the fact Thoropass was rebranded half way through our process has created some confusion and we still have people in our company calling them Laika.
What problems is the product solving and how is that benefiting you?
SOC2 Certification. Much easier to talk about security with our customers after being SOC2 certified than it was before. Their tool makes our job much easier by highlighting areas that require attention saving time for our team to focus in actually developing our own product.
Thoropass lines up the boxes, you check them off
What do you like best about the product?
They have a dashboard with about 100 checkboxes related to my platform's security. For each box, all I have to do is upload a screenshot and 1-2 sentences. Thoropass took care of everything else, even writing my infosec policy and employee handbook. I also had a dedicated cybersecurity expert I met with every four weeks to go over any controls I wasn't sure about.
What do you dislike about the product?
Some of the workflow is redundant. For example, I had to check off all my pre-audit controls and then I had to do the same thing with the audit controls. Some of the instructions appear to have been copied directly from the official SOC2 guidelines without a plain explanation. Also, it's difficult to navigate between different sets of controls on the dashboard without opening multiple tabs. I believe Thoropass is still developing their platform and saw substantial improvement over the 6 months I've been using it.
What problems is the product solving and how is that benefiting you?
I used Thoropass to complete a SOC1 and SOC2 cybersecurity audit. We're an early-stage biotech company (2 employees) and the audit is part of the MVP that gets us into pharamaceutical companies.
Thoropass SOC2 Process Review
What do you like best about the product?
Easy to use platform that really hit the mark. We onboarded Thoropass to help guide us through our compliance journey and it really provided everything we needed and educated our team along the way. The layout and roadmap are intuitive and you see how your compliance program is documented easily by following their process.
What do you dislike about the product?
The platform underwent a rebranding and had some UI updates. In the end I think they were all good updates there was just some change management during that time and understanding how my use of the platform changed with the updates.
What problems is the product solving and how is that benefiting you?
Thoropass is helping us document that we adhear to our documented policies and procedures. The automation of evidence collection and an intuitive guide that walks you through the necessary evidence for each step was worth it.
Easy to use compliance platform
What do you like best about the product?
Thoropass contained everything needed to get SOC 2 certified in one low cost platform.
What do you dislike about the product?
The all inclusive nature of Thoropass made it difficult to have alternate options and meant only their method was valid.
What problems is the product solving and how is that benefiting you?
SOC 2 certification
Great SOC2 partner for small startups!
What do you like best about the product?
In no particular order, here is what I really liked about Thoropass:
* CSM at Thoropass seem to have audit/compliance background, which helps significantly when going through the certification process - like quick turnaround on certain questions, etc.
* Platform isn't perfect, but having something to keep track of progress is really useful
* Breaking down the mountain of work you have to do to achieve SOC2 into dividable tasks
* The auditor we've worked was very prompt, professional and very knowledgeable!
* I found the offering to be pretty affordable compare to the competiton which is important for the company of our size (small startup)
* CSM at Thoropass seem to have audit/compliance background, which helps significantly when going through the certification process - like quick turnaround on certain questions, etc.
* Platform isn't perfect, but having something to keep track of progress is really useful
* Breaking down the mountain of work you have to do to achieve SOC2 into dividable tasks
* The auditor we've worked was very prompt, professional and very knowledgeable!
* I found the offering to be pretty affordable compare to the competiton which is important for the company of our size (small startup)
What do you dislike about the product?
Again, in no particular order here is where Thoropass can improve:
* On the tasks side, get more explicit about what is being asked in the description. I had to routinely get on a meeting with CSMs to cover milestones ahead of where I was working and take notes to understand what is exactly being asked for. This worked well, but I wish the Milestones were more self-documenting.
* On the platform side, there are little bugs/issues like % completion not miving for certain views. Also I can't deep link to certain pages. Also, I wish there was more options to connect to external training vendors (or API to automate it).
* Sometime when I ask a question in the platform I had to follow up via email to get it answered. We did go through a couple of CSMs in our time, so some of it might be attributed to handoffs.
* On the tasks side, get more explicit about what is being asked in the description. I had to routinely get on a meeting with CSMs to cover milestones ahead of where I was working and take notes to understand what is exactly being asked for. This worked well, but I wish the Milestones were more self-documenting.
* On the platform side, there are little bugs/issues like % completion not miving for certain views. Also I can't deep link to certain pages. Also, I wish there was more options to connect to external training vendors (or API to automate it).
* Sometime when I ask a question in the platform I had to follow up via email to get it answered. We did go through a couple of CSMs in our time, so some of it might be attributed to handoffs.
What problems is the product solving and how is that benefiting you?
We were using Thoropass to help us obtain SOC2 Type 1 and Type 2 reviews. This meant using both the platform as well as CSM and eventually auditors provided by Thoropass
Simple way of aquiring SOC2 Type1
What do you like best about the product?
Very simple system that quickly shows you what you're missing on your certificate.
What do you dislike about the product?
Sometimes I get lost on what exactly are my next steps, then I can just talk to the online chat or dedicated CSM.
What problems is the product solving and how is that benefiting you?
Simplifying our Audit process to get SOC2 Type1 and 2.
showing 181 - 190