Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Compliance made easy with Thoropass
What do you like best about the product?
Peopletree Group has had an outstanding experience using Thoropass as our tool for compliance. Ritu has been incredibly helpful in our meetings, clearly explaining the process and ensuring we understand every step. Their user-friendly customer platform has made it easy for us to navigate, and the integrations and monitors have been a game-changer, automating numerous tasks that would otherwise consume valuable time. Thoropass has taken the gray area out of SOC 1 and SOC 2 compliance, providing us with clear, straightforward guidance and support. We highly recommend Thoropass for anyone seeking a reliable and efficient compliance solution.
What do you dislike about the product?
There are currently no issues that I have encountered with Thoropass
What problems is the product solving and how is that benefiting you?
Thoropass allows us to have a central repository of all our compliance documentation, and gives us a holistic view of what issues remain outstanding, who is delegated to resolve the issue, and allows us to efficiently complete our SOC 1 and 2 audit.
- Leave a Comment |
- Mark review as helpful
Compliance made easy
What do you like best about the product?
Easy to view and understand progress metrics.
What do you dislike about the product?
Not much, great tool overall. Nice and well made UI
What problems is the product solving and how is that benefiting you?
Understanding where the business was in regards to compliance and mapping out a longer strategy
POP SOC2 Partnership with Thoropass
What do you like best about the product?
Thorpass has been great at guiding us through the process of completing a SOC2 certification. Thoropass's project management team has done a great job at trying to understand the unique aspects of our business.
What do you dislike about the product?
Thoropass is great at taking client feedback and integrated feature requests into their product, however sometimes the feature may not be completely documented or ready for broad use. This Agile technique is typical for SAS applications, so Thoropass has few options for doing something different. I also understand that those features are needed for someone, so getting those features out quickly is usually the best option. So not a big deal, just the only negative thing I have seen.
What problems is the product solving and how is that benefiting you?
Thoropass provides us with much better access and monitoring of our SAS cloud based applications than what we had previously. Each integration has yielded a treasure trove of actionable items that our security team can assess and mitigate. Due to shadow IT and the quick evolution of cloud-based applications having integrations consistently watching for security best practices has significantly evolved our security posture and added to our defense in depth strategy.
Excellent audit experience and support!
What do you like best about the product?
Thoropass has been great to work with from their initial outreach through our most recent SOC 2 Type I and II audits. The journey to compliance can be feel imtimidating, but the Thoropass platform did a great job of managing steps and milestones. Even more helpful have been the individuals that helped us through the audits. The technical team was helpful and transparent, and our Customer Success Manager, Darren Zarandi, has done a terrific job supporting our team and guiding us along the way. The built-in integrations have also been a great help to streamline some of the work and evidence gathering.
What do you dislike about the product?
There have been a few small buggy issues in the platform's UI. Entering notes for evidence was touchy as well as updating documents. As we get through more audits, having an easy reference to our past evidence notes, etc. would be greatly beneficial and this has not been possible. The upside is that our Customer Success Manager has been great at communicating these issues and they have either been addressed or are considered for future product updates.
What problems is the product solving and how is that benefiting you?
Thoropass has helped us guide us through SOC Type 2 compliance, policy management, and security training. Without the Thoropass platform, these items would be difficult to achieve on our own.
Compliance made easy
What do you like best about the product?
I come from a DoD background and am used to a compliance management tool (eMASS) like what Thoropass has set-up. However, unlike eMASS, the Thoropass app has a much easier to navigate interface and contains links to templates and examples to show you what the auditors will be looking for in their review. If you get stuck on a particular control, the app makes it easy to leave a comment on the control itself, tag your Thoropass rep, and get a response back quickly. I love that I am teamed-up with a rep from the company that helps make sure we're not getting stuck on any part of the documentation process. Allie has made it so that I have never felt lost even when there have been language in controls that haven't made a lot on sense in our context.
I love the integrations with 3rd party applications that automatically collect evidence for your audit. This couldn't be easier when it's available for the tools you use.
Bugs are not really a thing you see in a positive review, but I feel like it speaks volumes to say that I've run into bugs, probably more than most people because I'm a digger, while using Thoropass. I've been able to email my findings to my customer rep and she almost always responds back the same day having reported it to the development team, giving me their feedback, and providing a timeframe of when it'll be fixed. I can't speak with authority, but I get the impression that their development team is running a tight Agile shop that prioritizes customer tickets in their sprint planning because the bugs I've reported are usually fixed within a couple of weeks at most.
I love the integrations with 3rd party applications that automatically collect evidence for your audit. This couldn't be easier when it's available for the tools you use.
Bugs are not really a thing you see in a positive review, but I feel like it speaks volumes to say that I've run into bugs, probably more than most people because I'm a digger, while using Thoropass. I've been able to email my findings to my customer rep and she almost always responds back the same day having reported it to the development team, giving me their feedback, and providing a timeframe of when it'll be fixed. I can't speak with authority, but I get the impression that their development team is running a tight Agile shop that prioritizes customer tickets in their sprint planning because the bugs I've reported are usually fixed within a couple of weeks at most.
What do you dislike about the product?
If I have to find something to dislike about Thoropass, I would say that when you have applications that can't be tied-in to the monitors/integrations that they have set-up, it can be time consuming to collect screenshots and confusing to know what to take screenshots of for the auditors. That said, that's not so much a dislike about Thoropass specifically and more a dislike of these audits in general.
