Thoropass’s distinctive angle is bundling the audit itself: it is a licensed audit firm, not just a platform, which can simplify procurement for teams that want software and audit from one vendor. Questionnaire automation and the trust center are supporting features. Buyers focused purely on questionnaire response should test that motion against dedicated tools, but those who want audit + compliance + customer assurance together get an unusually unified offering.
Independent reviewReviewed Jun 2026
Thoropass
Is Thoropass right for your team?
Thoropass is an "auditor-led, AI-powered" compliance and audit platform that includes security questionnaire automation and a trust center alongside its licensed audit delivery.
Best forTeams wanting compliance, audit, and customer assurance from one vendor.
Main usersSecurity / GRC
Sources reviewed1
Licensed audit firm delivers audits within the platform.
Research inputs reviewed for this profile.
Structured integration coverage represented in this profile.
Features, workflow steps, and newer capabilities represented in this profile.
Where Thoropass is strongest
These scores reflect the materials reviewed for this page. Use them to plan your demo, not as a product rating.
01
AI answer support
Published support for drafting, checking, and approving answers.
02
Enterprise controls
Published SSO, roles, audit, and rollout controls.
03
Process coverage
Published support for intake, routing, review, approval, and reuse.
Source coverageAmount of public product information available for review.
3/10
AI answer supportPublished support for drafting, checking, and approving answers.
9/10
Process coveragePublished support for intake, routing, review, approval, and reuse.
8/10
Portal supportSupport for customer portals and nonstandard questionnaire formats.
2/10
Trust centerDocument sharing, access controls, and customer self-service.
4/10
IntegrationsPublished CRM, collaboration, document, API, and knowledge connections.
4/10
Enterprise controlsPublished SSO, roles, audit, and rollout controls.
9/10
Customer evidencePublished customer stories, product screenshots, and supporting sources.
1/10
Pricing and rollout at a glance
Quote-based subscription (software + audit)
Confirm pricing by frameworks, audit scope, company size, and services.
Expect framework setup, evidence collection, and audit delivery before questionnaire/trust value.
Confirm who owns source cleanup, reviewer setup, and integrations.
Not documented publicly.
Ask how audit artifacts, evidence, and questionnaire history export at contract end.
What Thoropass does
Thoropass is an audit and compliance platform that pairs software automation with in-house auditors. Public materials describe an audit lifecycle platform (readiness through final reporting), automated evidence collection, access-review automation, risk assessment, and multi-framework support with overlapping control mapping.
Within that, Thoropass offers security questionnaire automation (responding to vendor security assessments) and a public trust center. Its main advantage is delivering actual audits as a licensed CPA firm with embedded auditors, positioned as "auditor-led, AI-powered."
Who should use Thoropass?
Use cases
Where Thoropass is most useful.
Compliance & audit
Achieve and maintain frameworks with automated evidence and integrated audit delivery.
Security questionnaire automation
Respond to vendor security assessments using compliance data.
Trust center
Publish a trust center to demonstrate compliance and build customer trust.
Risk & access reviews
Track risk and automate user access validation.
Teams
Teams and users
The people most likely to use the product during questionnaires, RFPs, assessments, and customer security reviews.
Compliance managerManager or director / Security / GRC
Runs framework programs and audits and oversees questionnaire/trust content.
Security analystPractitioner / Security / GRC
Maintains evidence and answers questionnaires from compliance data.
How Thoropass handles a questionnaire
Establish frameworks & evidence
Teams select frameworks; AI helps collect and organize evidence.
Run the audit
In-house auditors deliver the audit within the platform.
Assure customers
Questionnaire automation and trust center reuse compliance data for customer reviews.
Features to test in a demo
Audit lifecycle platform
Readiness through final reporting with in-house auditors and AI evidence automation.
- The licensed-firm model is the core differentiator.
Questionnaire automation & trust center
Respond to security assessments and publish a trust center from compliance data.
- Supporting features, most valuable when unified with audit/compliance.
Integrations and customer examples
Integrations
Connections to source documents, review tools, customer portals, and sales systems.
AWSOther
Evidence collection from cloud.
GitHubOther
Engineering evidence.
IAM platformsOther
Access evidence.
HR systemsOther
Personnel evidence.
Ticketing / project toolsOther
Remediation tasks.
Technical features
APIs and AI tooling
Features to ask about if APIs or AI tooling matter to your team.
Auditor-led platformConfirm audit scope, auditor credentials, and how software and audit are contracted. ->
Delivering audits as a licensed firm differentiates from platform-only competitors and simplifies procurement.
AI evidence automationConfirm what AI automates versus suggests and how review works. ->
AI-driven evidence collection reduces audit-prep effort and supports questionnaire answers.
