Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
I was a customer for a few other solutions in this space, Thoropass is BY FAR the best!
What do you like best about the product?
It hard to summarize everything I like about Thoropass, but it comes down to 3 main things: Unified Capabilities, integrated services, quality of service and theThoropass team.
Unified Capabilities: Different compliance and security certifications and protocols have a lot of overlap and many organizations need more than one. With Thoropass, as opposed to our previous solution (from a leading company in this space), the controls are connected and there is way less overlap needed.
Integrated Services: Most importantly the integrated audit, but also the pen test and other requirements related to compliance and security. Audits are not all about technical automated controls on your tech stack, it's about business operations and maturity in every aspect of the business. With Thoropass, having the auditor collaborate with you inside the platform simplifies things ten folds and saves hours and hours of work aligning the platform to the needs of the auditor.
The Thoropass team: I have worked with so many vendors throughout my career, and Thoropass is one of the best vendors I had the pleasure to work with. They care about their customers, understand them and their needs and go above and beyond. Maybe most importantly, they are all a pleasure to work with, and they make the process of compliance and security much more pleasant.
On top of these three main strengths, it's also really easy to use, implementing Thoropass was fast and required no hand holding.
Unified Capabilities: Different compliance and security certifications and protocols have a lot of overlap and many organizations need more than one. With Thoropass, as opposed to our previous solution (from a leading company in this space), the controls are connected and there is way less overlap needed.
Integrated Services: Most importantly the integrated audit, but also the pen test and other requirements related to compliance and security. Audits are not all about technical automated controls on your tech stack, it's about business operations and maturity in every aspect of the business. With Thoropass, having the auditor collaborate with you inside the platform simplifies things ten folds and saves hours and hours of work aligning the platform to the needs of the auditor.
The Thoropass team: I have worked with so many vendors throughout my career, and Thoropass is one of the best vendors I had the pleasure to work with. They care about their customers, understand them and their needs and go above and beyond. Maybe most importantly, they are all a pleasure to work with, and they make the process of compliance and security much more pleasant.
On top of these three main strengths, it's also really easy to use, implementing Thoropass was fast and required no hand holding.
What do you dislike about the product?
Given that I used other solutions in the space in the past I have a good view of the strength of others. The only minor disdvantage of Thoropass is that the automate controls are a bit less intuitive in how they connect to the evidence requests.
What problems is the product solving and how is that benefiting you?
We use Thoropass for SOC2 (types I and II), GDPR and HIPPA
- Leave a Comment |
- Mark review as helpful
Amazing customer service for non-technical client
What do you like best about the product?
The customer service. We are not a SAS or technology company, yet some of our clients required that we get SOC2 certification. We are not technical at all, and our Thoropass customer success manager Grayson guided us seemelessly through the process with patience and clarity. It made what seemed like an impossible ask into a manageable task. Also, their portal for managing the whole process, from tracking tasks to be done to the audit, was very helpful.
What do you dislike about the product?
Honestly, nothing to dislike! Eveyrthing went smoothly.
What problems is the product solving and how is that benefiting you?
Thoropass guides us through and helps us manage compliance and audits for SOC2, which would otherwise not be possible for our small team.
Great tool to simplify our SOC 2 compliance journey and great support at every step
What do you like best about the product?
Thoropass proved invaluable in simplifying our SOC 2 compliance journey. It offers a comprehensive range of tools to ensure we have implemented all necessary controls. The platform facilitated a smooth transition with its intuitive interface. The responsive support team provided prompt assistance at every step, enhancing our confidence in our data protection efforts. Overall, Thoropass exceeded our expectations and is an ideal choice for businesses aiming for compliance excellence. We highly recommend it to any organization seeking an effective SOC 2 compliance solution.
What do you dislike about the product?
Does not support French. Hoping they will add multilanguage functionality in a near futur.
What problems is the product solving and how is that benefiting you?
Thoropass addresses key challenges we faced in our journey towards compliance. Firstly, it provides a structured approach to understanding and implementing the multitude of controls required for compliance, which was crucial in ensuring we covered all necessary aspects. Additionally, the platform offers guidance and resources tailored to our specific compliance needs, streamlining the process and saving us valuable time. By centralizing compliance efforts within the platform, we were able to efficiently track our progress, identify any gaps, and make adjustments as needed to meet all compliance requirements.
Thoropass is a great product, highly recommended by Medialake.
What do you like best about the product?
Platform is easy to use and has very helpful intergrations with providers such as AWS which has saved us lot sof time.
Implemenration is easy with experienced team who are very thorough.
Implemenration is easy with experienced team who are very thorough.
What do you dislike about the product?
No issues so far with the product and service
What problems is the product solving and how is that benefiting you?
We need SOC2 compliance to give our Fortune 500 custiomers the assurance that we have the right security framework in place.
Thoropass provided exceptional and professional SOC2 auditing services.
What do you like best about the product?
What we like best about Thoropass is their deep expertise in SOC2 auditing, combined with their exceptional professionalism and clear communication. They made the entire process smooth and efficient, ensuring we understood every step and felt confident in our compliance efforts.
What do you dislike about the product?
There is very little to dislike about Thoropass. However, their audit portal could be more user-friendly and make organizing documents easier. Overall, their service has been outstanding.
What problems is the product solving and how is that benefiting you?
Thoropass is solving our SOC2 compliance challenges by providing expert guidance and a streamlined auditing process. This benefits us by ensuring we meet regulatory requirements efficiently, enhancing our credibility and trust with clients.
Thoropass Streamlined Our SOC 2 Compliance Certification Process
What do you like best about the product?
