# Thoropass Help Center

> Help center for Thoropass

## Welcome to the Thoropass App

- [How to register and log in to Thoropass](https://help.thoropass.com/en/articles/5968623-how-to-register-and-log-in-to-thoropass.md): Below you'll find instructions on how to register and login to the Thoropass platform for the first time
- [Elements of the Thoropass App](https://help.thoropass.com/en/articles/7135234-elements-of-the-thoropass-app.md): An entry point to the features of the app that help you build and maintain your compliance program.

## Dashboard

- [What is on the Dashboard page?](https://help.thoropass.com/en/articles/8599619-what-is-on-the-dashboard-page.md): Describes the different elements of the Thoropass Dashboard

## Controls

- [What are control owners?](https://help.thoropass.com/en/articles/8519426-what-are-control-owners.md): Find out more about the control owners in Thoropass and learn how they can benefit your compliance program.
- [Understanding Unified Controls](https://help.thoropass.com/en/articles/8981659-understanding-unified-controls.md): An introduction to Unified Controls in Thoropass
- [Unified Controls - Frequently Asked Questions](https://help.thoropass.com/en/articles/9019482-unified-controls-frequently-asked-questions.md): Answers to common questions about Unified Controls.
- [HITRUST to Unified Control Mapping](https://help.thoropass.com/en/articles/9034628-hitrust-to-unified-control-mapping.md): Use this guide to identify a Unified Control by its corresponding HITRUST framework control.
- [GDPR to Unified Control Map](https://help.thoropass.com/en/articles/9034522-gdpr-to-unified-control-map.md): Use this guide to identify a Unified Control by its corresponding GDPR framework control.
- [CCPA to Unified Control Map](https://help.thoropass.com/en/articles/9034518-ccpa-to-unified-control-map.md): Use this guide to identify a Unified Control by its corresponding CCPA framework control.
- [PCI to Unified Control Map](https://help.thoropass.com/en/articles/9034510-pci-to-unified-control-map.md): Use this guide to identify a Unified Control by its corresponding PCI framework control.
- [HIPAA to Unified Control Map](https://help.thoropass.com/en/articles/9034497-hipaa-to-unified-control-map.md): Use this guide to identify a Unified Control by its corresponding HIPAA framework control.
- [ISO 2700 1 & 2 to Unified Control Map](https://help.thoropass.com/en/articles/9034480-iso-2700-1-2-to-unified-control-map.md): Use this guide to identify a Unified Control by its corresponding ISO 2700 1 & 2 framework control.
- [SOC 2 to Unified Control Map](https://help.thoropass.com/en/articles/9010031-soc-2-to-unified-control-map.md): Use this guide to identify a Unified Control by its corresponding SOC 2 framework control.
- [User-Created Custom Unified Controls](https://help.thoropass.com/en/articles/10873755-user-created-custom-unified-controls.md)
- [Understanding Shared Controls](https://help.thoropass.com/en/articles/10178092-understanding-shared-controls.md): Shared Controls keep your multi-workspace team organized and on-task
- [Why do I see inactive monitors and collectors under my controls?](https://help.thoropass.com/en/articles/11403240-why-do-i-see-inactive-monitors-and-collectors-under-my-controls.md)
- [Self-Service Content Management](https://help.thoropass.com/en/articles/11517559-self-service-content-management.md)
- [Framework Controls](https://help.thoropass.com/en/articles/11604976-framework-controls.md)
- [HIPAA CE Privacy - Authorized and Unauthorized Disclosures](https://help.thoropass.com/en/articles/11661057-hipaa-ce-privacy-authorized-and-unauthorized-disclosures.md): Guidance for implementing HIPAA CE Privacy requirements related to authorized and unauthorized disclosures.
- [What are Connected Tools?](https://help.thoropass.com/en/articles/12390004-what-are-connected-tools.md): The Connected Tools tab gives you visibility into the automated checks and supporting files tied to a control. It combines monitors and evidence so you can track system activity and documentation i...
- [Adding a New Compliance Framework with Multi-Framework Action Items](https://help.thoropass.com/en/articles/8911433-adding-a-new-compliance-framework-with-multi-framework-action-items.md): How do my Action Items change when my organization adds a new framework to our compliance program?
- [TEMPLATE: Job Description](https://help.thoropass.com/en/articles/6888579-template-job-description.md)
- [AI Risk Assessment Template](https://help.thoropass.com/en/articles/10054685-ai-risk-assessment-template.md): Use this template to help guide your AI risk assessment.
- [Notice of Privacy Practices \(NPP\)](https://help.thoropass.com/en/articles/10249276-notice-of-privacy-practices-npp.md)
- [Authorization for Use or Disclosure of PHI](https://help.thoropass.com/en/articles/10249292-authorization-for-use-or-disclosure-of-phi.md)
- [Access Request Form](https://help.thoropass.com/en/articles/10249295-access-request-form.md)
- [Amendment Request Form](https://help.thoropass.com/en/articles/10249296-amendment-request-form.md)
- [Complaint Form](https://help.thoropass.com/en/articles/10249299-complaint-form.md)
- [Disclosure Log Template](https://help.thoropass.com/en/articles/10249302-disclosure-log-template.md)
- [Breach Notification Template](https://help.thoropass.com/en/articles/10249306-breach-notification-template.md)
- [Training Acknowledgment Form](https://help.thoropass.com/en/articles/10249308-training-acknowledgment-form.md)
- [Privacy Risk Assessment](https://help.thoropass.com/en/articles/10249315-privacy-risk-assessment.md)
- [Corrective Action Plan](https://help.thoropass.com/en/articles/10249317-corrective-action-plan.md)
- [Confidential Communication Request](https://help.thoropass.com/en/articles/10249318-confidential-communication-request.md)
- [Accounting of Disclosures Request](https://help.thoropass.com/en/articles/10249321-accounting-of-disclosures-request.md)
- [Sanction Policy Documentation](https://help.thoropass.com/en/articles/10249323-sanction-policy-documentation.md)
- [Annual HIPAA Compliance Review Checklist](https://help.thoropass.com/en/articles/10249325-annual-hipaa-compliance-review-checklist.md)
- [HIPAA Retention Schedule](https://help.thoropass.com/en/articles/10249327-hipaa-retention-schedule.md)
- [Genetic Information Use Instructions](https://help.thoropass.com/en/articles/10249328-genetic-information-use-instructions.md)
- [Retention Schedule](https://help.thoropass.com/en/articles/10249330-retention-schedule.md)
- [Incident Response Plan](https://help.thoropass.com/en/articles/10249332-incident-response-plan.md)
- [Business Associate Agreement \(BAA\)](https://help.thoropass.com/en/articles/10249334-business-associate-agreement-baa.md)
- [HIPAA Privacy Charter](https://help.thoropass.com/en/articles/10249348-hipaa-privacy-charter.md)
- [Fundraising Activities and Marketing Disclosures](https://help.thoropass.com/en/articles/10249349-fundraising-activities-and-marketing-disclosures.md)
- [Template for PHI De-Identification Requests](https://help.thoropass.com/en/articles/10249352-template-for-phi-de-identification-requests.md)

