Thoropass

“There will always be benefits to having an automation platform, but having a strong audit partner, like the one we found with Thoropass, is invaluable.”

“From the audit perspective, Thoropass has become an extension of my team.”

“Audit guidance from day one and full HITRUST attestation in eight months”

““For a lot of big companies in Europe, it’s really important to have this certification [ISO 27001]. Thanks to the certification, we can continue the discussions.””

““We’re not a team of 100 people; we’re a team of 10, so we knew we needed help to get these certifications. Thoropass was really helpful for that.””

“Audit guidance from SOC 2 through ISO 27001”

““scope was the key to success. It was one of the reasons why we didn’t succeed previously, so we spent a lot of time, even before we signed a contract, talking about scope.””

““Unlike other frameworks, the HITRUST certification process is highly prescriptive. Evidence must be collected and uploaded to HITRUST’s platform, MyCSF. But the Thoropass platform integrates with MyCSF, avoiding duplication of work. Thoropass’ integration with MyCSF was a deciding factor. We didn’t have to upload evidence twice, just once into Thoropass. It saved quite a bit of time.””

““we had all the required attention and resources from the Thoropass side and it was pretty efficient for our team. Overall, it went smoothly.””

““we agreed on the timeline while we were signing the agreement. It was very straightforward, clear, and all of the tasks were definite. We never had a situation where we were waiting on something from Thoropass that wasn’t delivered in time.””

““before we entered the agreement, our Thoropass representative spent a lot of time ensuring that we understood all the details and had a common vision. This alignment was key for us.””

“Flexible support and HITRUST expertise helped ELEKS tailor the process to their needs”

“A coordinated SOC 2 and ISO 27001 audit process”

“Having direct communication with the auditors really helped drive efficiency. Instead of a lot of back and forth, nearly all of our communication was within the platform.”

“If you have the SOC 2 and ISO certifications, you just upload them and off you go. You don’t need to answer anything else. I would estimate 75% of my time is saved.”

“I’m really looking forward to it because I do not see anything better than having a synchronized approach to compliance. It is a challenging subject as is, having it addressed and managed efficiently and effectively is the only way to go.”

“The change management that came about from achieving SOC 2 has been very healthy. When we’re submitting reports to clients or to accountants or to lawyers, everything is clean, nice, and compliant, and there are no headaches.”

“We never got challenged once when we provided our SOC 2 report or GDPR compliance report. I was asked by enterprise-level international customers for our security package certifications, and when I provided them, I had zero questions, zero challenges. Credibility weighs as much as the certification.”

“I don’t believe I sent an email that went unanswered. I don’t believe I gave a deadline that was not met If your customer or your partner tells you you need to be compliant by this date, you need to be compliant by this date. Definitely, Thoropass is the way to go.”

“Not only does Thoropass have great people that are really geared towards customer service, but they have knowledgeable people, and they have a strong platform.”

“We did an RFP process and based on the results, the complexity and personalization of our compliance framework, we believed that Thoropass was the best-suited partner to get us where we wanted to go.”

“Partnered with Thoropass to maintain multi-framework compliance and achieve global expansion”

“The reality is, if your platform gets taken over by hackers because you were too sloppy about security, forget about your ROI on everything.”

“He not only told us what the vulnerabilities are, but he was also very communicative when it came to how to reproduce the vulnerabilities. I was able to reproduce the attacks myself and fix the problems, and that saved so much time.”

“I felt like the Thoropass team was more willing to answer and quickly help, versus the other vendors that I had spoken with. There was a bit more of a human touch. We’re also a B2B SaaS product, and I’d rather build my relationships on trust than just the product.”