Menu
Optro
Optro, formerly AuditBoard, is an enterprise governance, risk, compliance, and audit platform. Its Compliance Management product supports SOC 2 and ISO 27001 with shared controls, evidence collection, and monitoring across more than 30 frameworks.
Initially branded SOXHUB, the company rebranded to AuditBoard in November 2017 as it expanded beyond SOX into audit, risk and compliance. AuditBoard officially rebranded to Optro on March 9, 2026. Optro describes the change as a continuation of the platform and customer business under a new name.
Best for: Enterprise multi-framework compliance tied directly to controls, audit and IT riskWatch for: Quote-only enterprise product whose breadth and implementation model can be excessive for a small company pursuing only its first SOC 2
What does Optro do?
Optro was founded in 2014. Optro is led by Raul Villar Jr. Optro is headquartered in Los Angeles, California, United States.
Evidence collection
Available · Optro says it automates evidence collection and testing through 200+ out-of-the-box integrations.
Scope and limits
Optro says it automates evidence collection and testing through 200+ out-of-the-box integrations. Its IT Risk & Compliance product also supports recurring data intake directly from connected systems.
Auditor workspace
Available · Optro explicitly provides External Audit Projects: separate workspaces where external audit teams collaborate on evidence requests while customer data access remains restricted.
Security questionnaires
Available · Optro has a dedicated Automated Security Questionnaires product.
Scope and limits
Optro has a dedicated Automated Security Questionnaires product. It accepts customer questionnaires, uses prior questionnaires, SOC 2 reports, policies and other security material to draft answers, and requires human review before submission.
Enterprise administration
Available · Current Optro material documents SAML 2.0, SCIM, configurable role-based authorization, custom roles, MFA and network restrictions.
Scope and limits
Current Optro material documents SAML 2.0, SCIM, configurable role-based authorization, custom roles, MFA and network restrictions. Compliance Management separately supports distinct compliance programs across multiple auditable entities.
SCIM provisioning
Available · Optro security documentation explicitly says it supports SCIM protocols for enterprise identity and provisioning workflows.
Continuous control testing
Available · Compliance Management includes out-of-the-box continuous-monitoring templates for common IT controls.
Scope and limits
Compliance Management includes out-of-the-box continuous-monitoring templates for common IT controls. Optro's Controls Management product separately confirms continuous control testing using real-time data.
Multi-framework support
Partial · Optro supports 30+ frameworks and standards and deliberately uses SCF/common-control mappings so one control and its evidence can satisfy requirements across frameworks.
Scope and limits
Optro supports 30+ frameworks and standards and deliberately uses SCF/common-control mappings so one control and its evidence can satisfy requirements across frameworks. Treat this as a hybrid native-plus-cross-mapped model.
Funding history
Hg acquired AuditBoard in July 2024 in a transaction valuing the company at over $3 billion. AuditBoard reported more than $300 million in annual recurring revenue in October 2025. The company rebranded to Optro on March 9, 2026.
How much does Optro cost?
Optro does not publish prices. Your price depends on plan scope, headcount, services, and contract term.
Ask for the first-year total, renewal cap, implementation charge, required add-ons, and separate audit fee in writing.
How does Optro compare with Anecdotes, Onspring, OneTrust Certification Automation?
| Attribute | OptroThis profile | Comp AI | Iru | Anecdotes | Onspring | OneTrust Certification Automation |
|---|---|---|---|---|---|---|
| Best for | Enterprise multi-framework compliance tied directly to controls, audit and IT risk | Engineering-led teams that value inspectable code or the option to self-host | Teams seeking SOC 2 automation and device management in one platform | Multi-framework security and GRC teams with a dedicated compliance function and an enterprise budget | Configurable multi-framework compliance and audit programs that need no-code workflows and evidence reuse | Existing Certification Automation customers planning export and TRC migration |
| Observed price | Not published | Not published | Up to $15,000 / year for Compliance Automation | $16,000–$98,260 / year | Not published | £36,180 / year |
| G2 rating | 4.6/5 (1,624 reviews) | 4.7/5 (73 reviews) | 4.7/5 (853 reviews) | 4.6/5 (60 reviews) | 4.7/5 (80 reviews) | Not published |
| Integrations | 200+ published | 590+ published | Not published | 230+ published | Not published | Not published |
| Frameworks | 20 listed | 11 listed | 11 listed | 10 listed | 2 listed | 2 listed |
| Onboarding | guided | guided | guided | guided | guided | Not published |
| Auditors here | 1 | 4 | Not published | 1 | Not published | 2 |
| Trust center | Not published | Listed | Listed | Listed | Not published | Partial |
Will Optro connect to your stack?
