Changelog
What's New in AssurAI
Product updates, new features and improvements.
25 August 2026
Latest
🚀 4 Competitive Gap Closers — Policy Management, Data Privacy, Audit Universe & BCM Depth
📜
Policy Management
Full policy lifecycle management with AI-assisted drafting, version control, attestation campaigns, and approval workflows. Policy owners can assign attestation deadlines, track completion rates, and auto-escalate overdue sign-offs. AI drafter generates policy drafts from control frameworks in seconds.
🔒
Data Privacy (GDPR / CCPA)
Comprehensive privacy compliance module covering Records of Processing Activities (ROPA), Data Subject Request (DSR) tracking with SLA timers, privacy incident management, and an AI-guided Privacy Impact Assessment (PIA) wizard. Covers GDPR, CCPA, PIPEDA, and PDPA frameworks.
🗂️
Audit Universe — Annual Plan & Coverage Analytics
Audit Universe now includes a quarterly Gantt-style Annual Plan view, Coverage Analytics dashboard with Chart.js bar charts, and an AI Planner agent that generates a risk-based annual plan automatically. Drag entities across quarters, export the plan, and track HC Coverage % and budgeted hours in real time.
🛡️
BCM — BIA Manager & Tabletop Exercise Manager
Business Continuity Management now includes a full BIA Manager to capture RTO, RPO, MTPD, and financial impact per business process, and a Tabletop Exercise Manager with AI-generated scenario scripts. Run ransomware, pandemic, or supply-chain exercises with guided injects, participant roles, and AI-produced after-action reports.
25 August 2026
🤝 Channel Partner Audit — AI-Powered Auditing for Distributors, Resellers & Agents
🤝
Channel Partner Audit Module
AI-powered auditing for distributors, resellers, agents and licensees. 8 agentic AI agents covering FCPA screening, royalty testing, revenue leakage detection, contract compliance and due diligence. Fully integrated into the Internal Audit module — workpapers save to existing engagement files, findings to the shared findings table.
⚖️
FCPA / Anti-Corruption AI
Assess FCPA and UK Bribery Act exposure automatically. AI evaluates jurisdiction risk, government official interactions, commission reasonableness, and generates a complete anti-corruption workpaper with escalation protocol.
💰
Royalty & Revenue Leakage Detection
12-vector revenue leakage analysis covering channel stuffing, unauthorized discounts, return manipulation, grey market indicators, and more. Royalty calculation testing workpaper with sampling methodology included.
📊
Partner Risk Registry & Analytics
Centralized partner registry with AI risk scoring (0-100 across 4 dimensions), 3×3 risk matrix, overdue audit tracking, revenue-at-risk calculations, and audit coverage analytics. Risk scores updated automatically by AI.
23 August 2026
⚙️ ABC Testing Engine — AI-Powered Automated Control Testing
⚙️
ABC Testing Engine
The first AI-powered automated control testing platform. Connect to your ERP — AssurAI pulls the automated control configuration, AI reviews the logic for design gaps, traces a sample transaction end-to-end, and generates a PCAOB AS 2201 workpaper. In minutes.
🔷
SAP · Oracle · NetSuite · Workday · Salesforce
14 pre-built automated control templates across P2P, O2C, R2R, Payroll, and Inventory. Live ERP configuration pulls via API with configuration hash tracking and change detection.
📄
PCAOB AS 2201 Workpaper Generator
Six-section professional workpapers with design adequacy, configuration evidence, AI assessment, transaction trace, and integrated conclusion — auto-saved to the engagement binder.
🔴
Configuration Change Monitoring
Subscribe to configuration changes per control. When AssurAI detects a change during scheduled pulls, it emails the audit team, flags the workpaper for re-testing, and shows a diff of what changed.
21 August 2026
🗺️ Integration Canvas — Visual No-Code API Connector Builder
🔗
Visual API Integration Canvas
Drag-and-drop integration builder: visually connect source systems (Okta, GitHub, AWS IAM, Azure AD, Supabase, Cloudflare) to AssurAI modules via an SVG bezier canvas. Map fields with drag-and-drop chips, schedule automated pulls (daily/weekly/monthly), and set per-connection actions including exception alerts and Slack notifications.
🤖
AI Auto-Field Mapping
One-click Auto-Map uses Claude to intelligently map source fields to destination fields by name similarity and data type — saving hours of manual configuration. Includes a test preview showing sample values for each mapped field.
📡
Custom REST API & Webhook Receiver
Add any REST API in 4 steps: enter credentials, point to an endpoint, auto-discover fields, test, and save to canvas. Webhook receiver endpoint at /.netlify/functions/webhook-receiver accepts real-time push events from any system with org-level key validation.
20 August 2026
⚡ SOX Evidence Collector — Automatic ITGC Evidence from 6 Live Connectors
NewAutomatic ITGC evidence collection from Okta, GitHub, AWS IAM, Azure AD, Supabase & Cloudflare — maps to 24 SOX controls with PCAOB AS 2201-aligned workpaper generation
NewABC/MBC business process control testing via ERP file upload + AI analysis; continuous SOX monitoring with configurable frequency and alert thresholds
19 August 2026
🛡️ Module 08: Trust & Security Compliance — SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS
🛡️
Trust & Security Module Hub
New Module 08 landing page with links to all 11 Trust & Security tools. Full binder layout with progress bars, chip grid, and quick links to SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, Policy Library, Questionnaire AI, Personnel Security, Trust Portal, Subprocessor Registry, and Compliance Dashboard.
🔐
SOC 2 Readiness Tracker — 64 Trust Service Criteria
Track readiness against all 64 AICPA Trust Service Criteria across 5 categories (CC, A, C, PI, P). Dynamic circular gauge, per-criterion status tracking, AI guidance per criterion, evidence locker with SHA-256 tamper detection, gap assessment, and 8-milestone readiness timeline. Supabase-backed with org isolation.
📋
Policy Library — 40 AI-Generated Templates
40 security and compliance policy templates across 5 categories (Security, Privacy, HR, IT, Compliance). AI policy generator tailored to your industry and company size. Annual attestation workflow tracks who has signed which policy. Policies save to Supabase with approval dates and review schedules.
🤖
Security Questionnaire AI — Auto-Answer Any Questionnaire
Upload or paste any customer/vendor security questionnaire. AI reads your security posture knowledge base and drafts answers automatically. Supports SIG Lite, CAIQ, VSA, and custom questionnaires. Shows confidence levels (High/Medium/Review Required) and estimated hours saved.
👥
Personnel Security — Onboarding, Training & Offboarding
Manage security onboarding checklists (10 items per employee), annual security training completion, offboarding procedures with critical access revocation alerts (red badge if access not revoked within 1 day of termination), and quarterly access reviews.