## Evidence Requests

- [Guidance for Population Requests](https://help.thoropass.com/en/articles/13017909-guidance-for-population-requests.md): Thoropass SOC 2 / SOC 1 Audits
- [Data Encryption at Rest](https://help.thoropass.com/en/articles/13380659-data-encryption-at-rest.md): Example screenshots and guidance for data encryption at rest evidence
- [Configuration Management Tool](https://help.thoropass.com/en/articles/13381002-configuration-management-tool.md): Example screenshots and guidance for configuration management tool evidence
- [Privileged Access to the Operating System](https://help.thoropass.com/en/articles/13381110-privileged-access-to-the-operating-system.md): Example screenshots and guidance for data encryption at rest evidence
- [Privileged Access to the Datastores](https://help.thoropass.com/en/articles/13392402-privileged-access-to-the-datastores.md): Example screenshots and guidance for evidence of privileged access to datastores
- [Privileged Access to the Cloud Console](https://help.thoropass.com/en/articles/13392421-privileged-access-to-the-cloud-console.md): Example screenshots and guidance for evidence of privileged access to the cloud console
- [Production System Inventory](https://help.thoropass.com/en/articles/13400120-production-system-inventory.md): Example screenshots and guidance for production system inventory evidence
- [Firewalls / Security Groups](https://help.thoropass.com/en/articles/13400151-firewalls-security-groups.md): Example screenshots and guidance for firewall / security group evidence
- [AWS Trusted Advisor/IAM Credential Report](https://help.thoropass.com/en/articles/13400170-aws-trusted-advisor-iam-credential-report.md): Example screenshots and guidance for AWS Trusted Advisor and IAM Credential Report evidence
- [Intrusion Detection System Configuration and Alerts](https://help.thoropass.com/en/articles/13400208-intrusion-detection-system-configuration-and-alerts.md): Example screenshots and guidance for IDS configuration and alert evidence
- [Log Management Configuration and Alerts](https://help.thoropass.com/en/articles/13400273-log-management-configuration-and-alerts.md): Example screenshots and guidance for log management evidence
- [Infrastructure Monitoring Configuration and Alerts](https://help.thoropass.com/en/articles/13400402-infrastructure-monitoring-configuration-and-alerts.md): Example screenshots and guidance for infrastructure monitoring evidence
- [How to: Set up Policies as Available Evidence](https://help.thoropass.com/en/articles/14080304-how-to-set-up-policies-as-available-evidence.md): Learn how to set up your policies to be picked up as "Available Evidence" in an Audit.

