Hyperproof vs Thoropass

Hyperproof is a governance, risk and compliance (GRC) platform for companies that run many frameworks at once. It was founded in 2018 by CEO Craig Unger and is based in Bellevue, Washington. It has raised $66.5 million, most recently a $40 million growth investment led by Riverwood Capital in August 2023. We found no acquisition of Hyperproof itself; in October 2025 it bought Expent.ai, a third-party risk management company. The platform manages controls, evidence, risks, audits and trust management across a library of more than 160 pre-built frameworks, and collects evidence automatically through connectors it calls Hypersyncs. Hyperproof AI, which entered early access in September 2025, recommends controls and risks, answers natural-language queries and helps validate evidence. AI Guided Experiences, launched in March 2026, added a Suggested Links agent that links controls, policies, risks, requirements and evidence, and an AI-native third-party risk product followed in April 2026. **AI compliance coverage** Hyperproof's framework library includes ISO/IEC 42001, the EU AI Act, the NIST AI RMF and the Cloud Security Alliance's AI Controls Matrix. Its site lists these by name, without describing the controls, templates or tests that come with them. **Who it's for** Mid-market and enterprise compliance teams managing several frameworks. Named customers include Reddit, Fortinet, Appian, Outreach and Thales; Appian runs 28 frameworks on it. We found no published case study for its AI frameworks.

Thoropass, which started as Laika, combines a compliance platform with its own auditors, so one company can prepare a customer for an audit and then perform it. It was founded in 2019 and is based in New York, with Sam Li as CEO and co-founder. It has raised about $98 million, most recently a $50 million Series C led by Fin Capital in November 2022. Audits run through Laika Compliance, LLC, a licensed CPA firm doing business as Thoropass Assurance, and in September 2026 a subsidiary, Thoropass Certification LLC, was accredited to perform ISO/IEC 27001:2022 certification audits. We found no acquisition or merger; its September 2026 announcement still names Thoropass, Inc. as the parent. Thoropass says it covers more than 30 frameworks, including SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS, HIPAA and CMMC, and also sells penetration testing, including tests of AI tools. Its AI features include First Pass AI, which pre-screens evidence before an auditor reviews it, and generative AI for due diligence questionnaires. **AI compliance coverage** Thoropass supports ISO/IEC 42001 readiness with policies, control sets and guided AI system impact assessment workflows, and says its ISO-qualified auditors are kept separate from implementation support. It doesn't list the EU AI Act or the NIST AI RMF. **Who it's for** Companies that want readiness and the audit itself from one vendor. Named customers include Nord Security, AcuityMD, PhysicsX and Access Group.