🌐
Trust Portal — Public Security Page Builder
Build your organisation's public trust page (like trust.vanta.com) directly in AssurAI. Shows certification status, security overview, downloadable policies, AI & data handling, subprocessors table, and AI trust chatbot. Public mode requires no auth — share getassurai.com/trust/{org-slug} with prospects.
🇪🇺
GDPR Compliance — ROPA, DSARs, Breach Register
Records of Processing Activities (ROPA) with AI-assisted entry generation, Data Subject Access Request tracker with 30-day countdown, Data Processing Agreement tracker, personal data breach register with 72-hour DPA notification countdown, and AI tools for Privacy Notices, LIA, and DPIA.
🔒
PCI DSS v4.0 Readiness — 12 Requirements, CDE Mapper
Track readiness against all 12 PCI DSS v4.0 requirements with SAQ type selector (A/A-EP/B/B-IP/C/C-VT/D/ROC). Cardholder Data Environment (CDE) scope mapper shows in-scope vs out-of-scope systems. AI gap report generates remediation roadmap.
🏢
Subprocessor Registry — Vendor Data Processing Tracker
Track all subprocessors and vendors who process customer data. Pre-populated with AssurAI's own subprocessors (Anthropic, Supabase, Netlify, Cloudflare, Brevo) as a demo. Public toggle controls what appears on your Trust Portal. Export as CSV or PDF.
📊
Compliance Dashboard — Unified Framework View
Control centre across all compliance frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, India IFC, and Sharia. Framework status grid, upcoming deadlines calendar, control heat map by category and framework, evidence expiry tracker (90-day alerts), and AI board report generator.
🤖
4 New Trust & Security Agents: SCOUT-2, PETRA, QUINN, PIPA
SCOUT-2 assesses SOC 2 readiness across all 64 criteria. PETRA drafts board-ready security policies in minutes. QUINN auto-answers customer security questionnaires from your security posture. PIPA conducts GDPR Data Protection Impact Assessments (Article 35 compliant).
16 August 2026
Annotated Evidence Export (4 File Types), Full Archer GRC Integration & More
📎
Annotated Evidence Export — 4 File Types
Evidence AI now exports annotated evidence files automatically — PDF files get audit overlay with tick marks, exception flags and annotation page; Excel/CSV files get 3-sheet annotated workbook (Annotated Data, Audit Summary, Exceptions Only); Word/DOCX files get 3-page annotated PDF report (Cover + Conclusion, Exhibit Table, Exceptions Detail). File type detected automatically.
🏹
Full Archer GRC Integration
Native RSA Archer REST API integration — findings, workpapers and action plans push directly into your Archer instance. New Archer Settings page for connection config, field mapping and test push. Push All to Archer bulk button on findings page. Activate with your Archer instance URL and credentials.
💾
Evidence AI — Save as Workpaper
After Evidence AI analyses your evidence and produces a workpaper, click Save to store it directly to Supabase workpapers table with one click. Project picker modal lets you assign to any engagement. Redirects to workpapers page with new entry highlighted.
🔑
Agent Pipeline — Auth Warning Banner
AI Agent Pipeline now checks authentication on page load and shows a clear amber warning banner with Re-login link and Refresh Session button if session has expired — eliminates silent 401 failures mid-pipeline.
15 August 2026
Previous
Sharia Audit Module, File Upload for All AI Agents & Agent Pipeline Enhanced
🕌
Sharia Audit & Governance Module
Complete Sharia audit framework inside Compliance module — 25 AI tools, AAOIFI GSIFI/SS 1-62/FAS, IFSB-10, OIC Fiqh Academy, 8 regional regulators, full Islamic product universe, income purification, zakat computation, fatwa library, SSB governance structure.
📎
File Upload for All AI Agents
Every AI agent now accepts PDF, DOCX, XLSX, CSV and TXT file uploads — upload real evidence, workpapers or data and the agent analyses it directly.
📋
Co-Pilot Pro PDF Analysis
Upload any PDF document — prior year workpapers, evidence files, policies — and Co-Pilot Pro reads and analyses it with suggested prompts and PBC generation.
🔀
Walkthrough AI — Interview Upload
Upload walkthrough interview notes as TXT file and Walkthrough AI generates the full Big 4 narrative, process flowchart and control matrix.
🤖
AI Agent Pipeline — Enhanced
Agent pipeline now uses AssurAI Agent with 16,000 token output — longer, more complete audit plans with no truncation. File upload supported.
12 August 2026
Previous
14 Live Integrations, Mobile Approvals & BI Connector
🔌
12 Live Integrations — Connect with Demo Fallback
Connect AssurAI to BlackLine, Workday, SAP, NetSuite, ServiceNow, Okta, RSA Archer, Diligent HighBond, MetricStream, Onspring, Dynamics 365, and more — all with instant demo mode that works without credentials.
📱
Mobile Approvals — Approve from any device
Approve findings, workpapers, and SOX certifications from any mobile device with one tap. Includes digital signature capture, push notification setup, QR code access, and offline queue support.
11 August 2026
Custom AI Playbook Builder, Vendor SOC 2 Analyzer, Policy Framework Analyzer & More
🎮
Custom AI Playbook Builder
Build your own multi-agent AI pipelines with custom steps, scheduling and automated execution. Define up to 8 sequential agent steps with custom roles, input sources and output formats. Run on demand or schedule daily, weekly, monthly or quarterly.
📋
Third-Party Assurance Report Analysis
Upload vendor SOC 2, SOC 1 or ISO 27001 reports — AI identifies key findings, exceptions and your complementary control obligations (CUECs). Risk score gauge, trust service criteria coverage table, subservice organizations, and one-click Word export.
🔍
Policy vs Framework Analyzer
Check any policy against SOX, SOC 2, ISO 27001, HIPAA, NIST CSF, GDPR, PCI DSS and CMMC. AI identifies coverage gaps with percentage scores per framework, top 5 critical gaps highlighted, and a downloadable gap report.
📝
Questionnaire Auto-Answer — Source Citations
Security questionnaire answers now sourced from your actual control library and policies first, with source citations per answer. Green badge for Control Library sources, amber for Policy Hub, grey for AI Generated. Export all Q&A as a formatted Word document ready to send.
⏰
CCM Scheduler
Schedule continuous control monitoring rules to run daily, weekly, monthly or quarterly with automatic email notifications. Schedule badge on each rule card shows next run date. Overdue rules auto-trigger on page load.
7 August 2026
Previous
AI Audit Trail, Workpaper Timer, Compliance Score Dashboard & More
🤖
AI Audit Trail
Complete AI decision log per workpaper — every AI annotation, finding, and confidence score recorded. "Generate AI Decision Log" produces a PCAOB-ready summary of all AI decisions made during the audit engagement. Export as PDF.