## Roadmap

- [Roadmap Action Item Due Date Filtering](https://help.thoropass.com/en/articles/11021046-roadmap-action-item-due-date-filtering.md): How does it work and how should I use it?

## Policies

- [What is the Publish Policy Approval Flow?](https://help.thoropass.com/en/articles/9243363-what-is-the-publish-policy-approval-flow.md): Learn about the optional workflow where you can mandate that policies get formal approval before being published
- [Policy Editor Collaboration Features](https://help.thoropass.com/en/articles/9572589-policy-editor-collaboration-features.md): See what's possible with Thoropass's policy editor.
- [Why am I unable to scroll on the policy page?](https://help.thoropass.com/en/articles/10064289-why-am-i-unable-to-scroll-on-the-policy-page.md)
- [How to: Using Shared Policies](https://help.thoropass.com/en/articles/10437863-how-to-using-shared-policies.md): What are shared policies and how to use them

## Automated Evidence \(Monitors\)

- [How to Use Privileged Access Collectors](https://help.thoropass.com/en/articles/9005299-how-to-use-privileged-access-collectors.md): Learn how privileged access collectors can save you time
- [Understanding the Monitor Overview Page](https://help.thoropass.com/en/articles/11368947-understanding-the-monitor-overview-page.md): The Monitors page gives you a centralized view of all active compliance monitors in your workspace.
- [Understanding the Related Tab: How Monitors Map to Controls and Evidence](https://help.thoropass.com/en/articles/11368700-understanding-the-related-tab-how-monitors-map-to-controls-and-evidence.md): Learn how each monitor supports your compliance program.
- [Automated Evidence Details Page](https://help.thoropass.com/en/articles/12579336-automated-evidence-details-page.md): The Automated Evidence Details page gives you a centralized view of all active compliance monitors in your workspace.
- [How to evaluate a monitor and remediate + exclude results](https://help.thoropass.com/en/articles/11367746-how-to-evaluate-a-monitor-and-remediate-exclude-results.md): Learn how to evaluate and take action on automated evidence results.
- [Product Demo: Privileged Access Collector](https://help.thoropass.com/en/articles/10046788-product-demo-privileged-access-collector.md)
- [How to Understand Cloudflare WAF Evidence Collectors](https://help.thoropass.com/en/articles/12694543-how-to-understand-cloudflare-waf-evidence-collectors.md): Field definitions; strong compliance and security posture examples
- [How to Read and Understand Wiz CSPM Network Exposure Analysis Collector Findings](https://help.thoropass.com/en/articles/12912139-how-to-read-and-understand-wiz-cspm-network-exposure-analysis-collector-findings.md): Wiz, CSPM, Network Exposure

## Organization

- [What is Organizations?](https://help.thoropass.com/en/articles/7135294-what-is-organizations.md)

## People

- [How to: Delete Employees and Users](https://help.thoropass.com/en/articles/9740872-how-to-delete-employees-and-users.md): How to delete employees from the People Table and the User Table
- [Combining People Table Records](https://help.thoropass.com/en/articles/11114911-combining-people-table-records.md): How to Combine Duplicate Employee Records for a Clean, Accurate People Table
- [How to: Edit an employee record.](https://help.thoropass.com/en/articles/13252473-how-to-edit-an-employee-record.md): Learn how to edit your employee records from the People Table.

## Vendors

- [How to: Conduct Vendor Security Reviews in Thoropass.](https://help.thoropass.com/en/articles/12109520-how-to-conduct-vendor-security-reviews-in-thoropass.md): Learn how to set up Security Vendor Reviews

## Questionnaires

- [How to Use the Autofill Automation for Questionnaires](https://help.thoropass.com/en/articles/9362596-how-to-use-the-autofill-automation-for-questionnaires.md): Streamline your DDQ process with automation from Thoropass.
- [Product Demo: GenAI DDQ](https://help.thoropass.com/en/articles/9791831-product-demo-genai-ddq.md)

