Thorgate is continuous vendor document monitoring for compliance teams — privacy policies, DPAs, subprocessor lists, and terms across every SaaS vendor in your stack. When something material changes, you hear about it before your auditor does.
Built for SOC 2 · ISO 27001 Annex A.5.19 · GDPR Article 28 / 30 · DORA third-party risk
Monitoring first. Signal second. Audit evidence third. No governance platform bloat, no security questionnaire workflows, no modules you'll never turn on.
Subprocessor changes, DPA versions, retention shifts, and breach-notification term updates are evidence requirements under every major compliance regime. Thorgate produces the records that map directly to specific clauses.
Thorgate is the document-monitoring layer of a vendor risk program. We pair with — not replace — broader TPRM and vendor risk management platforms.
When someone in your organization asks "how does Notion handle subprocessors?" — the answer is a link, not a 40-minute investigation.
Fourteen-day free trial, no credit card required. Cancel with a button. Vendor count is the only variable we price on.
For solo privacy leads and small compliance functions tracking a focused vendor list.
For compliance teams of three with real audit obligations and Tier-1 vendor oversight to document.
For organizations with broad vendor exposure and multiple teams sharing oversight responsibility.
Set up your vendor list in ten minutes. Get your first weekly digest on Sunday. Keep every version of every policy, forever.
Start your 14-day trial →