📊
Compliance Score Dashboard Widget
Real-time overall compliance health score (0–100) on the dashboard. Circular gauge coloured green/amber/red, with breakdown across Controls, Findings, and Workpapers. Calculated live from your Supabase data.
⏱️
Workpaper Timer — Time Tracking
Track time spent per workpaper with a built-in timer. Start and stop the timer directly in the workpaper detail header. Logged time persists and demonstrates ROI: "This workpaper took 12 minutes with AI."
📂
Prior Year Comparison
Compare current year workpapers against prior year side-by-side. AI highlights unchanged sections, modified procedures, sample size changes, and new exceptions vs prior year. "Rollforward" copies prior year content as the starting point.
💰
LP Distribution Waterfall Calculator
Model carried interest and LP distributions in the Fund LP Portal. Enter invested capital, portfolio value, hurdle rate, and carry %. View the 5-step waterfall with colour-coded bars, IRR estimate, and generate an ILPA-format distribution notice.
⚡
HIPAA Breach Impact Calculator
Real-time breach impact calculator in the HIPAA module. Enter number of individuals affected and instantly see OCR fine estimates, class action risk rating, and required notification obligations.
📅
Joint Commission Survey Countdown
Prominent countdown to next triennial accreditation survey window at the top of the Joint Commission page. Shows years, months, days remaining with real-time readiness indicator.
🏆
Portfolio GRC Score Calculator
AI-powered GRC score (0–100) for each portfolio company in the Fund Portfolio Monitor. Assess SOC 2, ISO 27001, GDPR, internal audit programme, and board oversight — get a score plus 3 recommended actions per company.
🧹
AI Assistant Enhanced NL Queries
Ask the AI Assistant "show me all critical findings", "what controls are ineffective", "which workpapers need review", "how many exceptions this quarter", "show me the JE control" and more. Results appear as inline lists with module links.
August 2026
AI Audit Judgment, Auto Evidence Chase & Full Population Testing
🤖
AI Audit Judgment — PCAOB Standard
Render formal PCAOB-compliant audit judgments per control with confidence scoring, PCAOB classification (No Deficiency / Control Deficiency / Significant Deficiency / Material Weakness) and sign-off recommendations. Every judgment is documented with rationale that survives PCAOB review.
📬
Automated Evidence Chase
Auto-chase overdue evidence requests with Day 1 reminder, Day 3 second reminder, and Day 7 management escalation. Full chase history tracked per request. Enable per-request with the auto-chase toggle, or run all overdue at once with the "🤖 Auto-Chase" button.
📦
Full Population Testing
Test 100% of your control population instead of a sample. Enable "Full Population Testing" when creating a test to set sample size equal to population size. Eliminates sampling risk and shows a "100% COVERAGE" badge on test cards.
🔥
Complex Control Templates
Pre-built test templates for complex controls: Bad Debt Reserve (Management Review), Revenue Cut-Off Testing, Management Review of Financial Statements, IPE Validation, and Segregation of Duties analysis. Available in the Test Library under 🔥 Complex Controls.
✉️
Exception Correspondence
AI drafts professional control owner correspondence for every finding in Findings. Click "Draft Correspondence" on any finding card — AI generates a professional, factual email ready to send. "Notify All Owners" sends correspondence across all open findings in one click.
📬
Control Owner Portal
A dedicated portal for control owners to upload evidence without needing an AssurAI login. Generate a unique owner link from any evidence request card — owners click the link, drag-and-drop their files, and submit. Replaces email attachments entirely.
August 2026
Healthcare & Fund Compliance — Phase 2
🏥
Staff Training Tracker
Track mandatory HIPAA, compliance and clinical training completion across your workforce. Automated reminders, completion reports and Joint Commission readiness with 10 pre-built training categories.
⚠️
Incident Reporting & Patient Safety
Report, track and analyse compliance incidents, near-misses and adverse events. AI-powered root cause analysis with automatic regulatory reporting obligation identification (HHS, Joint Commission, state health departments).
📋
Policy Management & Staff Attestation
Manage compliance policies, track review cycles and collect staff attestations. AI reviews draft policies for regulatory alignment. Full attestation tracking with automated reminders.
🦺
OSHA Healthcare Compliance
Track compliance with 5 key OSHA healthcare standards: Bloodborne Pathogens, Hazard Communication, Workplace Violence Prevention, Respiratory Protection and OSHA 300 recordkeeping. AI self-inspection guidance.
⭐
CMS Star Ratings & EMTALA Compliance
CMS Hospital Compare star ratings integration with AI benchmarking analysis. Full EMTALA compliance checklist with AI risk assessment for ED compliance gaps.
💊
340B Drug Pricing Compliance
340B programme eligibility tracking, diversion prevention controls, duplicate discount prevention and HRSA audit readiness assessment. AI-powered risk scoring for contract pharmacy arrangements.
💰
Expense Misallocation Detection
AI-powered expense allocation audit — upload fund expense reports and AI identifies misallocated expenses with SEC enforcement risk scoring. Generates compliance memos with remediation priorities.
💼
Multi-Fund Consolidated View
Group portfolio companies by fund with consolidated GRC scores, weighted average scoring and cross-fund framework coverage. Add and manage multiple funds with vintage year and commitment tracking.
📋
ILPA Reporting Templates
Download ILPA Principles 3.0 compliant Excel templates: Fee Template, Capital Call Template, Distribution Notice and Quarterly Report — all with standard ILPA column headers and formula cells.
📈
GIPS Compliance Tracker
CFA Institute Global Investment Performance Standards compliance — composite management, annual requirements checklist and AI review of GIPS-compliant presentations for required disclosures.
🏛️
SEC EDGAR Integration
Pull Form ADV filings directly from SEC EDGAR using the public API. Enter your CRD number to fetch registration data, last amendment date and next filing deadline. Monitor for new filings automatically.
August 2026
NEW FEATURE
Fund & Healthcare Compliance Agent Pipelines — Board-ready CCO reports in 90 seconds
🤖
6-Agent Fund Compliance Assessment
A 6-agent AI pipeline runs sequentially on any fund type (Hedge Fund, PE, VC) — covering Regulatory Profile, Investment Adviser Compliance, AML/KYC, Portfolio & Operational Compliance, ESG & Reporting, and a final CCO Board Report with overall compliance score, risk rating, critical findings and compliance calendar. Exports to Word and PowerPoint.
🏥
7-Agent Healthcare Compliance Assessment
A 7-agent AI pipeline assesses any healthcare organisation type (hospital, health system, health plan, digital health, pharma) — covering Regulatory Frameworks, HIPAA Security & Privacy, Accreditation & Survey Readiness, OIG Fraud Risk, Cybersecurity & HITRUST, Revenue Cycle Compliance, and a CCO Board Report with scorecard across all domains. Exports to Word and PowerPoint. The only GRC platform with autonomous multi-agent compliance assessment for investment managers and healthcare organisations.