## Audits

- [Understanding Combined Audits](https://help.thoropass.com/en/articles/9113775-understanding-combined-audits.md): Viewing multi-framework audits in Thoropass
- [Why can't I reuse evidence from previous audits?](https://help.thoropass.com/en/articles/9293724-why-can-t-i-reuse-evidence-from-previous-audits.md): Evidence from previous audits can never be used for current audits.
- [Product Demo: First Pass AI](https://help.thoropass.com/en/articles/10453238-product-demo-first-pass-ai.md)
- [Populating the Required Information Into myCSF](https://help.thoropass.com/en/articles/11594473-populating-the-required-information-into-mycsf.md): What do I need to input into myCSF and what are the guidelines to support me?
- [How to Sign the Validated Report Agreement \(VRA\) in myCSF](https://help.thoropass.com/en/articles/11594568-how-to-sign-the-validated-report-agreement-vra-in-mycsf.md): How to Sign the Validated Report Agreement \(VRA\) in myCSF
- [Feature Overview](https://help.thoropass.com/en/articles/12844469-feature-overview.md): Smart Sort AI - A head start for every audit!
- [Exporting Evidence from Vanta](https://help.thoropass.com/en/articles/12844485-exporting-evidence-from-vanta.md)
- [Exporting Evidence from Drata](https://help.thoropass.com/en/articles/12844488-exporting-evidence-from-drata.md)
- [How to Use Audit Connected Documents](https://help.thoropass.com/en/articles/12630584-how-to-use-audit-connected-documents.md): Attach, manage, and refresh documents from Google Drive, Confluence, and Microsoft 365 SharePoint during an audit using Audit Connected Documents.
- [Using Mapping Codes to Pre-Sort Documents Into Evidence Requests](https://help.thoropass.com/en/articles/12631331-using-mapping-codes-to-pre-sort-documents-into-evidence-requests.md): Use mapping codes in Google Drive, Confluence, and Microsoft 365 SharePoint to automatically surface the right documents in the right evidence requests during your audit.
- [How to Setup Google Drive labels for Connected Documents](https://help.thoropass.com/en/articles/12933750-how-to-setup-google-drive-labels-for-connected-documents.md): Admins and users create and apply the thoropasssync classification label so documents can be used as connected evidence and optionally surfaced as Recommended Evidence using mapping codes.
- [How to Setup Microsoft 365 labels for Connected Documents](https://help.thoropass.com/en/articles/12934362-how-to-setup-microsoft-365-labels-for-connected-documents.md): Create and apply the ThoropassSync column so documents can be used as connected evidence—and optionally surfaced as Recommended Evidence using mapping codes.
- [How to Setup Confluence labels for Connected Documents](https://help.thoropass.com/en/articles/12977064-how-to-setup-confluence-labels-for-connected-documents.md): Apply the thoropasssync label and optional mapping code labels in Confluence so pages can be used as connected evidence and surfaced as Recommended Evidence in your audit.

## Training

- [What is Employee Education?](https://help.thoropass.com/en/articles/9774033-what-is-employee-education.md): The existing “Training” feature has been renamed to “Employee Education” and now includes 2 types of learnings that users can set up: “Training” type and “Acknowledgement” type.
- [How to Set Up an Acknowledgement](https://help.thoropass.com/en/articles/9774247-how-to-set-up-an-acknowledgement.md): You can use the Employee Education feature to fulfill your policy acknowledgement compliance requirements directly from Thoropass.
- [About New Policy Acknowledgements](https://help.thoropass.com/en/articles/9944630-about-new-policy-acknowledgements.md): How to leverage the flexibility and configurability policy acknowledgements in place of policy acceptance.
- [AI Helpbot Quickstart Guide](https://help.thoropass.com/en/articles/13715909-ai-helpbot-quickstart-guide.md): This article is a quickstart guide to help customers get started using the AI Helpbot

## Integrations

- [\[AWS\] How to Properly Update Scopes/Permissions](https://help.thoropass.com/en/articles/8295207-aws-how-to-properly-update-scopes-permissions.md): AWS Monitor connection error, CloudFormation
- [\[AWS\] Dec 2023 Retirement of AWS Actions](https://help.thoropass.com/en/articles/8295843-aws-dec-2023-retirement-of-aws-actions.md)
- [\[CSP\] Monitor Auto exclusion guide](https://help.thoropass.com/en/articles/8341752-csp-monitor-auto-exclusion-guide.md): Auto-exclusion, AWS, GCP, Azure, Tags, Labels, Monitors, Automated Evidence
- [How to: Jira Software Datacenter Server Configuration Requirements](https://help.thoropass.com/en/articles/9027686-how-to-jira-software-datacenter-server-configuration-requirements.md): Jira on-prem, jira datacenter
- [Thoropass Integrations IP Addresses](https://help.thoropass.com/en/articles/9001103-thoropass-integrations-ip-addresses.md): Firewall, allow-list, allowlist, whitelist, outbound IPs, integrations and monitors
- [Product Demo: Jira two-way sync](https://help.thoropass.com/en/articles/9796425-product-demo-jira-two-way-sync.md)
- [Understanding HITRUST myCSF](https://help.thoropass.com/en/articles/10421162-understanding-hitrust-mycsf.md): HITRUST audits with Thoropass require a myCSF integration
- [How to connect to Sage HR](https://help.thoropass.com/en/articles/11654417-how-to-connect-to-sage-hr.md): Sage HR, least privilege access, integrations
- [JIRA Cloud ER Sync](https://help.thoropass.com/en/articles/12305182-jira-cloud-er-sync.md): This article details the new \(as of September 2025\) Evidence Request Jira sync functionality for cloud.
- [How to Connect to Google Workspace \(+Google Drive\)](https://help.thoropass.com/en/articles/12934562-how-to-connect-to-google-workspace-google-drive.md): Step-by-step guide to integrate your Google Workspace environment with Thoropass for automated collection of compliance-relevant data and document sync with connected documents.
- [Understanding the Zoom integration permissions](https://help.thoropass.com/en/articles/13379584-understanding-the-zoom-integration-permissions.md): Zoom integration connection
- [Thoropass Data Rules](https://help.thoropass.com/en/articles/10261249-thoropass-data-rules.md): How to Filter and Monitor the Right Data
- [Understanding Beta Integrations](https://help.thoropass.com/en/articles/13403612-understanding-beta-integrations.md)
- [Population Automation in Thoropass](https://help.thoropass.com/en/articles/14655871-population-automation-in-thoropass.md): Automated retrieval of populations through Jira & Service Now
- [How To: Integrate Wiz with Thoropass](https://help.thoropass.com/en/articles/12609417-how-to-integrate-wiz-with-thoropass.md): Step-by-step guide to integrate your Wiz account with Thoropass