Optro reports 200+ integrations. Check the exact fields, tests, permissions, and plan coverage for each tool you need.
- Which required tools have a native connector, need an API build, or require manual upload?
- What fields and control tests sync, how often, and with which permissions?
- Which connections are included in the quoted plan?
Which frameworks does Optro support?
- SOC 2Optro says
- ISO 27001Optro says
- ISO 27017Optro says
- ISO 27018Optro says
- ISO 27701Optro says
- ISO 42001Optro says
- HIPAAOptro says
- PCI DSSOptro says
- GDPROptro says
- CCPAOptro says
- CMMCOptro says
- NIST CSFOptro says
- NIST 800-53Optro says
- NIST 800-171Optro says
- NIST AI RMFOptro says
- NIS2Optro says
- DORAOptro says
- EU AI ActOptro says
- NYDFS Part 500Optro says
- CIS ControlsOptro says
Some frameworks use mapped controls rather than native workflows. Confirm the tests and evidence required for each program.
Who does what in a SOC 2 with Optro?
Optro
Organizes the listed control, evidence, and audit workflows.
Your team
Owns policies, control decisions, exceptions, and approval of shared evidence.
The CPA firm
Sets audit scope, tests controls independently, and issues the SOC 2 report.
Optro provides a dedicated external-audit project workspace for evidence-request collaboration and access separation. No public material reviewed establishes an embedded marketplace of independent CPA firms, and Optro does not itself issue SOC 2 reports. This is auditor-collaboration software, not a bundled attestation service.
Which auditors work with Optro?
1 licensed audit firms in our directory list Optro experience. Listing experience is not an endorsement.
| Firm | Licence | Peer review |
|---|---|---|
| 360 AdvancedPublished Type 2 fee: $10,000–$80,000 | Licensed CPA | Pass |
Questions to ask in a Optro demo
- Can you demonstrate the trust center in the product?
- Which parts of native multi-framework support require another tool or service?
- What is the first-year total, including onboarding, add-ons, and the audit fee?
- What renewal increase and minimum contract term should we put in writing?
- Is the SOC 2 audit contracted with a separate CPA firm, and what does that firm charge?
Optro FAQ
Where is Optro based?
Optro is headquartered in Los Angeles, California, United States.
Who runs Optro?
Raul Villar Jr. is the CEO of Optro.
Who founded Optro?
Daniel Kim and Jay Lee founded Optro in 2014.
Does Optro include the SOC 2 audit?
Optro provides a dedicated external-audit project workspace for evidence-request collaboration and access separation. No public material reviewed establishes an embedded marketplace of independent CPA firms, and Optro does not itself issue SOC 2 reports. This is auditor-collaboration software, not a bundled attestation service. A licensed CPA firm issues the SOC 2 report.
Is Optro itself SOC 2 compliant?
Supporting a buyer's SOC 2 program does not establish that Optro holds a current SOC 2 report. Ask for the vendor's current report during security review.
What does Optro integrate with?
Optro reports 200+ integrations. Confirm the fields, tests, permissions, and plan coverage for your own tools.
