Using AI to Rethink Some of Audit’s Most Pressing Challenges

It was only three years ago that I had my first real conversation with an auditor. Before that, my experience with audits was mostly limited to providing evidence for SOC 2 engagements and having brief interactions with audit teams. 

That changed when I joined Thoropass to lead the product organization and began working closely with Leith Khanafseh, who leads Thoropass’ Audit team. Very quickly we aligned around a shared goal: fixing a process that has long been inefficient and painful for both auditors and the companies going through audits.

Traditional audits require hours of back-and-forth to collect evidence, manual testing across large volumes of documentation, and disconnected tooling. While that process is frustrating for auditors, it is often even more painful for clients. Expectations can be unclear, requests repeated, timelines extended, and costs increased. Many teams approach their annual audit with a sense of dread.

Solving this isn’t easy, and there are no shortcuts to making complex processes feel simple. The key for us has been tight collaboration between our auditors and our Product, Design, and Engineering teams. Together we’ve worked to rethink both the technology platform and the audit experience itself.

About two years ago, the emergence of sophisticated large language models opened up a new opportunity. Not only could we improve the systems supporting audits, but we could fundamentally rethink how audits are performed. We’ve now embedded AI agents throughout the Thoropass platform to handle many of the complex, repetitive tasks that traditionally slow down audits. The goal is simple: deliver the highest possible audit quality while dramatically reducing the operational burden on clients.

Here are a few examples of how AI is already transforming audits at Thoropass:

Smart Sort AI
Smart Sort AI ingests evidence from anywhere and automatically determines the appropriate requirement or requirements. Instead of asking teams to understand the intricacies across hundreds of pieces of evidence, AI agents categorize and route documentation automatically.

First Pass AI
First Pass AI automatically checks evidence for completeness and timing accuracy. This removes much of the traditional back-and-forth between auditors and internal teams, reducing confusion and accelerating the audit process.

Audit Copilot AI
Audit Copilot AI performs detailed testing across the large volumes of evidence required for each framework. By assisting auditors with review and validation, it improves consistency while increasing the speed and quality of audit execution.

We’re continuing to expand these capabilities in the first half of the year:

Audit Assist AI
A simple chat interface that allows teams to get audit questions answered on demand.

Reviewer AI
AI-powered support that streamlines the final stages of the audit process, helping ensure quality and consistency in the final deliverables.

Thoropass Attest
A quarterly attestation capability designed to help organizations maintain a strong information security posture throughout the year, not just during audit season.

At Thoropass, AI is not a buzzword. It’s central to how we modernize the audit experience. By combining deep audit expertise with purpose-built AI agents, we’re building a platform that reduces friction, improves quality, and helps organizations approach audits with far greater confidence.

The audit process has been painful for far too long. We believe it can be dramatically better, and we’re committed to building the technology that makes that possible.

‍