## User Management

- [Workspace: Bulk Add or Invite Users to Thoropass](https://help.thoropass.com/en/articles/9235606-workspace-bulk-add-or-invite-users-to-thoropass.md): Guide on bulk inviting users to a workspace in Thoropass.
- [How to: Okta SSO Thoropass Configuration \(via Okta Catalog\)](https://help.thoropass.com/en/articles/9205242-how-to-okta-sso-thoropass-configuration-via-okta-catalog.md)
- [Multi-Workspace Login \(User Guide\)](https://help.thoropass.com/en/articles/9641787-multi-workspace-login-user-guide.md)
- [Workspace: Multi-Workspace User Management \(Admin Guide\)](https://help.thoropass.com/en/articles/9745425-workspace-multi-workspace-user-management-admin-guide.md): Admin guide to create multi-workspace users via the workspace-level user management page.
- [SSO SCIM Provisioning Configuration in Thoropass](https://help.thoropass.com/en/articles/9842849-sso-scim-provisioning-configuration-in-thoropass.md)
- [Product Demo: Multi-workspace User Login](https://help.thoropass.com/en/articles/9903632-product-demo-multi-workspace-user-login.md)
- [Global Hub & Multi-Workspace Start Guide \(Terms & Key Concepts\)](https://help.thoropass.com/en/articles/9923001-global-hub-multi-workspace-start-guide-terms-key-concepts.md): This article introduces the key concepts of a Global Hub with multiple workspaces, and guides to manage multi-workspace users.
- [How to: Azure SSO Thoropass Configuration \(Azure App Gallery\)](https://help.thoropass.com/en/articles/9739913-how-to-azure-sso-thoropass-configuration-azure-app-gallery.md)
- [Thoropass Roles & Permissions](https://help.thoropass.com/en/articles/10054053-thoropass-roles-permissions.md): Guide on all the user Roles available in Thoropass, and the various permissions \(or actions\) these Roles can perform.
- [Global Hub: Multi-Workspace User Management \(Account Admins\)](https://help.thoropass.com/en/articles/10371625-global-hub-multi-workspace-user-management-account-admins.md): Account Admin guide to manage Thoropass user access, across all workspaces associated with an account.
- [Global Hub: Bulk Add or Invite Multi-Workspace Users](https://help.thoropass.com/en/articles/11013300-global-hub-bulk-add-or-invite-multi-workspace-users.md): Guide on bulk adding or inviting users across multiple different workspaces in Thoropass.
- [How To: Third-Party SSO Errors](https://help.thoropass.com/en/articles/9558265-how-to-third-party-sso-errors.md): Identifying third party SSO errors.
- [Combined Roles](https://help.thoropass.com/en/articles/12587696-combined-roles.md): This article covers the combined role functionality in Thoropass, enabling customers to have more control over the things their users can see and do in the platform.

## Risk Register

- [Understanding risk registers and risk libraries](https://help.thoropass.com/en/articles/8233989-understanding-risk-registers-and-risk-libraries.md)
- [EXAMPLE: Risk Library](https://help.thoropass.com/en/articles/8233996-example-risk-library.md)
- [Product Demo: How to create a risk in Risk Register](https://help.thoropass.com/en/articles/9534067-product-demo-how-to-create-a-risk-in-risk-register.md)
- [EXAMPLE: AI risks](https://help.thoropass.com/en/articles/9583841-example-ai-risks.md)