What problems is the product solving and how is that benefiting you?
We needed to obtain a SOC2 Type 1 certification so we can sell our cloud training product to University customers.
Thoropass Review
What do you like best about the product?
Having everything integrated (audit, penetration test, evidence submission, etc.) into a single platform is great.
What do you dislike about the product?
The platform has been enhanced quite a bit since we came on as a customer (~2 years ago) and most of the features I wanted are now in the platform, so there is very little to dislike.
What problems is the product solving and how is that benefiting you?
Having a 3rd party security / compliance audit makes diligence during sales conversations much easier / faster.
Thoropass makes easy the compliance certification process.
What do you like best about the product?
They way how Thoropass braks down the activities in to do's makes really easy to track the progress and focus in the action items needed to be completed.
What do you dislike about the product?
There are manu AWS monitors that are highlighted as failed, but not all of them are needed to be sorted and fixed. I would be nice to have a relevancy level of each of the monitors and tasks to do.
What problems is the product solving and how is that benefiting you?
Thoropass helped us to identify the roadmap and action items needed to be ready to the audit.
Thoropass for SOC II Compliance
What do you like best about the product?
You are guided through the necessary areas for compliance and it is clear what needs to be done, or provided, to meet the requirements.
Another benefit is being able to ask questions inside the platform to your Customer Success Manager or other support staff.
It does free up time at the audit stage too as you have provided all the necessary evidence already and all that is required is to answer any follow up questions - again, this is all integrated into the platform.
Another benefit is being able to ask questions inside the platform to your Customer Success Manager or other support staff.
It does free up time at the audit stage too as you have provided all the necessary evidence already and all that is required is to answer any follow up questions - again, this is all integrated into the platform.
What do you dislike about the product?
It would be good to have some form of visibility of the audit progress as it is difficult to know if you're close to the end.
What problems is the product solving and how is that benefiting you?
Helping us to achieve SOC II Type 2 compliance and the platform ensures we are covering all areas and are able to implement key processes and policies more efficiently.
Relatively Painless SOC 2 Type 2 Certification
What do you like best about the product?
The platform is very easy to understand once you get familiar with it. All the interactions with the auditors and customer success managers have only been positive experiences.
In addition, the integrations offered can be easily added into our current tech stack.
In addition, the integrations offered can be easily added into our current tech stack.
What do you dislike about the product?
The platform does have a bit of a learning curve at first. On occasion there are extensive UI design changes that confuses the user but this should be stabilized.
Some of the integrations could do with more documentation so that we can both understand what is being collected and how to fix any issues should they present themselves.
Some of the integrations could do with more documentation so that we can both understand what is being collected and how to fix any issues should they present themselves.
What problems is the product solving and how is that benefiting you?
They are ensuring that we remain SOC 2 Type 2 compliant which is a requirement from some of our existing and future clients. Furthermore, we strive to meet and exceed industry standards and Thoropass have been wonderful partners.
Effective Compliance Management
What do you like best about the product?
The platform is very user-friendly and easy to understand. It takes complex requirements and breaks them down into tasks that and checklists you must fulfill, simplifying the journey to be certificated considerably. In addition, the platform provides you with templates that you can use as a basis for the multiple policies and procedures you are required to have. In other words, you are able to do much of the work yourself - while having Thoropass to assist you if you have any questions. On that note, I'm very happy with support we got from our Customer Success Manager, Alex Scudellari. His proactive involvement and assistance has been a game changer and has genuinely accelerated our navigation through the compliance processes. Since he took over as our CSM, we’ve seen significant progress in our compliance efforts.
I would also like to note that we have observed continual improvements in their template documentation and feature set since our initial adoption, which speaks volumes about their commitment to continuousimprovement. We are also like that the platform includes effective monitoring tools that can be used to maintain our compliance.
I would also like to note that we have observed continual improvements in their template documentation and feature set since our initial adoption, which speaks volumes about their commitment to continuousimprovement. We are also like that the platform includes effective monitoring tools that can be used to maintain our compliance.
What do you dislike about the product?
While Thoropass offers outstanding features, it is on the pricier side, which could be a consideration for smaller companies.
Also, it would be helpful if the references in the audit module evidence requests ("ER-000") were directly connected to the questions in the questionnaire (e.g., "AI-000"), by way of an example, you could easily click the evidence request which would link you to the question. This is due to us opting to document our processes in detail in response to each questionnaire item. This means that navigating between our documented procedures (which we submitted in the questionnaire) and the corresponding evidence requests during audits can be a bit time consuming.
Also, it would be helpful if the references in the audit module evidence requests ("ER-000") were directly connected to the questions in the questionnaire (e.g., "AI-000"), by way of an example, you could easily click the evidence request which would link you to the question. This is due to us opting to document our processes in detail in response to each questionnaire item. This means that navigating between our documented procedures (which we submitted in the questionnaire) and the corresponding evidence requests during audits can be a bit time consuming.
What problems is the product solving and how is that benefiting you?
Thoropass simplifies the journey to get certified, while also ensuring you stay compliant with the standards, by streamlining the process through clear checklists, templates, and monitoring tools. You have to do the work yourself - but the platform helps you get compliant (and maintain compliance) efficiently without excessive resource expenditure.
showing 121 - 130