Elestio provides fully managed DevOps services for open-source software. As the company moved up-market, data security and compliance became essential to earning trust with larger prospects, especially in Europe.
Elestio was a young company with a small international team. Larger prospects required a higher level of security compliance, but the team did not have the time or in-house compliance expertise to manage certification on its own.
Elestio wanted an external partner to guide the process and support multiple certifications and audits. Steven Betito, Head of Digital Innovation, emphasized that Elestio needed hands-on help to reach its goals quickly.
“We’re not a team of 100 people; we’re a team of 10, so we knew we needed help to get these certifications. Thoropass was really helpful for that.”
Steven Betito, Head of Digital Innovation, Elestio
Elestio chose Thoropass to support SOC 2 and ISO 27001. Thoropass helped the team understand what evidence and documentation were required, move through onboarding and document collection, and prepare for the final audit.
The team first completed SOC 2 Type 1, then moved into ISO 27001. Evidence and policies prepared during SOC 2 helped support the ISO effort, reducing duplicated work and speeding up the audit process.
Elestio achieved ISO 27001 certification in three months, much faster than expected. The audit process also helped add structure to company processes and gave Elestio the credentials needed to continue enterprise conversations.
“For a lot of big companies in Europe, it’s really important to have this certification [ISO 27001]. Thanks to the certification, we can continue the discussions.”
Steven Betito, Elestio
With SOC 2 Type 1 and ISO 27001 complete, Elestio is now working toward SOC 2 Type 2. Thoropass helped the company build credibility and continue moving up-market without overwhelming a small team.
