Menu
On this page
Thoropass's AWS Marketplace listing prices two separate annual subscriptions: a compliance platform from $8,700, which includes your first framework, and a SOC 2 audit subscription from $5,800. The audit line is performed by Thoropass's affiliated CPA firm, so $14,500 is the starting floor for software plus audit, not a quote. Bringing your own auditor changes what you buy.
Both figures are 12-month terms on Thoropass’s seller listing, as of October 20, 2026. The listing marks each as “starting at”, takes private-offer requests, and states that fees are non-cancellable and non-refundable except as required by law.
How much does Thoropass cost?
Thoropass publishes nothing above these starting figures. Everything your scope adds is quote-only.
| Line on the listing | Starting price, 12 months | What the listing says it covers |
|---|---|---|
| Compliance Platform | $8,700 | “Platform Subscription, including your first framework” |
| Audit Subscription | $5,800 | “SOC2 Audit subscription” |
| Both lines | $14,500 | Sum of the two starting prices. A floor for software plus audit, not a rate card or a bundle price |
Does Thoropass pricing include the SOC 2 audit?
Only the audit subscription does, and Thoropass sells it as a line separate from the platform. Thoropass Assurance, a CPA firm legally separate from Thoropass, Inc. and under the same corporate umbrella, performs that audit and signs the report. The purchase path decides what you pay Thoropass and who signs.
| Purchase path | What Thoropass charges | Who signs the report | Get in writing |
|---|---|---|---|
| Thoropass software plus its audit | $8,700 and $5,800 starting prices, $14,500 floor | Thoropass Assurance | Two order lines, the report type, observation period and criteria in scope, and the same-scope renewal price |
| Thoropass audit, your current GRC tool | Not published | Thoropass Assurance | Whether the $5,800 audit line applies without the $8,700 platform line, and what workspace access the audit needs. Thoropass says its audit platform works with any GRC platform; test it with a real export |
| Thoropass platform, a different CPA firm | The $8,700 platform line is listed as its own dimension; platform-only pricing with an outside CPA is not published | Your CPA firm | Whether an outside CPA can work in the Thoropass workspace, what export you get, and the fees for either. Thoropass’s public material does not document outside-CPA access |
Settle the last row before signing. If the workspace cannot host your own CPA, a Thoropass platform subscription ties you to Thoropass Assurance for as long as you stay on it.
Vanta, Drata, and Sprinto prepare evidence for a CPA firm you engage separately, so a lower software price there excludes the audit. Add a CPA proposal to that quote before comparing; the Vanta pricing and Drata pricing guides and the SOC 2 software pricing comparison give the software side. Whether common ownership between vendor and CPA firm is acceptable is covered in the Thoropass review.
What happens to the price at renewal?
Thoropass’s standard agreement keeps the fee fixed for the first term, then allows a renewal increase of up to 7% unless Thoropass gives notice of different pricing at least 30 days before the term ends. The master subscription agreement linked from the AWS listing, a version marked last modified May 2023 that an Order Form can override, also renews automatically for one-year periods unless either side gives written notice at least 15 days before the term ends. Before a renewal, Thoropass may re-estimate your headcount and invoice prorated fees if you have grown. A promotional or one-time-priced term renews at the list price then in effect. Fees are paid in advance and are non-refundable. Calendar both notice dates, and ask whether your Order Form changes either.
What can raise a Thoropass quote?
Frameworks beyond the first, a wider audit scope, and services around the software, none of which Thoropass prices publicly.
The audit line is described as a SOC 2 audit. For each additional framework (Thoropass markets ISO 27001, HIPAA, PCI DSS, and HITRUST, per its software profile), ask whether it adds a platform line, an audit line, or both. Because fees are non-cancellable, get the same-scope renewal price and notice terms before the first term starts. The Thoropass review lists what a complete proposal should itemize.
More in Compliance Tools