August 2026
NEW MODULE
Healthcare Compliance — Purpose-built for Hospital Systems and Health Networks
🏥
Healthcare Compliance Module
9-module compliance suite purpose-built for healthcare compliance officers and internal audit teams. Covers HIPAA Privacy & Security, Joint Commission & CMS readiness, OIG Work Plan tracking, HITRUST CSF assessment, Revenue Cycle compliance, 21 CFR Part 11 & GxP, ESG & Community Benefit reporting, and Healthcare Vendor & Supply Chain Risk.
August 2026
NEW MODULE
Fund & Investment Manager Compliance — Purpose-built for PE, VC and Hedge Funds
💼
Fund & Investment Manager Compliance Module
9-module compliance suite purpose-built for investment managers and their portfolio companies. Covers SEC/FCA regulatory tracking, portfolio-wide GRC monitoring, AI-powered due diligence assessments, ESG/ISSB reporting, LP reporting portal, investment adviser compliance, AML/KYC and management company internal audit.
🏢
Portfolio GRC Monitor — Single view across all portfolio companies
Fund compliance teams can now track GRC health across all portfolio companies in one dashboard. Red/amber/green status per company per framework (SOX, SOC 2, ISO 27001, GDPR, ESG). AI-generated portfolio intelligence highlights at-risk companies and time-sensitive issues.
🔍
AI Due Diligence Assessment — Compliance memo in 2 minutes
Upload target company documents and AI runs 6 sequential compliance analysis agents: company risk profile, framework assessment, financial controls, data privacy/cybersecurity, red flags identification, and a professional DD memo generation. Outputs overall risk rating, maturity scores per framework, conditions precedent list, and post-close action plan.
🌱
ESG & ISSB Reporting — ISSB S1/S2, SFDR, TCFD compliant
Collect E/S/G metrics across all portfolio companies, generate AI ESG scores with SFDR Article 6/8/9 classification, and produce LP-ready ESG reports. Covers ISSB S1/S2, SFDR, GRI Standards, TCFD and SEC Climate Rules.
August 2026
NEW
Major Platform Upgrade — 10 Enterprise Gaps Closed — August 2026
📁
Permanent File Storage — Evidence files now stored in Supabase Storage
Evidence files uploaded via Evidence Intelligence are now permanently stored in Supabase Storage with cryptographic path isolation per organisation. Each file receives a permanent public URL and metadata record (file_name, type, size, control linkage) in the evidence_files table. Version control tracks re-uploads of the same filename.
👥
Real-Time Collaboration — See who's viewing workpapers live
Workpaper pages now show live presence indicators — coloured avatar bubbles showing which team members are viewing or editing each workpaper. Powered by Supabase Realtime channels with per-workpaper presence tracking. Section locking broadcasts prevent concurrent edits.
🔐
Enterprise SSO — Okta, Azure AD, Google Workspace
The login page now includes an Enterprise SSO section. Enter your company email and AssurAI detects whether your domain has SAML 2.0 or OIDC SSO configured. SSO domain mapping is configured per organisation in org_settings. Supports Okta, Azure Active Directory, and Google Workspace via Supabase's native SAML SSO feature.
📜
Immutable Audit Trail — Auto-logged changes across all key tables
Database triggers now automatically log every INSERT, UPDATE, and DELETE across workpapers, findings, controls, control_tests, and issues into the audit_trail table. Each entry captures: table name, record ID, action, before/after values (JSONB), changed_by user, org_id, timestamp, and IP address. The trigger function is fault-tolerant — audit failures never block the main operation.
📱
Mobile PWA — Install AssurAI as a home screen app
AssurAI is now a Progressive Web App. A manifest.json enables "Add to Home Screen" on iOS and Android. The new Mobile Approvals page lets reviewers approve or return workpapers with large tap targets optimised for phones. The service worker (v10) caches key pages for offline access. Install prompt auto-appears on mobile browsers.
📧
Email Notifications — Overdue alerts, review reminders, daily digest
The Automations engine now sends professionally formatted email notifications via Resend for: overdue Critical/Significant findings (30+ days), workpapers stuck in review (5+ days), overdue evidence requests, and new significant findings. Templates include deep-links back to the platform. Notification preferences configurable per organisation in org_settings.
💬
Natural Language Queries — Ask the AI assistant data questions
The AI assistant (✨ button) now detects data queries and answers them directly from your Supabase data. Ask "Show me all critical findings overdue" or "How many workpapers are in review?" and the assistant queries the relevant table, applies filters, and returns a formatted summary — without requiring any manual navigation.
🏢
Vendor Portal — External questionnaire portal for TPRM
A public-facing vendor portal (vendor-portal.html) lets third parties complete security questionnaires without a platform login. Auditors generate a unique access token and email it to the vendor; the vendor visits the portal, completes the 4-section questionnaire (Company Info, Security Controls, Compliance Certifications, Sub-processors), and submits. Responses are stored against the vendor_assessments record and the requesting auditor is notified.
📄
Microsoft Office Export — Word download from workpaper cards
Every workpaper card now has a 📄 Word button that downloads the full workpaper as a .doc file — including objective, scope, procedures, evidence trail, exceptions, conclusion, and sign-off blocks formatted for Microsoft Word. A 📊 Excel button deep-links to the Excel add-in with the workpaper pre-loaded.
⚙️
Automation Rules Engine — 4 pre-built rules with dry-run testing
The automations engine now has a real backend (run-automations.js). Four rules run on schedule: escalate critical overdue findings, remind workpaper reviewers, chase overdue evidence requests, and alert on new significant findings. A dry_run mode shows how many records would be affected without sending emails. Execution logged in automations_log table.
August 2026
NEW
Advisory Services, Framework Library Exports & Evidence Intelligence — August 2026
🤝
AssurAI Advisory Launched — 28 named services across 7 practice areas
AssurAI Advisory delivers fixed-fee professional services across SOX & ICFR, Internal Audit, Cybersecurity, Risk & Compliance, TPRM, Financial Intelligence, and Cross-Assurance. All engagements include a 25–50% cost savings guarantee versus Big 4 and mid-tier firms. Service menu includes scoping workshops, control design, gap assessments, readiness reviews, co-sourcing, and regulatory advisory. Book a free 30-min consultation directly from the advisory page.
📚
Framework Library — File upload for gap assessments + PowerPoint / Word / Excel export
The Framework Library now accepts file uploads (PDF, DOCX, XLSX, CSV) as input for AI gap assessments. After AI analysis, export results as a branded PowerPoint deck, a structured Word report, or an Excel workbook — ready to share with clients and management with no additional formatting needed. Covers 25+ frameworks including SOC 2, ISO 27001, NIST CSF, PCI DSS, HIPAA, and CIS Controls.
