Capabilities · the full inventory
Everything it actually does.
An inventory, not a pitch. Every capability below is built, running, and demonstrable on a complete engagement today.
01 · The wedge
Every conclusion resolves to a clause.
Not a citation typed into a memo — a stored link to the primary-source paragraph, with its verbatim text, effective date and amendment history one click away.
Four frameworks carry 95% of the corpus
11,683 clauses across 19 frameworks, counted from the live corpus — not estimated.
View as table
| Framework | Clauses | Share |
|---|---|---|
| ISA & ISQM — IAASB | 6,463 | 55.3% |
| IFRS | 1,766 | 15.1% |
| PCAOB Auditing Standards | 1,445 | 12.4% |
| IESBA Code of Ethics | 1,424 | 12.2% |
| Fifteen further frameworks | 585 | 5.0% |
| Total | 11,683 | 100% |
Citation-resolving search
Type ISA 315.31 and land on ISA 315.31 — not on the paragraphs that merely mention it.
Effective-date aware
Anchored to the standard as it stood, not as it reads now.
Standards watch
The corpus ages against the regulators, not your last release.
Custom clause packages, with two-person authoring
Firms add their own methodology as first-class clauses, held to the same two-person approval as the file itself.
02 · Depth
The parts that took the longest to build.
Three capabilities that exist because the ordinary version of them is not audit-grade. Each is running, and each is measured below rather than claimed.
A twin of the control, with adversarial cases fired at it
Testing whether a control operated is the easy half. This asks the harder question: is the control, as designed, capable of catching what it claims to?
A working twin of how the client actually operates
Reconstructed from the audited ledger itself — the same rows the file audits. No model anywhere in it; the figures are a pure function of the GL.
The process reality behind the balances: when payments actually settle, how much of the period lands in its last five days, how many hands touch an entry, how much gets redone. It goes to the client as a signed deliverable — and only signed figures are charted, so every mark on the page can be verified by verifying the run.
Uncertainty drawn honestly, or not drawn at all
Five scenario models, 500 samples each. The seed is the hash of the resolved assumptions, so the same assumptions replay to the same output — a divergence is a real change, never noise.
Sensitivity is shown as tornado bounds at each driver's P10 and P90, ordered by impact — and the one-driver-at-a-time caveat travels attached to the data, not in a footnote somebody can crop.
Also shipped, and less loud about it
03 · AI that is accountable
The model proposes. A named human disposes.
Every AI output enters as a proposal and leaves as a judgment attributed to a person. Not a setting — the only path.
The only path an AI output can take into the file
Eight gates screen it. A partner's typed attestation — never a gate — is the decision to deliver.
The human-EP gate is a hard lock
No configuration, no override, no advanced mode removes the partner from the path to an opinion.
A reasoning graph behind every finding
Which signals combined, in what order, to reach the conclusion on screen.
04 · Fieldwork depth
A real audit file, not a findings dashboard.
Planning through completion, each workpaper a real artifact with its own sign-off — not a tab that exports to Excel.
Twenty-eight detection engines, run as one waved pipeline
Findings arrive ranked, each carrying the engine that raised it and the clause behind it.
Materiality recomputes live, and cites itself
Change a benchmark and all three thresholds move on screen, each carrying the clause it derives from.
A group audit does not average
An unresolved component blocks the group conclusion rather than quietly averaging into it.
A control is compiled, then reperformed over the whole population
Not a sample of 25. The certificate replays, so the result can be re-executed rather than believed.
And the rest of the file
05 · Defensibility
Built to be inspected, not just to be used.
An inspector asks you to prove what you did, when, and on what data. The file writes the answer as you work.
| What the inspector asks | What the file already holds |
|---|---|
| Who decided this? | The person, the moment, and a fingerprint of the data behind it recorded |
| Has it been altered since sign-off? | Sign-off is HMAC-bound to the file's state. Alter it and verification fails tamper-evident |
| Show me the basis for this conclusion. | One button: the clause, the evidence and the judgments beneath it |
| What was open, and who cleared it? | The judgments queue, lowest confidence first, plus manager review state |
| Was the team independent and competent? | Credentials checked against the issuing registry, not self-asserted |
| Would this survive inspection? | The inspection simulator, run against the file as it stands |
| Was it archived in time? | Retention and archive windows the system enforces, not a remembered date |
What the seal actually does
Sign-off is HMAC-bound to the state of the file at that moment. The check is arithmetic, not a promise.
06 · Trust & deployment
It runs on your infrastructure. The data never leaves.
Self-hosted by design. There is no vendor cloud in the path of the audit file.
Isolation the database enforces, not the application
A dedicated database per tenant, with row-level security inside it. A cross-tenant read returns nothing.
The restore is exercised, not assumed. Read the security posture →
07 · Adoption
The learning curve ships with the software.
An experienced auditor needs the route through a new file. A new joiner needs teaching. Two artifacts, not one manual.
guided walkthrough tasks
In-app, against a live engagement — one task at a time.
course chapters
A built-in course with a certification path, taught in the product.
sector risk packs
129 sector risks and 123 real enforcement cases — planning starts from what has actually gone wrong.
Built and running. Shown on a complete engagement.
Everything here can be shown on a complete engagement. We would rather you check that than take it on trust.