Thoropass Pricing, Features and SOC 2 Frameworks (2026)

Thoropass, formerly known as Laika, merges two roles that are usually separate: it is both a compliance software provider and a licensed audit firm. Founded in 2019 and based in New York, the company delivers SOC 2, ISO 27001, HITRUST and other audits in-house. Its core buyers are startups and mid-market companies, including healthcare organizations, that want the software and the audit from a single vendor.

The SOC 2 engagement runs through an affiliated CPA firm, Laika Compliance LLC doing business as Thoropass Assurance, which received a Pass rating on its AICPA peer review in December 2025. Customers work with a customer success manager and in-house auditors rather than coordinating with an outside firm. Thoropass also offers CREST-accredited penetration testing, so testing, readiness and the audit can come from one place. The data does not indicate separate expert guidance beyond this CSM and auditor model.

Framework coverage is narrower than some competitors, at about 10 frameworks, including HIPAA, GDPR, PCI DSS, NIST CSF, CMMC and HITRUST. The platform lists around 200 integrations and includes a trust center, policy templates and questionnaire automation; vendor risk management is not documented. On G2, Thoropass rates 4.7 out of 5 across 585 reviews. Pricing is quote-based, but AWS Marketplace lists the platform at $8,700 per year plus $5,800 per year for the audit, and third-party estimates start near $15,000, with a Vendr median of about $25,000.

Companies that prefer one contract covering software and audit, especially those needing HITRUST, will see a clear fit. The trade-off of that model is that the auditor is affiliated with the software vendor, so buyers should consider how their customers and partners view that arrangement. Organizations planning to expand into many frameworks should also confirm that the smaller catalog covers their roadmap.