Thoropass

“Thoropass was knowledgeable and evaluated what we have, instead of just going through some kind of hard-coded checklist and expecting us to fulfill unnecessary requirements.”

“Thoropass’ integration with MyCSF was a deciding factor. We didn’t have to upload evidence twice, just once into Thoropass. It saved quite a bit of time.”

““Go with a company like Thoropass that has multiple frameworks and additional feature sets that are really nice to have and build in systems of efficiency. And somebody that has an external auditor that they partner with, so it’s not just punted to your lap to handle and figure out.””

“Reflecting on this, Ryan shared “it just wouldn’t have been possible without Thoropass.””

““It scrapes our network seamlessly and notifies me when it detects a new tool being used within the company. It’s scary accurate,” said Hyllestad.”

““The auto imports for the relevant policies made life a breeze.””

“If you have the SOC 2 and ISO certifications, you just upload them and off you go. You don’t need to answer anything else. I would estimate 75% of my time is saved.”

“Having direct communication with the auditors really helped drive efficiency. Instead of a lot of back and forth, nearly all of our communication was within the platform.”

“What helped us out the most was someone helping me understand what’s important now, what’s coming up next, and taking everything one step at a time.”

“Compliance is a really big undertaking and there’s a lot of different parts to it.”

“The plans in Thoropass helped us a lot. IT was like ‘here’s a list of things you need to do quarterly, monthly, etc.’”

“Thoropass helped me grasp everything in this enormous world of information that is SOC 2 compliance.”

“I can’t say enough about our compliance experts. We talked to them every single week and their knowledge was so invaluable. It was helpful to have someone that I could run my ideas off of and project manage this entire undertaking.”

“It was genuinely a warm blanket in this space of compliance and SOC 2 where we didn’t know anything.”

“Thoropass had this breadth of experience that would be shared with me, especially about how other startups went through the same process.”

“As we went up-market and scaled, we started getting more diligence. Some firms wanted info-sec policies that we already had in place, but as we started to scale, all 500+ top firms had tough security assessments.”

“I’m really looking forward to it because I do not see anything better than having a synchronized approach to compliance. It is a challenging subject as is, having it addressed and managed efficiently and effectively is the only way to go.”

“When we’re submitting reports to clients or to accountants or to lawyers, everything is clean, nice, and compliant, and there are no headaches.”

“The change management that came about from achieving SOC 2 has been very healthy.”

“I was asked by enterprise-level international customers for our security package certifications, and when I provided them, I had zero questions, zero challenges. Credibility weighs as much as the certification.”

“We never got challenged once when we provided our SOC 2 report or GDPR compliance report.”

“I don’t believe I sent an email that went unanswered. I don’t believe I gave a deadline that was not met If your customer or your partner tells you you need to be compliant by this date, you need to be compliant by this date. Definitely, Thoropass is the way to go.”

“Not only does Thoropass have great people that are really geared towards customer service, but they have knowledgeable people, and they have a strong platform.”

“We did an RFP process and based on the results, the complexity and personalization of our compliance framework, we believed that Thoropass was the best-suited partner to get us where we wanted to go.”

“The road to SOC 2 has been a journey of discovery and awareness—not to mention a learning curve for me and my team. Having a trusted partner, like Thoropass, was essential in helping us achieve our goal and deliver on our promise to clients and partners.”