Thoropass’ cover photo
Thoropass

Thoropass

Software Development

New York, NY 14,124 followers

Thoropass automates and runs your IT compliance and audits so you can focus on what matters.

See jobs Follow

About us

Thoropass is the all-in-one platform that combines audit and assessment with compliance automation. We streamline compliance and accelerate audits for SOC, PCI DSS, ISO 27001, HITRUST, HIPAA, and more. With an average of 62% faster time-to-audit and 950+ annual work hours eliminated for our customers, Thoropass cuts 80% of compliance and audit overhead, so you can focus on what matters. Our unique combination of in-house experts and automation technology integrates with your systems so that everything flows seamlessly and stays in a single source of truth. Whether you’re in highly regulated spaces like HealthTech and Fintech, or building trust in SaaS, you can jump into audit with confidence, knowing that Thoropass is with you for every step of the compliance journey.

Website
https://thoropass.com/
Industry
Software Development
Company size
201-500 employees
Headquarters
New York, NY
Type
Privately Held
Founded
2019
Specialties
Compliance, SOC 2, HITRUST, HIPAA, Audits, Infosec Audit, SaaS, GDPR, Pentesting, PCI DSS, Information Security, SOC 1, ISO 27001, CCPA, AWS, Cybersecurity, ISO 42001, and ISO 27018

Products

Click here to view SOC 2 Compliance

Click here to view SOC 2 Compliance SOC 2 Compliance

Service Organization Control 2 (SOC 2) compliance is essential to any organization storing data in the cloud. But getting SOC 2 compliant is long and expensive. Thoropass makes SOC 2 accessible for everyone so you can focus on what matters most: growing your business.

Locations

Employees at Thoropass

See all employees

Updates

  • View organization page for Thoropass
    Thoropass

    14,124 followers

    Join Bennett at 10am ET/7am PT on Feb 18th to hear more. 👇

    View profile for Bennett Stamper
    Bennett Stamper

    Trust is the hardest thing to build and the easiest thing to lose. By 2026, the "honeymoon phase" for startups ignoring compliance is over. Enterprise clients and investors are looking for long-term commitment, documented through frameworks like SOC 2 and ISO. If you can’t prove you’re secure, you won’t get the yes you’re looking for. I’m joining RemoFirst and Tequipy to discuss "The Perfect Match", the essential frameworks that turn a risky startup into a reliable partner. #SOC2 #InformationSecurity #AIGovernance #TechCompliance

  • View organization page for Thoropass
    Thoropass

    14,124 followers

    Is your compliance platform making you audit-ready... or just busy? Cristina Bartolacci has spent most of her career in IT risk management, so she tends to view compliance a little differently from auditors. Her first question is rarely “Will this pass an audit?” and more often “Does this actually reduce risk in a meaningful, sustainable way?” Those two things should align, but they don't always. And that’s how organizations end up very busy without actually being very prepared. She wrote an article sharing the busywork problems she sees most often and how to resolve them: https://lnkd.in/gpNABaXa

    • No alternative text description for this image
  • View organization page for Thoropass
    Thoropass

    14,124 followers

    AI isn’t only speeding up audits. It’s changing what audit readiness means. Compliance stops being a once-a-year fire drill and becomes part of day-to-day operations. With AI, evidence collection happens continuously in the background instead of manually at the last minute. No more chasing screenshots. No more spreadsheet archaeology. No more seasonal panic. Teams spend less time proving controls exist and more time actually strengthening them. Audit readiness becomes an outcome of running the business well, not a standalone project with a looming deadline. When compliance is continuous, audits get easier, risk gets lower, and security becomes something you improve every day. Here's what our founder and CEO Sam Li has to say about the subject.

  • Thoropass reposted this

    View profile for Sam Li
    Sam Li

    I understand why you’d be skeptical about using AI in your audit process. But I believe that in as little as a year or two, it will feel weird NOT to use AI in your audits. The models have come a long way since 2023, and they’re making it possible to automate more and more of the mechanical work. The goal of AI isn’t to cut corners or replace auditors. It’s making the best auditors 10x more productive, which improves both efficiency and quality. Proud that Thoropass is pushing the boundaries of AI and defining the future of audits.

  • View organization page for Thoropass
    Thoropass

    14,124 followers

    We are the end-to-end cybersecurity auditor. We own the entire audit lifecycle. No handoffs. No black boxes. No last-minute surprises. That's because we're relentlessly focused on making audits clearer, more efficient, and more trustworthy for modern security and compliance teams. Check out the video below to learn more. 👇

  • View organization page for Thoropass
    Thoropass

    14,124 followers

    Headed to ViVE? Prepare for the AI-driven audit with us! Join Cristina Bartolacci, Head of Compliance Solutions at Thoropass, on Feb 23 at 11:30 AM PST in the Data Innovations Theatre for an educational session on navigating audits in an AI-driven world. This session explores how organizations can balance intelligent tools with expert judgment to build confidence, interpret risk, and stay audit-ready as AI continues to evolve. #ViVE2026

    • No alternative text description for this image

  • Thoropass reposted this

    View profile for Sam Li
    Sam Li

    What will AI change first in how businesses approach cyber compliance and audit readiness? The first big change is that audit stops being something you do once a year and starts becoming something that’s just… always happening. And that’s not a bad thing. AI makes evidence collection automated and ambient instead of manual and seasonal. So teams spend way less time chasing screenshots and spreadsheets, and way more time actually fixing gaps and improving their security posture. And that’s a mindset change — there is no more mad scramble before an audit. Audit readiness becomes a byproduct of how you run the business, not a special project you panic about every fall. Killing the audit scramble is how compliance moves from being a checklist exercise to becoming what it was always supposed to be: a real-time risk-management function that helps companies run better, and you pass your audit painlessly because you are doing the right thing every day.

Similar pages

Browse jobs

Funding

Thoropass 4 total rounds

Last Round

Series C

US$ 50.0M

Investors

Fin Capital + 5 Other investors
See more info on crunchbase