🎯
Project Mode — PowerPoint and Word export for all 6 project types
Every Project Mode pipeline (Cyber Maturity, SOC 2 Readiness, ISO 27001, TPRM, Internal Audit, Fraud Risk) now exports a fully-structured PowerPoint presentation and Word report directly from agent results — including executive summary, gap analysis, risk ratings, and recommended roadmap. Replaces $40–120K deliverable preparation time.
🔬
Evidence Intelligence — Suggested Controls matching + Attach to control
After AI classification, Evidence Intelligence now surfaces a 🎯 Suggested Controls panel showing the top matching controls from your library. Click 📎 Attach to control to create a link in the evidence_control_links table — building a traceable evidence-to-control map automatically from uploaded documents.
🌐
25+ data sources — CrowdStrike, Qualys, Splunk, Workday and more
Evidence Intelligence now displays 25+ named data sources in the source selector, including CrowdStrike Falcon, Qualys VMDR, Splunk SIEM, Workday, ServiceNow, Okta, AWS IAM, Azure AD, GitHub, Google Workspace, Jira, Confluence, Microsoft 365, Salesforce, SAP, Oracle ERP, Netsuite, Veeva, Proofpoint, Rapid7 InsightVM, Tenable.io, SentinelOne, Crowdstrike Spotlight, and Custom REST connectors. Each source has a branded icon and description.
July 2026
10 Strategic Platform Improvements — July 2026
🏠
Clean home launcher — module chicklets replace the busy dashboard.
The app home page is now a focused launcher with a welcome header, a 3×2 grid of module chicklets (SOX & ICFR, Internal Audit, Risk & ERM, Compliance, BCM & Resilience, Financial Intel), and a personalised quick-launch bar.
✏️
Personalised quick launch — pick your 8 favourite shortcuts.
The home page quick-launch bar is fully customisable. Choose up to 8 shortcuts from every page in the platform, organised by section. Your selection is saved locally and persists across sessions.
🗂️
Collapsible Sidebar
The platform sidebar now collapses to an icon-only strip, giving more horizontal space for workpapers and analysis panels. Click the chevron or use the collapse button — preference persists across sessions.
📤
Coexistence Exports — Cross-Platform Workpaper Export
Export any workpaper directly to your existing GRC platform (JSON, Word/Excel, or CSV) with one click from the workpaper toolbar. Use AssurAI's AI alongside your existing platform — no rip-and-replace required.
🎯
Project Mode Launcher
Select a project type (cyber maturity, SOC 2 readiness, ISO 27001 gap analysis, TPRM, internal audit, fraud risk) and AssurAI pre-configures modules, loads template workpapers, and generates your PBC evidence list automatically. Replaces $40–120K contractor engagements with a subscription feature.
🤖
Bring Your Own LLM (BYOLLM)
Switch the AI model powering your workpapers and analysis from Anthropic Claude to OpenAI GPT-4o, Google Gemini Pro, or Azure OpenAI in Settings → AI Provider. API keys stay in your browser — never sent to AssurAI servers. The provider badge in the sidebar header updates in real time.
💳
Project Licence Pricing
New $999 flat-fee Project Licence: 90-day full-platform access for up to 5 users — no annual commitment. Designed for single engagements (SOX readiness, cyber assessment, audit co-sourcing). Upgradeable to a full subscription with fee credit applied to month one.
🧩
Custom Module Builder
Build your own GRC modules with a 3-column builder: set module name, icon, description and access level; add up to 10 workflow steps (Data Collection, AI Analysis, Review, Sign-off) with custom AI prompts; preview live in the sidebar. Modules are stored in Supabase and appear in the nav automatically.
👋
Personalised Onboarding Flow
New 3-step onboarding wizard shown to first-time users: role selection → first project type → team size. On completion, the platform opens the most relevant module automatically (SOX, Audit, Risk, Compliance, Cyber, or Vendor Risk). Skippable at any step.
July 2026
NEW
Competitive Feature Release — 6 New Capabilities — July 2026
🤝
Third-Party Risk Management (TPRM)
Full vendor risk module — register vendors with criticality, contract dates, and SOC 2 expiry; AI-powered risk assessments that return a risk score, key risks, recommended actions, and due diligence questions; risk distribution dashboard; auto-saves assessments to vendor record. Closes the gap with Vanta's paid TPRM add-on — included in AssurAI at no extra cost.
📝
AI Questionnaire Auto-Answer
Paste or upload a security questionnaire (.txt/.csv) and AI auto-answers all questions using your persisted knowledge base. Batch processing with progress bar, confidence ratings (High / Medium / Low), inline editing, and one-click CSV export. Covers due diligence, vendor security questionnaires, and RFP security sections — a capability absent from Vanta and most competing platforms.
🔗
Regulatory Change → Control Mapping
Each regulatory change card now has a "Map to My Controls" button. AI analyses the regulatory change against your live control library, identifies impacted controls, rates impact (High / Medium / Low), and recommends specific actions. Results are saveable to workpapers with a single click (ref format: REG-MAP-[timestamp]).
🔌
Evidence Connectors
Generic REST connector to pull evidence from any system with an API (URL + optional bearer token). Preview fetched content before importing. Imported evidence is queued directly in Evidence Intelligence. Evidence schedules let you define recurring pulls. Coming Q3 2026: native connectors for Okta, AWS IAM, Azure AD, GitHub, and Google Workspace.
⚙️
CCM AI Rule Templates + Anomaly Review
Six pre-built AI detection rule templates (terminated user with active access, JE outside business hours, duplicate vendor payment, payment just under approval threshold, dormant account activity, privileged access change without ticket). Each monitoring alert now has an "AI Anomaly Review" button that returns likely cause, false positive probability, recommended investigation steps, and suggested disposition.
🛡️
SOC 2 / ISO 27001 Framework Mapper
Track readiness against all 33+ SOC 2 Trust Services Criteria (CC1–CC9 + A1) and 45+ ISO 27001:2022 Annex A controls. Each criterion has a status dropdown (Not Started / In Progress / Implemented / Not Applicable), evidence notes, and owner field — all auto-saved to Supabase. Overall readiness percentage with per-section progress bars. "AI Gap Analysis" button generates a readiness score, critical gaps, quick wins, remediation roadmap, and estimated timeline.