Compare Thoropass with alternatives
What to compare
Thoropass
Secureframe →Vanta →Best for
Teams wanting compliance, audit, and customer assurance from one vendor.Secureframe is a compliance-automation platform (SOC 2, ISO 27001, HIPAA, CMMC and more) that adds questionnaire automation and a trust center as part of a broader GRC suite.Vanta combines compliance automation, a trust center, risk management, and AI-assisted security questionnaire response.Test in a demo
Shortlist Thoropass when you want compliance, audit, questionnaire response, and trust from one vendor.Test your questionnaire, integrations, and setup requirements.Test your questionnaire, integrations, and setup requirements.Buyer checklist
Demo
What to test in a Thoropass demo
Separate audit value from questionnaire workflow fit.
Audit + software
Confirm how audit delivery and the platform are contracted and integrated.
Questionnaire handling
Bring a real questionnaire and assess fit versus a dedicated tool.
Framework mapping
Confirm multi-framework overlap mapping for your needs.
Verify before buying
Claims to verify before purchase
Validate audit scope, questionnaire depth, and pricing.
Audit scope
Confirm what the licensed-firm audit covers and auditor credentials.
Questionnaire depth
Confirm portal and messy-format handling versus dedicated tools.
Pricing
Bundled software + audit pricing varies; confirm by scope.
What isn’t publicly documented
Confirm these items directly during procurement.
ItemPublic statusWhat to confirm
Buyer portalsConfirm buyer-portal handling versus dedicated response tools.
Verify with vendor
SSO / SCIMConfirm SSO/SCIM by plan.
Verify with vendor
Free tier or trialBundled software-plus-audit pricing; confirm entry options.
Verify with vendor
Zero data retentionAsk for the current contractual retention terms.
Verify with vendor
No-training commitmentConfirm whether customer data trains vendor or third-party models.
Verify with vendor
Full library exportAsk how audit artifacts, evidence, and questionnaire history export at contract end.
Verify with vendor
Company information
Thoropass (formerly Laika) is a privately held compliance-and-audit company and licensed CPA firm, founded in 2019 in New York by Sam Li, Austin Ogilvie, and Eva Pittas. It references 1,000+ organizations served. Current executive titles can change and should be confirmed.
Company snapshot
Founded2019
HeadquartersNew York, NY
Company typePrivately held
FoundersSam Li, Austin Ogilvie, Eva Pittas
Questions to ask Thoropass
Ask these questions in the Thoropass demo, then test the answers with your own content and approval process.
- Does the product answer customer requests, send vendor assessments, or both?
Thoropass mainly supports compliance, trust, and customer security reviews. It may reduce incoming questionnaires, but sending assessments to suppliers is not its main purpose.
- Can every AI-drafted answer be traced to its source?
Thoropass says drafted answers use source material. In the demo, open several citations and test what happens when sources conflict or go out of date.
- Which questionnaire files and customer portals can it handle?
Thoropass documents file and customer portal support. Test a real spreadsheet, PDF, and difficult portal before buying.
- Which standard and custom questionnaires does it support?
Thoropass does not clearly document SIG, CAIQ, HECVAT, or VSA support. Ask whether each is built in, available as a template, or handled as a custom import.
- Does it include buyer-side vendor risk assessment?
Thoropass is not primarily a buyer-side vendor risk product. If you need to score suppliers before sending assessments, evaluate that separately.
- Can its trust center prevent repeat questionnaires?
Thoropass includes a trust center where customers can access approved security material. Confirm access controls, NDA steps, analytics, and which requests still become questionnaires.
- How does review, approval, answer ownership, and audit history work?
Thoropass documents review and approval controls. In the demo, test a low-confidence answer, expert assignment, final approval, and the audit record.
- Does it connect to the systems your team already uses?
Thoropass lists 5 integrations across other systems. Examples include AWS, GitHub, IAM platforms, HR systems, and Ticketing / project tools. Confirm what each connection can do, whether API work is required, and which plans include it.
- How are reused answers updated when policies, reports, or products change?
Thoropass documents controls for maintaining source content. Ask who updates policies, SOC 2 reports, subprocessors, and product details—and whether those changes reach every reused answer.
FAQ
What makes Thoropass different?
Thoropass is a licensed CPA firm that delivers audits within its compliance platform ("auditor-led, AI-powered"), and includes questionnaire automation and a trust center.
Is Thoropass a questionnaire tool?
Questionnaire automation is a supporting feature; Thoropass is primarily a compliance-and-audit platform.
Disclosure: This page is not sponsored. We do not accept payment to change our findings or recommendations.