Similar platforms
Optro on SOC2Auditors
Sources 23 records · last read 2026-10-05
These links show what we checked and when.
| Establishes | Source | Retrieved |
|---|---|---|
| Company page lists predecessor founding year, San Francisco headquarters and employee band; its public-company label conflicts with the Hg acquisition. | Optro on LinkedIn Marketplace | 2026-09-29 |
| Company FAQ says Hg acquisition closed in July 2024. | Optro Press | 2026-09-29 |
| Current company page identifies CEO Raul Villar Jr. | Optro Vendor docs | 2026-09-29 |
| Optro announced on March 9, 2026 that AuditBoard had officially become Optro as the platform expanded beyond audit into broader GRC. | Optro Vendor docs | 2026-09-18 |
| Current Compliance Management product explicitly names SOC 2 and ISO 27001 and documents automated evidence collection, control testing, multiple auditable entities, shared controls and continuous monitoring. | Optro Vendor docs | 2026-09-18 |
| Dedicated SOC 2 Trust Services Criteria package documents centralized SOC 2 program management, automated evidence collection and evidence/testing reuse across frameworks. | Optro Vendor docs | 2026-09-18 |
| Optro states that it supports 30+ frameworks and standards and names them, including SOC 2, the ISO 27000 family, ISO 42001, HIPAA, PCI DSS, NIST, CMMC, DORA, NIS2 and the EU AI Act. It automates evidence collection and testing through 200+ out-of-the-box integrations, with common-control mappings used to eliminate duplicate testing. | Optro Vendor docs | 2026-10-05 |
| IT Risk & Compliance solution documents automated evidence collection, continuous control monitoring and separate External Audit Projects for collaborating with external auditors. | Optro Vendor docs | 2026-09-18 |
| Dedicated customer security-questionnaire automation product drafts answers from prior questionnaires, policies, SOC 2 reports and other approved security material while retaining human approval. | Optro Vendor docs | 2026-09-18 |
| Current security documentation confirms SAML 2.0, SCIM, role-based permissions, custom roles, MFA and network access restrictions. | Optro Vendor docs | 2026-09-18 |
| Optro Success and Services covers implementation, onboarding, customer success, professional services and technical account management. | Optro Vendor docs | 2026-09-18 |
| Hg announced its agreement to acquire AuditBoard in a transaction valued at over $3 billion in May 2024; the acquisition subsequently closed in July 2024. | Hg Press | 2026-09-18 |
| G2 listed Optro at 4.6 out of 5 from 1,624 reviews when checked. | G2 Review platform | 2026-09-18 |
| SOXHUB announced its rebrand to AuditBoard on November 14, 2017. | PRWeb Press | 2026-09-18 |
| AuditBoard announced on October 14, 2025 that it had surpassed $300 million in annual recurring revenue. | Optro Vendor docs | 2026-09-18 |
| Optro's company fact page names Los Angeles as headquarters; the Wilmington, Delaware address on its contact and privacy pages is a registered-agent address. | Optro Vendor docs | 2026-09-29 |
| Risk registers by type and entity, ownership, ratings, action plans and risk appetite. | Optro Vendor docs | 2026-10-01 |
| Control assessments, testing and reporting with customizable stakeholder workflows and permissions. | Optro Vendor docs | 2026-10-01 |
| Role-based dashboards, drill-down, exports and row-level reporting security. | Optro Vendor docs | 2026-10-01 |
| Planning, work programs, fieldwork, document requests, reporting and issue remediation. OpsAudit's FAQ describes workpaper audit logs recording the actor, action, time and before-and-after state. | Optro Vendor docs | 2026-10-02 |
| SOX risk-control matrix, documentation, testing and deficiencies. | Optro Vendor docs | 2026-10-01 |
| Vendor tiering, questionnaires, risk scoring, security-rating integrations and remediation. | Optro Vendor docs | 2026-10-01 |
| Optro's own trust center, hosted on Conveyor, lists SOC 1 Type 2 and SOC 2 Type 2 reports, ISO 27001 certification and TX-RAMP, and says the application runs on cloud infrastructure meeting FedRAMP Moderate requirements. | Optro Trust Center Vendor docs | 2026-10-05 |
Not yet confirmed
- Customer count · last checked 2026-09-29