🛡️
Framework Mapper enhanced — 10 new frameworks
Framework Mapper now covers 12 frameworks: NIST CSF 2.0 (6 functions), NIST SP 800-53 Rev 5 (20 control families), PCI DSS v4.0 (12 requirements), HIPAA Security Rule (17 safeguard standards), GDPR (10 key articles), COBIT 2019 (15 governance objectives), CIS Controls v8 (18 controls), FedRAMP, DORA (5 pillars) and IIA Standards 2024. New features: file upload for gap analysis (attach policies, audit reports, pen tests — AI incorporates them), expandable criterion rows showing description, guidance notes and evidence examples, per-criterion evidence file attachment, last-updated timestamps, status summary chips, bulk "Mark N/A" per section, Export to Excel (CSV), import prior assessment, and copy summary to clipboard. Gap analysis now returns a rich report with critical gaps table (ref, risk level, recommended action, effort, timeline), quick wins cards, strengths section, remediation roadmap by phase, and numbered next steps.
🔐
Module-Based Access Control
Org admins can now restrict team members to specific GRC modules — SOX only, ERM only, read-only observer, and more. An interactive access matrix (Full / Read Only / None) per module is managed from the Team page. One-click role presets for common audit team structures: Internal Auditor, Risk Manager, Compliance Officer, SOX Team, and Read Only Observer. Users with no access to a module see an access-denied page; read-only users see a banner and action buttons are hidden automatically across the platform.
July 2026
NEW
Evidence Intelligence + Annotation — July 2026
🔬
Evidence Intelligence + Annotation
AI Evidence Annotation Trail is now automatically generated after every test run. Each uploaded document receives a structured annotation card covering procedures performed, key findings, exceptions noted, and a reliability rating (High / Moderate / Low). A consolidated evidence trail summarises overall sufficiency, compliance gaps, and recommended additional procedures. Fully compliant with PCAOB AS 1215 and IIA GIAS 2024 Standard 14.1. One-click workpaper creation links the full annotation trail to the workpaper file.
📄
Evidence Annotator Workpaper Mode
Open any workpaper's evidence directly in the Annotator with AI auto-annotations pre-loaded. The evidence queue shows all documents attached to the workpaper. Click any document to view AI-generated tick marks (✓), pins (📌), and exceptions (✗) overlaid on the document. Annotations are saved back to the workpaper evidence trail for auditor review and sign-off.
July 2026
AI Evidence Annotation Trail — July 2026
📋
AI Evidence Annotation Trail & Workpaper Linking
After AI analysis completes in Evidence Intelligence, generate a structured per-document annotation trail compliant with PCAOB AS 1215, IIA GIAS 2024 Standard 14.1, and ISA 230. Each document receives a full annotation card (type, procedures performed, key findings, exceptions, conclusion, reliability assessment). A consolidated trail summarises overall reliability, evidence sufficiency, and recommended additional procedures. All fields are editable inline. Save directly to an existing workpaper or create a new one — the annotation trail is linked and viewable from Workflow with a 📎 Evidence Trail badge.
July 2026
NEW
Agent AI Expansion — July 2026
📎
Document Attachment in Agent Pipeline
Attach up to 10 files (PDF, DOCX, XLSX, CSV, TXT, PNG, JPG) directly to your Agent Pipeline run. PDFs and images are passed as native content blocks to Claude; text files are prepended as context. Drag-and-drop supported with a total size indicator.
🧠
Persistent Pipeline Memory
The Agent Pipeline now remembers your last 5 runs. Each run is automatically summarised and stored locally. On subsequent runs, Co-Pilot builds on prior analysis rather than starting from scratch — surfaced via an in-page context banner with one-click history clear.
🔗
Cross-Module AI Orchestration
Select 2–6 GRC modules and run a coordinated AI analysis across them simultaneously. The AI orchestrator surfaces patterns, gaps, and interdependencies invisible when viewing modules in isolation — presented in four collapsible sections with export to text.
📄
Policy & Document Ingestion Hub
Import policies from any source — paste a URL, paste text directly, or upload files. Extracted content is stored in your Policy Library and can be used to review workpapers, check compliance gaps, feed the Agent Pipeline, or generate test procedures — all in one click.
July 2026
NEW
AI-Powered Features — July 2026
🧠
Predictive Risk AI
AI-powered escalation predictions across your full risk register. Identifies the top 3 risks most likely to escalate in the next 90 days with confidence scoring and recommended actions.
🤝
Co-Pilot Pro
Context-aware AI assistant with full knowledge of your active engagement, open findings, risks, and workpapers. Answers audit questions, drafts workpapers and findings, and suggests procedures.
📊
Enhanced Executive Dashboard
Board-level reporting with live KPIs, findings trend chart, 5×5 risk heatmap, engagement progress, and AI-generated executive insights panel.
🔄
Real-time Collaboration
Live presence indicators show who else is viewing or editing. Instant toast notifications when team members update workpapers or change finding status.
📋
IA Audit Programme Builder
AI-generated risk-based audit procedures inside Internal Audit engagement files. Generate 10–15 specific procedures from your audit objective with one click.
June 2026
AI Intelligence Features
NEW
AI Intelligence Features — June 2026
🎯
Deterministic AI MRC Testing
MRC evaluations now run at temperature=0 — the same evidence always produces the same conclusion. Every attribute evaluation cites the exact text from your uploaded document. No hallucinations. Full audit trail.
📋
Big 4 MRC Workpaper Format
MRC test results now render as a full 6-section Big 4 workpaper — header, 5-attribute evaluation table with evidence quotes and pass/fail verdicts, missing evidence alerts, AI auditor conclusion, editable sign-off fields, and print-ready format.
📊
Missing Evidence Alerts
After Evidence Intelligence classifies your documents, an automatic coverage check identifies which key MRC attributes are present and which are missing — before you run the test.
📊
RCM Auto-Reader
Upload your existing Risk Control Matrix in any format — Excel, PDF, Word, or CSV. AI extracts every control automatically with no template required. Add directly to your control library or generate evidence request lists.
🔗
Evidence Auto-Matching
Classified documents are automatically matched to controls in your library based on content analysis. High/Medium confidence matching with one-click linking.
📂
Prior Year Workpaper Ingestion
Upload any prior year workpaper — PDF or Word. AI reads the structure, objectives, procedures, and conclusions, then creates a new Draft workpaper pre-populated with [PY] markers for this year.
🎤
Walkthrough AI
Paste your walkthrough meeting notes — AI generates a structured process narrative, SVG flowchart, list of controls identified, and risk points. Meeting to workpaper in minutes.
🔴
Redboxed Evidence Packages
AI identifies the exact passages in your evidence documents that support each PCAOB attribute conclusion and highlights them Big 4 style. Download a print-ready redboxed evidence package.
🔍
Evidence Authenticity Check
Every uploaded document is automatically scanned for authenticity indicators — inconsistent formatting, suspicious dates, round-number patterns, and AI-generated text signatures.
🏢
Enterprise Deployment Options
AssurAI now offers VPC and on-premise deployment for organisations with strict data governance requirements. SSO/SAML, SCIM, custom SLAs, and dedicated tenants available.