## Access Reviews

- [Access Reviews with Thoropass](https://help.thoropass.com/en/articles/9353353-access-reviews-with-thoropass.md): access review, integrations
- [How To Decide Access Review Types](https://help.thoropass.com/en/articles/9762640-how-to-decide-access-review-types.md): access reviews
- [Confirming your in-scope accounts during your Access Review](https://help.thoropass.com/en/articles/9302909-confirming-your-in-scope-accounts-during-your-access-review.md): access review, audit scope, in-scope systems
- [Product Demo: Access Reviews](https://help.thoropass.com/en/articles/10002658-product-demo-access-reviews.md): Simplify you audit-ready access reviews
- [Product Demo: Head Start for Access Reviews](https://help.thoropass.com/en/articles/10452150-product-demo-head-start-for-access-reviews.md)
- [Validation of Access Review Changes](https://help.thoropass.com/en/articles/11696516-validation-of-access-review-changes.md)

## Project Management

- [Thoropass Task Management: Redesigned and Enhanced](https://help.thoropass.com/en/articles/10149447-thoropass-task-management-redesigned-and-enhanced.md): Manage your company's compliance program at scale.
- [Product Demo: Tasks](https://help.thoropass.com/en/articles/10228102-product-demo-tasks.md): Centralize all to-dos
- [Using the Comments Inbox](https://help.thoropass.com/en/articles/10222383-using-the-comments-inbox.md): What it is and how to use it
- [How to: Using the Tasks Tool](https://help.thoropass.com/en/articles/9095796-how-to-using-the-tasks-tool.md): Viewing and using the Tasks tool in Thoropass

## Pentests

- [What is a pentest?](https://help.thoropass.com/en/articles/6294147-what-is-a-pentest.md)
- [How to scope your pentest](https://help.thoropass.com/en/articles/6293734-how-to-scope-your-pentest.md)
- [What are the pentest requirements for different compliance frameworks?](https://help.thoropass.com/en/articles/6293712-what-are-the-pentest-requirements-for-different-compliance-frameworks.md)
- [Penetration Testing Guide](https://help.thoropass.com/en/articles/9015023-penetration-testing-guide.md)

## Product Updates

- [June 2025 product releases: more new frameworks, access reviews and more](https://help.thoropass.com/en/articles/11644341-june-2025-product-releases-more-new-frameworks-access-reviews-and-more.md): What's New with the Thoropass Platform
- [May 2025 product releases: New frameworks, Trust Center, HITRUST and PCI ASV](https://help.thoropass.com/en/articles/11460011-may-2025-product-releases-new-frameworks-trust-center-hitrust-and-pci-asv.md): What's New with the Thoropass Platform
- [April 2025 product releases: New framework support and people record consolidation](https://help.thoropass.com/en/articles/11124994-april-2025-product-releases-new-framework-support-and-people-record-consolidation.md): What's New with Thoropass Platform
- [March 2025 product releases: New audit roles, bulk user invitations, and people table improvements](https://help.thoropass.com/en/articles/10925137-march-2025-product-releases-new-audit-roles-bulk-user-invitations-and-people-table-improvements.md): What's New with Thoropass Platform
- [February 2025 Product Releases: MyCSF integration, new integrations for Access Reviews and user management updates](https://help.thoropass.com/en/articles/10619025-february-2025-product-releases-mycsf-integration-new-integrations-for-access-reviews-and-user-management-updates.md): What's New with Thoropass Platform
- [January 2025 Product Releases: Head Start for Access Reviews, new Risk Owner role, new Policy page UI and more](https://help.thoropass.com/en/articles/10458040-january-2025-product-releases-head-start-for-access-reviews-new-risk-owner-role-new-policy-page-ui-and-more.md): Latest with Thoropass platform
- [July 2024 Product Release: Policy management enhancement, new contributor access to audit, and more integration](https://help.thoropass.com/en/articles/9623997-july-2024-product-release-policy-management-enhancement-new-contributor-access-to-audit-and-more-integration.md): More to simplify your compliance workflow
- [Dec 2024 Product Releases: Comments Inbox, First Pass AI and more](https://help.thoropass.com/en/articles/10306528-dec-2024-product-releases-comments-inbox-first-pass-ai-and-more.md): Latest updates from Thoropass
- [Nov 2024 Product Releases: Enhanced Tasks, new Control page UI, new role, new frameworks](https://help.thoropass.com/en/articles/10159206-nov-2024-product-releases-enhanced-tasks-new-control-page-ui-new-role-new-frameworks.md): Latest updates from Thoropass platform
- [Oct 2024 Product Releases: Policy Acknowledgements updates, enhanced data rooms, and more](https://help.thoropass.com/en/articles/10035133-oct-2024-product-releases-policy-acknowledgements-updates-enhanced-data-rooms-and-more.md)
- [Sept 2024 Product Releases: New access reviews, new framework](https://help.thoropass.com/en/articles/9911366-sept-2024-product-releases-new-access-reviews-new-framework.md)
- [Aug 2024 Product Releases: New employee education, monitors for PCI, multi-workspace user login](https://help.thoropass.com/en/articles/9740941-aug-2024-product-releases-new-employee-education-monitors-for-pci-multi-workspace-user-login.md)
- [June 2024 Product Releases: Automated action items, new DDQ import option, view completed audits, more privileged access monitors](https://help.thoropass.com/en/articles/9463018-june-2024-product-releases-automated-action-items-new-ddq-import-option-view-completed-audits-more-privileged-access-monitors.md): Simplify your workflow with new automation
- [May 2024 Product Releases: Multi-framework action items, publish policy workflow, GenAI DDQ](https://help.thoropass.com/en/articles/9415592-may-2024-product-releases-multi-framework-action-items-publish-policy-workflow-genai-ddq.md): Accelerate your infosec compliance workflow
- [April 2024 Product Releases: User email notification setting](https://help.thoropass.com/en/articles/9415239-april-2024-product-releases-user-email-notification-setting.md)
- [March 2024 Product Releases: Unified Controls, new combined audit, new task page, new UI](https://help.thoropass.com/en/articles/9415139-march-2024-product-releases-unified-controls-new-combined-audit-new-task-page-new-ui.md): Streamline your multi-framework process
- [February 2024 Product Releases: New audit page UI, privileged access monitor](https://help.thoropass.com/en/articles/9415123-february-2024-product-releases-new-audit-page-ui-privileged-access-monitor.md): Enhance your audit efficiency
- [January 2024 Product Releases: Jira two-way sync, custom risk definitions, new dashboard](https://help.thoropass.com/en/articles/9415102-january-2024-product-releases-jira-two-way-sync-custom-risk-definitions-new-dashboard.md): Streamline your task management
- [SOC 2 Framework Consolidation](https://help.thoropass.com/en/articles/10080260-soc-2-framework-consolidation.md): Details about SOC 2 framework consolidation updates
- [July 2025 product releases: Advanced Reporting & Asset Inventory](https://help.thoropass.com/en/articles/11887765-july-2025-product-releases-advanced-reporting-asset-inventory.md): From advanced BI dashboard to smarter inventory tracking, July is all about visibility and control. Here's what's new this month:

## Product Support

- [Trust Center URLs: What to Share With Your Customers](https://help.thoropass.com/en/articles/15062603-trust-center-urls-what-to-share-with-your-customers.md): Understand the difference between your internal admin URL and your public Trust Center URL, and how to confirm your Trust Center is ready to share.
- [How to: Reset a user password or MFA \(for Admins\).](https://help.thoropass.com/en/articles/6820383-how-to-reset-a-user-password-or-mfa-for-admins.md): MFA & Password Resets.
- [Known Errors - JSON Web Token \(JWT\)](https://help.thoropass.com/en/articles/6817973-known-errors-json-web-token-jwt.md): Understanding the JSON Web token \(JWT\) error!
- [How to reset your password](https://help.thoropass.com/en/articles/5961816-how-to-reset-your-password.md): Can't remember your password? Quickly reset it using the instructions below.
- [Troubleshooting - Login \(Non-Admins\).](https://help.thoropass.com/en/articles/8599079-troubleshooting-login-non-admins.md): Learn how to troubleshoot common login issues.
- [Control status is not updating](https://help.thoropass.com/en/articles/10136181-control-status-is-not-updating.md)
- [Policies: Adding images to a document.](https://help.thoropass.com/en/articles/10136170-policies-adding-images-to-a-document.md)
- [How To: Viewing Only Unreviewed Accounts - \(Access Reviews\)](https://help.thoropass.com/en/articles/12159760-how-to-viewing-only-unreviewed-accounts-access-reviews.md): Filtering the accounts displayed in your access review.
- [How to: Manage Your Email Preferences](https://help.thoropass.com/en/articles/12160923-how-to-manage-your-email-preferences.md): This article explains how to manage your email notification preferences.
- [Troubleshooting: Policies Enabling Track Changes](https://help.thoropass.com/en/articles/12160839-troubleshooting-policies-enabling-track-changes.md): Tracking changes in the Global Policy Approval workflow
- [Troubleshooting: Azure Login Error AADSTS50105](https://help.thoropass.com/en/articles/12159593-troubleshooting-azure-login-error-aadsts50105.md): How to troubleshoot your Azure SSO authentication.
- [How To: Publish a policy](https://help.thoropass.com/en/articles/9740013-how-to-publish-a-policy.md): Learn how to publish a policy
- [Using a Proxy DNS for Trust Center Setup](https://help.thoropass.com/en/articles/12754529-using-a-proxy-dns-for-trust-center-setup.md): Learn more about setting up the Trust Center using a proxy service.
- [FAQ: JIRA Sync](https://help.thoropass.com/en/articles/12754628-faq-jira-sync.md): Learn more about how JIRA sync interacts with Evidence Requests and Guidelines.
- [Troubleshooting: Trust Center](https://help.thoropass.com/en/articles/12754154-troubleshooting-trust-center.md): Learn more about the Trust Center
- [FAQ: Roadmap Guidelines](https://help.thoropass.com/en/articles/12754362-faq-roadmap-guidelines.md): Learn more about the Roadmap and Guidelines
- [Trust Center Access \(Approval Process\).](https://help.thoropass.com/en/articles/13134495-trust-center-access-approval-process.md): Learn more about the approval process for the trust center.
- [Thoropass AI Helpbot: Transparency & Compliance Overview](https://help.thoropass.com/en/articles/13673901-thoropass-ai-helpbot-transparency-compliance-overview.md)
- [Google Workspace Integration: Security Update](https://help.thoropass.com/en/articles/13691766-google-workspace-integration-security-update.md)
- [Thoropass Navigation Update](https://help.thoropass.com/en/articles/14022302-thoropass-navigation-update.md): Find what you need at every stage, from policies and audit prep to evidence submission. If something looks different or you can't find what you're looking for, this article will get you back on tra...
- [In-App Support Ticket Creation \(BETA\)](https://help.thoropass.com/en/articles/14115572-in-app-support-ticket-creation-beta.md): This article details the new support ticketing capabilities in-app where customers can create their own tickets
- [FAQ - Policies: Tracking Changes](https://help.thoropass.com/en/articles/13391877-faq-policies-tracking-changes.md): Learn more about the tracking changes feature
- [Troubleshooting: SSO login](https://help.thoropass.com/en/articles/14222318-troubleshooting-sso-login.md): This article addresses some Frequently Asked Questions about SSO.