What truly set Thoropass apart was the exceptional support we received from their team of compliance experts. They guided us through each step, providing valuable insights, best practices, and hands-on assistance to ensure we met all the requirements. Their deep understanding of SOC 2 regulations and ability to translate technical jargon into practical, actionable steps were invaluable.
What do you dislike about the product?
We experienced some general UI issues, but nothing prevented us from moving forward. It's worth pointing out that our concerns were always addressed eventually.
What problems is the product solving and how is that benefiting you?
Achieving SOC 2 compliance can be arduous and time-consuming, especially for organizations without dedicated in-house compliance teams. Thoropass ensured we were developing the numerous controls, policies, and documentation requirements, which kept us ahead of any potential missed deadlines and unnecessary stress.
A great way to simplify your SOC2 certification process
What do you like best about the product?
As someone who has moved from just being a part of a SOC2 audit to someone responsible for it I really appreciate how easy Thoropass makes the process. Our Customer Success Manager walked us through every step of the process and was always just an email or phone call away if we had any questions. The built-in policy templates, questionnaires and integrations with cloud providers helped get us up and running quickly. The auditors have also been very responsive with the evidence requests, so we're not left wondering if things are progressing.
The UI gives a great overview of where you are in the process. You can easily track how much is done, how many steps are remaining and who is responsible for those tasks. It even has reminders to notify us of deadlines when certain requirements need to be done for Type 2. It's integrations with cloud providers also saves us time on some evidence collection as some items can be gathered automatically in a format that's audit approved.
The UI gives a great overview of where you are in the process. You can easily track how much is done, how many steps are remaining and who is responsible for those tasks. It even has reminders to notify us of deadlines when certain requirements need to be done for Type 2. It's integrations with cloud providers also saves us time on some evidence collection as some items can be gathered automatically in a format that's audit approved.
What do you dislike about the product?
There's not much to dislike, however, there have been instances of the integrated cloud connectors flagging issues on services we're not using. It's not a big deal to turn them off or label them as exclusions but it would be better if we didn't need to do that. There's also been instances where I've had to reconfigure the connectors if they stopped working, but that also only takes a couple minutes.
What problems is the product solving and how is that benefiting you?
Many of our customers are in the finanical industry and require SOC2 or equivilent certifications to do business with them. Thoropass is greatly simplifying the process of getting and keeping our SOC2 certifcations.
Significantly alleviates ambiguity for complex audits
What do you like best about the product?
Great customer experience and onboarding, they were really helpful in removing the ambiguity I had around SOC requirements. They give a lot of guidence on how we can create any new policies needed in a way that will pass the audit which also alleviated the anxiety I had around understanding what we need, how the audit process works, etc.
What do you dislike about the product?
I don't dislike anything but I think there's an opportunity to reduce duplicative work with third-party vendor assessments
What problems is the product solving and how is that benefiting you?
We have several large customers in heavily regulated industries, Thoropass helps us stay compliant so we can continue to service those contracts. As a small team and company, we're able to gain certifications that would take 2-3x the time and money without Thoropass.
Fast Type 1 result, if you put the effort in!
What do you like best about the product?
We are a small startup requiring SOC2 to bring in a particular segment of customers. Generally speaking, our pre-SOC2 behaviors were sound, and we weren't expecting to need to clean up too much to have a successful audit. We were matched with Allie as an account manager who was extremely patient and informative as she walked us through the process and the platform. She walked us through the integrations available so we could connect Thoropass to our systems of record. Honestly, it was very easy, even though we kind of slow rolled it a bit because we were working on other things.
Once we were ready, it took us only a month to get our Type 1 certification. We were in disbelief and wondered if we had mistakenly gotten approved, but Allie assured us it was just because we had done things properly the first time! We are now in our Type 2 phase, and Allie has continued to be helpful in letting us know what we have to do to have a successful Type 2 audit. We have to log in to the platform a couple times a quarter to upload evidence and that is it. Assuming that's really all there is to it, we're hoping to have our Type 2 in hand before the end of this year!
Once we were ready, it took us only a month to get our Type 1 certification. We were in disbelief and wondered if we had mistakenly gotten approved, but Allie assured us it was just because we had done things properly the first time! We are now in our Type 2 phase, and Allie has continued to be helpful in letting us know what we have to do to have a successful Type 2 audit. We have to log in to the platform a couple times a quarter to upload evidence and that is it. Assuming that's really all there is to it, we're hoping to have our Type 2 in hand before the end of this year!
What do you dislike about the product?
I am still unsure about how potential customers will scrutinize our SOC2 report. Because I don't have experience going through the end to end audit process before, it will take some time for me to trust that a Thoropass audit is equal in 'standing' to a traditional audit done by an external firm - and only our customers can tell us this.
I think their built in document editor is very clunky. I almost released some official documents with comments and squigglies built in. Rather than do a lot of work to build an editor in your website, may I suggest a Google Docs or Office 365 integration so the documents can be edited using tools we are already familiar with.
I think their built in document editor is very clunky. I almost released some official documents with comments and squigglies built in. Rather than do a lot of work to build an editor in your website, may I suggest a Google Docs or Office 365 integration so the documents can be edited using tools we are already familiar with.
What problems is the product solving and how is that benefiting you?
Thoropass lets us streamline our SOC2 compliance and simplifies the process by not requiring us to retain an external auditor. In fact, they provide services for everything that would normally be serviced by different firms, so if you're starting from zero you probably can have Thoropass provide everything you need.
have had a great experience. Account manager is always helpful.
What do you like best about the product?
step by step guidance and support throughout the process.
What do you dislike about the product?
some of the materials harder to understand. more examples would be great.
What problems is the product solving and how is that benefiting you?
SOC 2 Compliance
showing 21 - 30