🔄
Reconciliation AI
Upload two datasets — GL and bank statement, intercompany balances, AR/AP — and AI matches, identifies exceptions, explains likely causes, and generates a complete reconciliation workpaper.
📋
Big 4 Compatibility
AssurAI workpapers are now explicitly formatted to Big 4 standards — accepted by external audit teams without reformatting. PCAOB AS 2201 aligned throughout.
🏦
BSA/AML Compliance Module
New compliance module covering Bank Secrecy Act and Anti-Money Laundering requirements — risk assessment, SAR review assistance, CIP/KYC testing, and AML program assessment.
🚀
Pre-IPO Landing Page
Dedicated guidance for companies building their SOX program before IPO — scoping, control framework, gap analysis, and external auditor readiness. AI-native from day one.
🔐
Cryptographic Evidence Hashing
Every uploaded document receives a SHA-256 integrity certificate — timestamped proof that evidence has not been altered since collection. Download the certificate for your audit file.
📈
Year-over-Year Intelligence
AI analyses your historical audit data to surface repeat findings, control effectiveness trends, testing efficiency improvements, and suggested focus areas for the current year.
June 2026
Competitive AI Features
Competitive AI Features — June 2026
🎤
Walkthrough AI
Paste walkthrough meeting notes — AI generates process narrative, flowchart, and identifies controls automatically. Big 4 standard workpaper output.
🔴
Redboxed Evidence Packages
Big 4 standard redboxing — AI identifies exact text passages that support each PCAOB attribute conclusion. Downloadable printable package.
🔍
Evidence Authenticity Check
AI-powered detection of potentially forged or AI-generated documents. Flags suspicious patterns including weekend dates, round numbers, and copy-paste artifacts.
🔐
Cryptographic Evidence Hashing
SHA-256 cryptographic certificates for every uploaded document. Printable integrity certificate proves evidence has not been altered since upload.
🔄
Reconciliation AI
Upload two datasets — AI matches transactions, identifies exceptions, and generates audit-ready reconciliation workpapers with exception analysis.
📈
Year-over-Year Intelligence
AI insights from your prior year audit history — repeat findings, control effectiveness trends, and testing efficiency metrics.
🏦
BSA/AML Compliance Module
New module for Bank Secrecy Act and AML compliance — risk assessment, SAR review, CIP/KYC testing, transaction monitoring, and AML program assessment.
🚀
Pre-IPO SOX Landing Page
Dedicated page for pre-IPO companies building their SOX program. AI-native from day one — cut Big 4 readiness costs by 70%.
🏢
Enterprise Deployment Options
VPC and on-premise deployment options for large organizations. SSO/SAML, SCIM, dedicated tenant, custom SLAs, and white-labeling.
June 2026 — Update 5
Just shipped
Risk Dashboards, Instant Analytics, Exports & Integrations
🎯
Enterprise Risk Dashboard (ERM Agent Pipeline)
The ERM Agent Pipeline now automatically visualises risk-scoring output as a colour-coded dashboard — a 5×5 risk heat map with numbered risk badges plotted by likelihood and impact, a risk register table with coloured severity badges (Critical / High / Medium / Low) and key-metric cards (Total Risks, Critical, High, Avg Risk Score). It auto-renders from Agent 2 output with no manual steps, and Agent 5 (Board Report) shows the same visual dashboard.
📊
Data Analytics — Instant Sample Data
All 12 pre-built analytics use cases now demo instantly without uploading data — click Run Analysis on any use case to see realistic KPIs, severity-rated findings and audit-language narrative immediately. Covers JE Anomalies, Vendor Payments, UAR, Payroll, Three-Way Match, Revenue, Expense, IT Change, Access Provisioning, Bank Reconciliation, Fixed Assets and Contract Review. A "Using sample data" badge clearly marks illustrative output; upload real data to run live AI analysis.
📤
Agent Pipeline Exports (PDF, Word, PowerPoint)
Export any individual agent output or the full pipeline report. PDF gives a clean, print-formatted report with all tables and dashboards; Word (.doc) preserves tables, the risk register and severity badges; PowerPoint (.pptx) is a real downloadable file with one slide per agent, navy headers and risk-register bullets. Export buttons appear on each agent output after completion.
🔀
Flowchart Builder Improvements
Full narrative, risks and controls now render correctly after generation. Export to Visio (.vsdx) downloads flowcharts as genuine Visio files for editing in Microsoft Visio or draw.io, and a more robust JSON parser handles truncated API responses gracefully.
🔌
Workday & BlackLine Integrations
A new Integrations Hub brings live connections to Workday Financials (full connection setup, GL data import with risk flagging, field mapping and MRC testing) and BlackLine (reconciliation data import, close calendar and MRC testing from recon data). Sample-data mode lets you explore without credentials. Eight integrations are shown: Workday, BlackLine, SAP, NetSuite, ServiceNow, Dynamics 365, Okta and RSA Archer.
🏛️
Auditor Portal — Enterprise Redesign
A complete visual redesign of the external auditor portal — a navy app shell with a 64px header bar, a 280px sidebar with firm avatar, icon navigation and permission chips, an engagement hero card with a Planning → Fieldwork → Review → Complete progress tracker, workpaper cards with hover effects and colour-coded status badges, and finding cards with severity-driven left borders.
🔐
Trial & Billing Infrastructure
A 14-day free trial is now enforced automatically, with a colour-coded trial countdown banner in the dashboard navigation, automatic emails at 3 days remaining and on expiry, upgrade prompts and a locked-account flow — all backed by full Stripe payment integration.
📊
Benchmarking Dashboard
Compare your audit program against industry peers across six key metrics — audit cycle time, control coverage, findings per audit, remediation rate, cost efficiency and risk coverage — with four CSS comparison charts pitting your program against the industry average. Pick your sector (Technology, Financial Services, Healthcare, Manufacturing, Retail, Energy or Professional Services); benchmarks are based on IIA CBOK 2024.
🔔
Notification Settings
Configure exactly which email alerts you receive across 13 notification types — findings overdue, control untested, SOX cert due, weekly digest and more — and choose your email frequency: Immediate, Daily Digest or Weekly Only.
📅
Audit Planner — Gantt Chart
A visual Gantt chart for audit engagement planning with colour-coded phases — Planning (navy), Fieldwork (blue) and Reporting (amber). Click any task to edit its details, owner, status and notes, add tasks dynamically (stored in localStorage), and use the today line plus print/export support.
⏱️
Time Tracking & Reports
Track audit hours by engagement, team member and activity with a quick time-entry form and weekly timesheet view. Three report tabs — By Engagement, By Team Member and By Activity — give hours-vs-budget tracking with variance analysis, plus CSV and PDF export.
