PROGRAMMES · THOROPASS IMPLEMENTATION
Senior practitioner-led configuration with integrated audit through Thoropass Assurance. A fixed sequence of four phases through to certification.
Thoropass implementation through Goldline. Fully implemented, customised, and managed by senior practitioner founder-led delivery.
Already on a platform and not audit-ready? Platform Rescue
Loading the calendar
Open the booking pageCalendar not loading? Open Calendly directly
AUTOMATE COMPLIANCE
Thoropass, formerly known as Laika, is a compliance automation platform that combines GRC tooling with built-in audit capabilities, giving organisations a single environment to prepare for, manage, and complete compliance certifications. It supports SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, PCI DSS, and a growing list of additional frameworks, with integrations that automate evidence collection and continuous control monitoring.
But like any compliance platform, Thoropass only delivers results when it's properly implemented and actively managed. The platform tracks your compliance status, it doesn't execute the work behind it. Integrations need to be connected and validated. Controls need to be mapped to your actual environment and the specific framework requirements you're targeting. Policies need to be written for your business, not left as boilerplate. And once the setup is complete, someone needs to maintain the programme, remediate failing controls, keep evidence current, and prepare for each audit cycle.
Goldline handles all of it. From initial Thoropass setup and configuration to ongoing management through Monthly Packages, our senior practitioner founder-led delivery turns the platform into a fully managed compliance engine so your team stays focused on product and growth.
WHY EXPERT IMPLEMENTATION
Organisations that attempt self-service Thoropass setup typically run into the same problems. Integrations get partially connected, leaving gaps in automated evidence collection. Controls are mapped using default settings that don't reflect the organisation's actual infrastructure or risk profile. Policies are accepted as-is from the template library without being tailored to real-world operations. And within a few weeks, the compliance workload that was supposed to disappear is back on someone's plate, usually an engineer or operations lead who already has a full-time job.
Expert implementation eliminates these problems from the start. Goldline configures the platform around your environment, your frameworks, and your workflows. Every integration validated, every control mapped correctly, every policy reflects how your business actually operates. The result is a Thoropass instance that works at full capacity from day one, not a half-configured dashboard that generates more questions than answers.
SCOPE & DELIVERABLES
Goldline provisions and configures your Thoropass instance from the ground up. Organisational structure, user roles, framework selection, control mapping, risk assessment configuration, and policy library customisation. Every control mapped to specific framework requirements, automated evidence collection verified, and manual evidence procedures documented for controls that cannot be fully automated.
Thoropass connects to your cloud infrastructure, identity providers, HR platforms, version control systems, endpoint management tools, and more. Goldline configures and validates every integration. AWS, Azure, GCP, Okta, Azure AD, Google Workspace, BambooHR, Gusto, Rippling, GitHub, GitLab, Jamf, Kandji, Jira, and others. We test each connection to confirm the right data is flowing into the platform, so you don't discover evidence gaps weeks before your audit.
Compliance frameworks require documented, enforceable policies. Goldline writes and customises every policy to reflect your organisation's actual practices. Information security, acceptable use, incident response, data classification, access control, business continuity, and more. We configure Thoropass's policy acknowledgment workflows so employees review and accept policies during onboarding, and we update documentation as your operations or regulatory landscape evolves.
Goldline configures Thoropass's personnel management features to track compliance status for every employee. Security awareness training completion, policy acknowledgments, background checks, endpoint security, and access provisioning. Automated onboarding workflows ensure every new hire enters your compliance programme from day one, and offboarding processes revoke access and recover assets when employees depart.
Five elements that distinguish senior practitioner-led Thoropass implementation from self-service Thoropass onboarding and generalist consultancy.
Founder-engaged from kickoff to attestation. Thirteen years in UK regulated industries. Active credentials maintained against the standards in scope.
No timesheet billing. No scope drift. Engagement structure locked at qualified discovery.
Reseller partner-grade Thoropass tenant configuration with full Thoropass Assurance audit pathway integration. Configured by senior practitioners.
Evidence designed to withstand auditor scrutiny and enterprise client security review. Procurement-grade output, not template-led.
Structured handover documentation, training, and continuous compliance setup. Your team owns the platform after engagement completion.
METHODOLOGY
Four phases, senior practitioner-led throughout. The sequence is fixed. The timeline is calibrated at the free diagnostic.
PHASE 01
Senior practitioner-led assessment of your current security and compliance posture against your target framework. Existing documentation, infrastructure, and integrations reviewed to shape the Thoropass implementation roadmap.
PHASE 02
Thoropass tenant configuration, integrations connected and validated, controls mapped, and your customised policy library built. By the end of this phase the Thoropass platform is actively monitoring controls and collecting evidence from your environment.
PHASE 03
End-to-end test of the Thoropass implementation, evidence accuracy verification, gap closure, and team training on day-to-day compliance workflows. Auditor access and executive reporting views configured inside Thoropass for stakeholder visibility.
PHASE 04
Thoropass Assurance audit pathway activation where in scope, operational handover documentation, runbook delivery, and transition into ongoing Thoropass management through Monthly Packages.
WHAT'S INCLUDED
Complete Thoropass environment configured. Thoropass Assurance audit pathway prepared.
Thoropass controls aligned to your scope. Custom controls added where needed.
Thoropass policy library customised to your operating environment.
Automated evidence collection across in-scope systems. Manual workflows established for non-automated items.
Thoropass training for your team. 90-day support included.
Thoropass Assurance audit scheduled. Single-platform audit pathway operational.
OUTCOMES
Tangible outcomes at programme completion.
Platform configured, integrations live, evidence automation working.
Single-platform audit route configured. CPA firm engagement coordinated.
Compliance team confident operating the platform.
ISO 27001, HIPAA, GDPR, NIST and others deployable from the same Thoropass instance.
Direct routes into ongoing advisory or Goldline Method programmes for framework expansion.
FRAMEWORKS SUPPORTED
Goldline implements and manages Thoropass across every major compliance framework the platform supports, including SOC 2 Type I and Type II, ISO 27001, ISO 42001, HIPAA, GDPR, PCI DSS, NIST, DORA, NIS 2, EU AI Act, and custom frameworks.
For organisations managing multiple certifications simultaneously, we configure Thoropass to handle all frameworks from a single instance. Eliminating redundant work and ensuring shared controls are mapped once and applied everywhere they're needed. As your business grows and adds new compliance requirements, Goldline reconfigures the platform to absorb them without disrupting your existing programme.
FREQUENTLY ASKED
LICENCE ONLY
Goldline is a Thoropass partner. If you have the people to run the implementation yourself and only need the licence, we can set you up at partner pricing with no implementation engagement. If you want help later, the readiness work is priced separately and you are under no obligation to take it.
Ask about licence-only pricingGoldline makes it work from day one through every audit cycle. Senior practitioner-led configuration, ongoing operational management through Monthly Packages, and integrated audit through Thoropass Assurance.
45 minutes, video, with the practitioner who would do the work. No sales pitch.
We use cookies and similar technologies to measure how this site is used, to see which organisations visit, and to measure our advertising. If you accept, we load Plausible, Google Analytics and Google Ads, Microsoft Clarity, which records session replays, and Apollo. Nothing loads until you accept. Read our Cookies policy.