Thoropass
Thoropass, Inc.
Compliance platform and in-house audit firm in one, with AI evidence pre-screening and ISO 42001 readiness alongside SOC 2 and HITRUST
Last checked October 15, 2026Quick facts: Thoropass is an AI compliance vendor founded in 2019 and headquartered in New York, United States. The vendor publicly documents coverage for ISO/IEC 42001, HIPAA, SOC 2, and ISO 27001. Pricing is available on request. Profile last checked October 15, 2026; sources are cited at the bottom of this page.
About Thoropass
Thoropass, which started as Laika, combines a compliance platform with its own auditors, so one company can prepare a customer for an audit and then perform it. It was founded in 2019 and is based in New York, with Sam Li as CEO and co-founder. It has raised about $98 million, most recently a $50 million Series C led by Fin Capital in November 2022. Audits run through Laika Compliance, LLC, a licensed CPA firm doing business as Thoropass Assurance, and in September 2026 a subsidiary, Thoropass Certification LLC, was accredited to perform ISO/IEC 27001:2022 certification audits. We found no acquisition or merger; its September 2026 announcement still names Thoropass, Inc. as the parent. Thoropass says it covers more than 30 frameworks, including SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS, HIPAA and CMMC, and also sells penetration testing, including tests of AI tools. Its AI features include First Pass AI, which pre-screens evidence before an auditor reviews it, and generative AI for due diligence questionnaires. **AI compliance coverage** Thoropass supports ISO/IEC 42001 readiness with policies, control sets and guided AI system impact assessment workflows, and says its ISO-qualified auditors are kept separate from implementation support. It doesn't list the EU AI Act or the NIST AI RMF. **Who it's for** Companies that want readiness and the audit itself from one vendor. Named customers include Nord Security, AcuityMD, PhysicsX and Access Group.
Featured in
Thoropass is ranked in the following independent collection.
Frameworks supported
Regulations, voluntary standards and compliance programs Thoropass documents support for on their own materials. Chip shading reflects the strength of the claim, not an independent audit.
Voluntary standard · Global · voluntary
Regulation · United States · active
Compliance program it supports (not its own certification) · United States (AICPA)
Compliance program it supports (not its own certification) · International (ISO)
Compliance program it supports (not its own certification) · International (PCI SSC)
Thoropass features
Capabilities Thoropass markets publicly. Inclusion means the feature is documented on the vendor's site — not that it's best-in-class. Last checked October 15, 2026.
Audit Evidence Collection
Automated collection, hashing, and retention of evidence (model cards, test results, approvals) for audit.
Policy Management
Authoring, versioning, and distribution of AI usage policies mapped to regulations.
Audit Reporting
Generation of auditor-facing evidence packages documenting AI controls and outcomes.
Integrations
Documented by Thoropass in public product materials.
- GitHub
- GitLab
- Google Workspace
- Jira
- Microsoft Teams
- Microsoft SharePoint
- Datadog
- Databricks
- Rippling
- Snowflake
Thoropass pricing
No public prices or plan tiers. Services (Thoropass Audit, Audit-Ready Pentesting, Vulnerability Scanning, Compliance Suite) are sold on a tailored quote.
Pros and cons of Thoropass
Pros
- Readiness software and the audit from one vendor: audits are performed by its licensed CPA firm, and its certification subsidiary is accredited for ISO/IEC 27001:2022 certification audits.
- ISO 42001 readiness with policy and control-set templates mapped to the standard's clauses and Annex A controls, plus guided AI system impact assessments.
- First Pass AI pre-screens evidence for common rejections before it reaches the auditor.
- Broad audit menu beyond SOC 2, including SOC 1, HITRUST e1/i1/r2 and PCI DSS, plus penetration testing of AI tools.
Cons
- No public pricing: every service is quoted.
- AI framework coverage is limited to ISO 42001 readiness, described in a blog post and on its AI page rather than in its frameworks list; no EU AI Act or NIST AI RMF support.
- Its certification subsidiary is accredited for ISO/IEC 27001 only, and Thoropass doesn't say which body issues ISO 42001 certificates for its customers.
- Readiness and audit come from the same company. Thoropass says its auditors are separate from implementation staff, but buyers should confirm the arrangement meets their own customers' independence expectations.
- Not a technical AI testing tool for models: no model evaluation, bias testing or runtime monitoring.
Alternatives to Thoropass
Frequently asked
What is Thoropass?+
Thoropass is a New York-based company, founded in 2019 as Laika, that combines a compliance automation platform with its own audit teams. It covers more than 30 frameworks, including SOC 2, ISO 27001, HITRUST, PCI DSS and HIPAA, and offers ISO 42001 readiness.
Does Thoropass support ISO 42001 and the EU AI Act?+
Thoropass supports ISO/IEC 42001 readiness with policies, control sets and guided AI system impact assessment workflows. It doesn't list the EU AI Act or the NIST AI RMF among its frameworks.
Has Thoropass been acquired?+
We found no acquisition or merger as of October 2026. Its September 2026 announcement about its ISO 27001 certification subsidiary still names Thoropass, Inc. as the parent company.
How much does Thoropass cost?+
Thoropass doesn't publish prices. Its audit, pentesting, vulnerability scanning and compliance software services are sold on a tailored quote.
What are the alternatives to Thoropass?+
The closest alternatives in this directory are Vanta, Drata, Secureframe, Sprinto, Hyperproof and Scytale: compliance automation platforms built around SOC 2 and ISO 27001 that also cover AI frameworks.
Sources
- Thoropass homepage
- Thoropass: About (founded 2019, founders, Laika Compliance LLC dba Thoropass Assurance)
- Thoropass: Privacy policy (legal entity, New York address)
- Thoropass: Frameworks
- Thoropass AI (ISO 42001, First Pass AI, AI-powered DDQ, AI pentesting)
- Thoropass: ISO 42001 readiness offering
- Thoropass: Pricing (tailored quote)
- Thoropass: Customer stories
- Thoropass: Integrations
- Thoropass technology partner directory (GitHub, GitLab, Google Workspace, Jira, Microsoft Teams, SharePoint, Datadog, Databricks, Rippling, Snowflake)
- Thoropass (as Laika): $35M Series B (November 2021)
- Thoropass: $50M Series C led by Fin Capital (November 2022)
- VentureBeat: Laika raises $35M (founded 2019; about $13M raised before)
- Founders Network: How Thoropass raised $98M+ (event listing)
- Business Wire: Thoropass named to Inc. 5000 (August 2026; 30+ frameworks, CEO)
- Business Wire: Thoropass Certification LLC accredited for ISO/IEC 27001:2022 audits (September 2026)
Keep reading
See an error or outdated detail?
Profiles carry a last-checked date. If something is out of date or wrong, send a correction and we will review it.
Work at Thoropass?
Claim this listing to propose edits to the tagline, description, pricing notes, and headquarters details. Every change is still reviewed by our editorial team.