## FAQ

- [FAQs](https://help.thoropass.com/en/articles/6685736-faqs.md): Have a question for your CSM? Check out the FAQs below to save you some time!
- [ISO/IEC 42001: AI Management System](https://help.thoropass.com/en/articles/10138798-iso-iec-42001-ai-management-system.md): Information about the ISO 42001 AI management framework
- [Thoropass Audit Documents for SOC 2 / SOC 1](https://help.thoropass.com/en/articles/13047296-thoropass-audit-documents-for-soc-2-soc-1.md): Frequently Asked Questions \(FAQ\)

## Compliance Terminology

- [Prioritized Approach to PCI—Explained](https://help.thoropass.com/en/articles/11156223-prioritized-approach-to-pci-explained.md): Establishing a roadmap of the PCI Requirements based on risk.

## Growing your Business through Compliance

- [The Top Security and Compliance Hires to Make in Your First Year](https://help.thoropass.com/en/articles/6596974-the-top-security-and-compliance-hires-to-make-in-your-first-year.md): Take a look at why hiring compliance and security officers is vital when your business is first starting out.
- [Why Stage-Appropriate Compliance Matters for Startup Growth](https://help.thoropass.com/en/articles/6596964-why-stage-appropriate-compliance-matters-for-startup-growth.md): Early-stage startups are in for a surprise when they dive into what’s needed to pursue a regulatory or compliance framework.
- [A Founder’s Guide to Deciphering the Right Compliance Framework for Your Startup](https://help.thoropass.com/en/articles/6596932-a-founder-s-guide-to-deciphering-the-right-compliance-framework-for-your-startup.md): We thrive on taking away blockers to innovation through compliance, but where do you start?
- [The Growth Strategy Most Founders Overlook](https://help.thoropass.com/en/articles/6596928-the-growth-strategy-most-founders-overlook.md): Compliance and Security Give Your Startup a Competitive Advantage

## Customer Resources

- [Maintaining your SOC 2 program](https://help.thoropass.com/en/articles/16299919-maintaining-your-soc-2-program.md): What your program requires between audits, and what to expect when the next one starts.

## Trust Center

- [FAQ: What information can be displayed in the Trust Center?](https://help.thoropass.com/en/articles/11987475-faq-what-information-can-be-displayed-in-the-trust-center.md): Learn the types of content that can be displayed in Trust Center
- [How to: Manage access to the Trust Center.](https://help.thoropass.com/en/articles/11987440-how-to-manage-access-to-the-trust-center.md): How to provide access to your Trust Center in Thoropass
- [How to: Create a Custom Guideline](https://help.thoropass.com/en/articles/13252077-how-to-create-a-custom-guideline.md): Learn how to create a Custom Guidelines

## Advanced Reporting

- [Understanding Advanced Reporting](https://help.thoropass.com/en/articles/11689610-understanding-advanced-reporting.md)
- [Understanding Thoropass's data models](https://help.thoropass.com/en/articles/11652797-understanding-thoropass-s-data-models.md)

## Asset Inventory

- [Asset Intelligence](https://help.thoropass.com/en/articles/11887300-asset-intelligence.md): Track and manage your cloud infrastructure for audit readiness