Thoropass combines compliance software with an in-house audit firm for SOC 2, ISO 27001, HIPAA, and PCI DSS. See features, pricing, and FAQs.
Thoropass is a compliance automation platform built to help technology companies achieve and maintain security certifications such as SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR. Originally founded in 2019 as Laika, the company rebranded to Thoropass in March 2023 and is headquartered in New York City, with an additional EMEA hub in London opened in late 2024.
What distinguishes Thoropass from many compliance-software competitors is its dual identity: it is both a software platform for automating evidence collection and readiness tracking, and a tech-enabled CPA audit firm in its own right. Thoropass is AICPA peer-reviewed, holds PCI Qualified Security Assessor status, and is a HITRUST Accredited Assessor, letting customers complete both audit preparation and the actual certification audit through one vendor.
The company has raised approximately $98 million in venture funding across multiple rounds, backed by investors including J.P. Morgan Growth Equity Partners, Fin Capital, Canapi Ventures, and Centana Growth Partners, positioning it as a well-capitalized player in the compliance-automation and GRC (governance, risk, and compliance) space.
Thoropass's core offering is its 'Connected Audit' model, which links automated compliance monitoring software directly to its in-house audit team, reducing the friction and duplicated work that typically occurs when a company's compliance platform and its external auditor are separate vendors. The platform continuously monitors cloud, HR, and developer tool integrations to collect evidence automatically rather than relying on manual screenshots and spreadsheets.
An AI-assisted feature called First Pass reviews collected evidence ahead of formal audit fieldwork to flag gaps early, helping teams close compliance holes before the audit clock starts. The platform also includes policy templates, vendor risk management workflows, and dashboards for tracking readiness across multiple frameworks simultaneously.
Because Thoropass supports SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS, HIPAA, and GDPR, companies pursuing more than one certification can manage overlapping controls from a single system rather than duplicating effort across frameworks.
Thoropass does not publish a standard self-serve pricing page; pricing is generally quote-based and depends on company size, frameworks pursued, and whether the audit is bundled with the platform subscription. Publicly referenced figures, such as an AWS Marketplace listing, show a platform subscription around $8,700 per year plus a separate SOC 2 audit subscription around $5,800 per year.
Market-reported pricing for a full bundled SOC 2 Type II engagement, combining the software platform and the audit itself, commonly falls in the $12,000 to $30,000 per year range depending on scope, with Thoropass positioning the bundle as delivering 25 to 50 percent savings compared to paying for a compliance platform and a separate external audit firm.
Thoropass is a compliance automation platform, formerly known as Laika, that combines software for evidence collection with an in-house CPA audit team for certifications like SOC 2 and ISO 27001.
Yes, the company was founded in 2019 as Laika and rebranded to Thoropass in March 2023.
Thoropass supports SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS, HIPAA, and GDPR compliance programs.
Pricing is generally custom, with reported figures around $8,700 to $30,000 per year depending on scope, framework, and whether the audit is bundled with the platform.
Yes, Thoropass operates its own AICPA peer-reviewed CPA audit practice, so it can perform the certification audit as well as the readiness software.
B2B SaaS companies, fintechs, and other technology businesses that need to earn customer trust through formal security certifications.
First Pass is Thoropass's AI-assisted review feature that checks collected audit evidence for gaps before formal audit fieldwork begins.
Common alternatives include Vanta, Drata, Secureframe, and Sprinto, which offer compliance automation software with varying degrees of audit-firm integration.