Let us match you
Thoropass will do all the work to match you with the best Experts.
Partner
Beda Software

Beda Software

Beda Software focused on trust, security, and compliance for the Health Tech sector. Beda Software works as your technological partner tackling all aspects related to Healthcare Software development We know how to build SOC2/HITRUST-compliant infrastructure for your healthcare application. We are experienced with HIPAA and GDPR. Furthermore, we are a team of experienced engineers that leverage cutting-edge technologies in DevOps and software development.
Partner
The Gnar Company

The Gnar Company

The Gnar partners with high-growth and enterprise companies to build secure, scalable, digital products -- faster. We're an experienced team of US-based product designers, full-stack engineers, and problem solvers who take pride in simplifying the gnarliest, most complex technical challenges. Whether you need to build an app from the ground up, want to confidently accelerate your roadmap, or simply have a technical challenge that's keeping you up at night: We're here for it. Our Focus: • Compliant Web & Mobile App Development • Product Design and Strategy • Complex Integrations • Technical Audits & Analysis
Partner
Secur01 Inc.

Secur01 Inc.

As specialists in Governance, Risk, and Compliance (GRC), Secur01 guides organizations in optimizing their security posture. Our fully bilingual team (English/French) excels in transforming regulatory requirements into concrete and effective strategies, tailored to your business challenges. As a Managed Security Service Provider (MSSP), we complement our GRC expertise with managed cyber defense services and cyber attack simulations, delivering an integrated security approach. Our rigorous methodology ensures alignment between your compliance objectives and the proactive protection of your digital assets. Our holistic vision of cybersecurity, combined with our GRC expertise, makes us the ideal partner for organizations seeking to enhance their security and compliance maturity.
Partner
ACOINFO

ACOINFO

We are a professional services company that specializes in providing guidance and support to organizations to ensure their technology infrastructure is secure, compliant with industry standards, and protected against cyber threats. We employ experienced consultants who work with our clients to identify potential vulnerabilities in their systems and develop strategies to mitigate risk. We also assist with regulatory compliance, such as ensuring that our clients meet requirements set by data protection laws, industry standards, and other regulations.
Partner
GDPR Local Ltd.

GDPR Local Ltd.

GDPR Local offers GDPR Consultancy and Article 27 Representative services. We are an experienced, professional, proactive company with many years experience in GDPR, ISO27001, and other data protection frameworks. Our services include full GDPR implementation using the LAIKA framework, vDPO services, DPIA production, LIA documentation, ROPA production, training, and ongoing consultancy. We can help with the most complex GDPR requests, SARs, RTEs, and management of data breaches. Contact us anytime to discuss your requirements. https://gdprlocal.com or info@gdprlocal.com Our users have access to our compliance portal which is used to ensure you meet our Article 27 compliance obligations and provides online request management tools, access to our Consultancy team, and access to key documentation or GDPR information. Access to the portal is free for all users. Based in Brighton in the UK and Dublin in Ireland we are well placed to act as your UK or EU Article 27 Representative and will work hard to ensure you meet you compliance obligations and avoid any Regulator involvement. Our team of compliance experts have managed hundreds of requests and understand how to deal with the most complex cases. We have worked with every UK/EU Regulator and have processes in place to manage Regulator investigations and to help companies avoid Regulator sanctions and fines. We have managed the most complex cases including providing legal defense material and representing our clients in court. We can manage an investigation by a Supervisory Authority where necessary. We have a good relationship with the local Regulators the ICO [UK] and DPC [Ireland]. Our team of compliance experts all have a legal background and have experience in a wide range of industries and regions.
Partner
Facient

Facient

Facient is a fractional consulting firm that provides on-demand implementation services to help founders navigate the challenges of growth and scale. Our customized solutions empower startups and small businesses to build capacity, drive revenue, and solve business challenges without the cost or commitment of a full-time hire. We mobilize the expertise of diverse, world-class operators building today’s most successful companies such as Meta, GE, and Calendly to supercharge small business growth and uplift underserved communities. Our core offerings include: • Operations Strategy & Execution • Sales Enablement • Business Development • Fractional Leadership
Partner
Amomitto

Amomitto

We firmly believe that the only place you can start is right where you are. For many of our clients, that can be an intimidating jumping-off point, but that is what we are here for. Our expertise in compliance and security will take you where you need to go.
Partner
Viridis Security

Viridis Security

Viridus Security = Common sense governance, risk & compliance for growth stage companies. There comes a point when proving security is necessary for closing deals. We can help you make security a competitive advantage. Automated compliance tools help, but there are plenty of decisions to make along the way: 1. How much time can I take away from core work? 2. What tools do I absolutely need immediately and which can wait (ticketing, IAM, HR, SDLC, etc)? 3. Which controls don’t apply to my business, and how to do I convey that to the auditor? 4. What kind of penetration testing makes sense? 5. How the heck do I run and document a tabletop exercise? Whether you need ground up creation of policies, controls, processes and procedure or if already have a great program and are looking for CISO advice without hiring a full-time resource, we can help. Virtual CISO (vCISO) Security Implementation advice and guidance: * Vendor (3rd Party) Assurance programs * Document management * Asset Management * Application Management * Risk Management * IAM Identity Access Management * Information Security outreach, training * SDLC Security Frameworks examples: * SOC2 * GDPR * PCI * ISO27001 * HIPAA
Partner
Core Compliance LLC

Core Compliance LLC

Core Compliance provides management consulting services for organizations: • pursuing certification/accreditation to ISO and other standards • implementing information and communications technology controls • optimizing and integrating compliance programs with business systems and processes Our consultants are experienced working with companies of all sizes in the following industries: Pharmaceuticals, Cannabis/Marijuana HEMP, Food Safety, Dietary Supplements, Medical Device, Aerospace, Information Service & Security, Automotive, Environmental, Electronics Recycling, Laboratories, Health & Safety