JSON twin: https://www.healthaidb.com/software/thoropass-compliance-automation.json
Thoropass
https://thoropass.com/platform/compliance-automation/
Cloud-based compliance automation and audit platform that automates evidence collection, policy management, continuous monitoring and pairs customers with in-house auditors to streamline SOC, HIPAA, HITRUST and other certification journeys.
Thoropass Compliance Automation is an enterprise SaaS platform combining automated evidence collection, policy and control implementation, risk register, security questionnaire automation, integrations/monitors and in-app audit management. It supports multi-framework compliance (SOC 1/2, HIPAA, HITRUST, ISO, PCI, GDPR, etc.), offers auditor-approved monitors, expert guidance and continuous monitoring to maintain certification readiness and simplify audits.
yes
2019
P1653
2025-09-07
commercial/proprietary
Contact vendor for pricing and tiers; demos available. (No public pricing.)
enterprise_quote
2019
—
product
1.0
{
"company_name": "Thoropass",
"company_url": "https://thoropass.com",
"company_offices": [
"United States"
],
"company_founding": "2019",
"product_url": "https://thoropass.com/platform/compliance-automation/",
"categories": [
"compliance infrastructure",
"administrative",
"security/compliance"
],
"market_segment": [
"enterprise",
"smb"
],
"links": [
"https://thoropass.com",
"https://thoropass.com/platform/compliance-automation/",
"https://thoropass.com/platform/integrations/",
"https://thoropass.com/industries/healthcare-compliance/",
"https://thoropass.com/company/",
"https://thoropass.com/company/contact/",
"https://thoropass.com/trust-center/",
"https://elion.health/products/thoropass-compliance-automation",
"https://www.g2.com/products/thoropass/reviews",
"https://crest-approved.org/member_companies/thoropass-inc/"
],
"summary": "Cloud-based compliance automation and audit platform that automates evidence collection, policy management, continuous monitoring and pairs customers with in-house auditors to streamline SOC, HIPAA, HITRUST and other certification journeys.",
"description": "Thoropass Compliance Automation is an enterprise SaaS platform combining automated evidence collection, policy and control implementation, risk register, security questionnaire automation, integrations/monitors and in-app audit management. It supports multi-framework compliance (SOC 1/2, HIPAA, HITRUST, ISO, PCI, GDPR, etc.), offers auditor-approved monitors, expert guidance and continuous monitoring to maintain certification readiness and simplify audits.",
"target_users": [
"security teams",
"compliance teams",
"IT administrators",
"CISO/security leadership",
"internal/external auditors",
"DevOps/engineering",
"risk managers"
],
"specialties": [],
"regions_available": [
"United States",
"Canada",
"United Kingdom",
"European Union",
"Australia"
],
"languages_supported": [
"English"
],
"pricing_model": "enterprise_quote",
"pricing_details": "Contact vendor for pricing and tiers; demos available. (No public pricing.)",
"license": "commercial/proprietary",
"deployment_model": [
"SaaS"
],
"os_platforms": [
"Web"
],
"features": [
"Automated evidence collection",
"Policy creation, editor and acknowledgements",
"Continuous monitoring and alerts",
"Risk register (risk assessment & remediation tracking)",
"In-app audit management with assigned auditor",
"Access review automation",
"Security questionnaire automation and auto-fill",
"Vendor management and onboarding/offboarding",
"Project management, tagging, comments and assignments",
"Auditor-approved monitors for evidence",
"Penetration testing service integration",
"Trust Center (public-facing compliance portal)",
"Framework mapping across multiple certifications",
"Automated framework updates and roadmap/action items",
"Notifications and collaboration workflows"
],
"optional_modules": [
"Penetration testing",
"Trust Center (public portal)",
"Access reviews (advanced)",
"Expert-led audit services",
"Tailored integrations and monitors"
],
"integrations": [
"Amazon Web Services (AWS)",
"Microsoft Azure",
"Google Cloud Platform (GCP)",
"Jira",
"Rippling",
"Checkr"
],
"data_standards": [],
"api_available": "yes",
"system_requirements": "",
"compliance": [
"SOC 1",
"SOC 2",
"HIPAA",
"HITRUST",
"ISO 27001",
"ISO 27018",
"ISO 42001",
"ISO 9001",
"GDPR",
"PCI DSS",
"CMMC Level 1",
"NIST CSF 2.0",
"Cyber Essentials"
],
"certifications": [
"SOC (SOC 2)",
"HITRUST",
"ISO 27001",
"ISO 9001",
"ISO 42001",
"PCI (listed)"
],
"security_features": [
"Auditor-approved monitors (least-privileged evidence collection)",
"Role-based access controls (RBAC)",
"Continuous monitoring & alerts",
"Audit logs and evidence trails",
"Integration-based automated evidence collection"
],
"privacy_features": [
"Data Processing Addendum (DPA)",
"Business Associate Agreement (BAA) available (HIPAA support)",
"Consent and policy acknowledgement workflows"
],
"data_residency": "",
"customers": [
"Benefix",
"Elestio",
"Monit",
"Stylo",
"Capitalize",
"CLEARGOALS",
"Opstream",
"Pave"
],
"user_reviews": [
"The platform is extremely easy to use and really helped with planning and tracking progress on SOC2 compliance items.",
"Thoropass' automated evidence collection saved us countless hours compared with manual processes.",
"Quality of support is exceptional — very responsive and helpful when we had questions during our audit.",
"When one certification is done, we just push one button and it pulls all the evidence and policies needed for the next one — huge time saver.",
"Thoropass provides a centralized system housing documents, processes, control evidence, and vendor management all in one place.",
"I've seen comments recommending avoiding Thoropass — some users reported poor experiences compared with competitors.",
"Thoropass was good for access reviews and vendor management but felt similar to other compliance tools in the space.",
"The platform plus auditor pairing made the audit process much smoother and eliminated surprises during the engagement."
],
"ratings": [
"G2: 4.7/5 (200+ reviews)"
],
"support_channels": [
"email",
"chat",
"ticketing"
],
"training_options": [
"documentation",
"webinars",
"live_online",
"recorded_demo"
],
"release_year": "2019",
"integration_partners": [
"Amazon Web Services (AWS)",
"Microsoft Azure",
"Google Cloud Platform (GCP)",
"Jira",
"Rippling",
"Checkr",
"HITRUST"
],
"id": "P1653",
"slug": "thoropass-compliance-automation",
"type": "product",
"version": "1.0",
"last_updated": "2025-09-07",
"links_json": {
"self": "https://www.healthaidb.com/software/thoropass-compliance-automation.json"
}
}