Elpha Secure combines insurance coverage with cybersecurity software to help small and midsize businesses mitigate cyber risk. Because the company operates in a highly regulated industry and handles sensitive security data, maintaining strong compliance is essential to earning customer trust and doing business.
Paul Schottland, CTO at Elpha Secure, had been through many certification processes before joining the company, including SOC 2, ISO, NIST, and FedRAMP. He knew how easily audits could become time-consuming when requirements were unclear or prior evidence was difficult to understand.
In past audit experiences, vague control requirements and unclear documentation often forced engineering teams to spend extra time figuring out how a requirement had been met before. For Elpha Secure’s SOC 2 renewal, Paul wanted a clearer and more efficient way to review prior-year audit evidence and move through the process.
Elpha Secure had already completed its initial SOC 2 certification with Thoropass when Paul joined as CTO. For the renewal, the Thoropass audit team was able to work from the prior year’s documentation and evidence, making it easier to understand what had been reviewed before and what needed to be refreshed.
That continuity helped reduce repeated work. Instead of rebuilding the audit process from scratch, Elpha Secure could review prior controls, confirm what still applied, and focus engineering time where it mattered most.
“The ability to read any of the controls or requirements and see a concrete example of last year’s, makes things go so much faster.”
Paul Schottland, Elpha Secure
Paul also valued the direct communication from the Thoropass team. Clear questions and actionable feedback helped the Elpha Secure team move through the renewal without the ambiguity that had made past audit work frustrating.
“I’ve had a fantastic time with the Thoropass team. The team is very direct, to the point, and clear, and that is really important in compliance.”
Paul Schottland, Elpha Secure
Elpha Secure completed its SOC 2 renewal in just 10% of the time Paul expected. The audit process reduced what could have been hundreds of engineering hours into tens of hours, allowing the team to maintain trust with customers without slowing down the business.
“I’m talking about taking hundreds of hours of multiple engineers’ time and reducing it into tens of hours. Thoropass makes it much, much more efficient.”
Paul Schottland, Elpha Secure