📥
PBC Request Tracker
Manage external auditor document requests (Prepared By Client) with 15 sample requests, colour-coded status badges and a full filter bar (status, category, priority, auditor). Upload via a drag-and-drop modal and track submission dates and overdue items.
🏢
Multi-Entity Support
A consolidated view across all entities in your group — an entity comparison table with risk colour coding, individual entity drill-down views, an Add Entity modal and a risk-aggregation chart by severity.
💼
Management Response Portal
A standalone token-authenticated portal for management to view and respond to findings — no AssurAI account needed. Management receives a secure link via email, submits their response, remediation plan and target date, and the audit team is notified instantly.
🔐
SOC 2 Trust Center
A public security and trust page for enterprise procurement teams — covering encryption, infrastructure, access control and data residency. Includes GDPR, CCPA, IIA Standards and PCAOB compliance documentation, with DPA available on request.
↩
Carry-Forward Workpapers
Copy any workpaper to a new engagement period with one click — carrying forward objectives, procedures and prior year conclusions. The new workpaper is created as a Draft with a CF reference, available on every workpaper row in the workpaper list.
📊
Issue Aging Reports
An Aging Analysis tab on the findings page — four aging buckets: 0–30 days (green), 31–60 (amber), 61–90 (red) and 90+ (dark red) — plus a full aging table sorted by days open descending. Zero additional API calls: uses existing findings data.
🛡️
Independence Declaration
A formal IIA Standard 1130 pre-engagement independence declaration — six conflict-of-interest questions with Yes/No answers, an impairment warning and CAE approval workflow if a conflict is identified, a digital signature with reference number saved to Supabase, and PDF download support.
📅
Follow-Up Audit Scheduling
Auto-prompts to schedule a follow-up when a finding is marked Remediated — set the follow-up date, assigned auditor and verification scope. A Follow-Up Due filter tab shows findings with upcoming follow-ups, and a badge appears on finding cards with scheduled dates.
⏱️
Real Time Tracking (Supabase)
Time logging now saves directly to Supabase — log entries with date, engagement, activity, hours and notes. A recent entries panel shows the last 10 logged entries, and the resource planning page uses hours-based capacity planning with budgeted vs actual hours, configurable weekly hours and an audit target percentage.
🏛️
Audit Universe (Supabase)
The audit universe database is now fully connected to Supabase — risk-scored audit entities drive annual audit plan generation, with AI risk scoring 1–5 per entity.
June 2026 — Update 4
Latest
Premium UI, MRC Testing & Universal Save to Engagement
✨
Premium UI redesign
A premium, enterprise-grade redesign rolled out across all 16 core pages — cleaner layouts, consistent components and a faster, calmer feel throughout the platform.
🔬
MRC Testing — 5-Attribute Evaluation
Evidence Intelligence now auto-detects Management Review Controls and evaluates five attributes — Performance, Competence, Timeliness, Effectiveness and Documentation — aligned to PCAOB AS 2201 review-precision expectations.
💾
Universal Save to Engagement
"Save as Workpaper" is now available on every one of the 20+ AI agents — file any AI output straight into the right engagement via the Module → Engagement → Business Process → Section → Workpaper Type hierarchy.
✅
SOX Certifications — New Cycle Creation
Spin up a new 302/906 certification cycle, assign certifiers and track sign-offs to completion.
🔵
Animated Logo Standardised Across 118 Pages
The canonical animated AssurAI logo is now consistent across all 118 pages for one coherent brand experience.
🎨
13 Additional Pages Upgraded
A further 13 pages upgraded to the enterprise-grade UI, completing the premium redesign across the platform.
📘
Comprehensive Help Guide
A rebuilt, searchable user guide covering every feature — getting started, workpapers, findings, Evidence Intelligence, MRC testing, AI agents and Save to Engagement.
June 2026 — Update 3
Engagement Hierarchy & Save to Engagement
💾
Save to Engagement
Universal save modal for all AI agents — pick module, engagement, business process, section and workpaper type, then Save as Draft or Save & Submit for Review.
📊
Business Process Structure
SOX engagements are now organised by business process — O2C, P2P, R2R, H2R, ITGC and more — with a process filter, process grouping and a By Phase / By Process ring view.
🗂️
Process Map
A visual SOX process map in the SOX module — ELC → O2C → P2P → R2R → H2R → Treasury → ITGC → Financial Close — click a process to filter the relevant AI tools.
June 2026 — Update 2
Specialist Audit Tools & Automation
📝
Evidence Annotation System
Annotate PDF, image, Excel, and CSV evidence. Link marks to test attributes and workpaper sections. Includes templates, split view, and a submit/approve/return review workflow.
🔍
JE Fraud Detector
Detect journal-entry anomalies with Benford's Law and fraud heuristics (round amounts, unusual times, rare users).
🔄
Three-Way Match Agent
Automate PO/GR/Invoice matching with configurable tolerance thresholds; exceptions flagged and saved as workpaper.
📄
Contract Analyzer
Extract key contract terms from PDF and map them to audit risks automatically.
📈
Earnings Quality Analyzer
Accruals and cash-conversion ratios, Benford's Law on reported figures, and a 0-100 earnings quality score.
🌱
ESG Data Validator
Validate sustainability disclosures against GRI, SASB, TCFD, and CSRD; traffic-light gap report for assurance readiness.
💸
Duplicate Payment Detector
Find exact and near-duplicate payments across vendor, amount, date, and invoice number with a recovery estimate.
📋
Policy Compliance Checker
Test transactions and processes against a policy PDF; AI flags every non-compliant item with a policy reference.
⏱️
Time Tracking
Log hours per engagement phase; budget vs actual burn chart with amber/red overrun alerts.
🌐
Audit Universe Management
Inventory auditable entities, score by inherent risk, set frequency, and generate a risk-based annual audit plan.
⚙️
CCM Rules
Define and schedule continuous control monitoring rules that run automatically against live data.
✉️
Weekly Status Emails
Automated weekly digest of engagement progress, open findings, and upcoming deadlines sent to the audit team.
✉️
Escalating Evidence Reminders
Automated reminder sequence for outstanding PBC requests — escalates to manager if evidence remains overdue.
✅
Annotation Review Workflow
Submit, approve, or return annotation sets with reviewer comments — full audit trail stored per workpaper.
June 2026 — Update 1
Update
Major Feature Update
🧪
Full Population Testing
Test every transaction autonomously, not just samples. Up to 50,000 rows with AI judgment and decision logs.
📑
Procedure Execution Engine
Upload your existing audit testing plan. AI follows your procedures step by step against uploaded evidence.
🕵️
Fraud Risk Assessment
Top 10 fraud schemes per ISA 240 for any process with likelihood/impact ratings and management inquiry questions.
📡
Standards Radar
Automatic weekly monitoring of PCAOB, IIA, SEC, ISACA, FRC and FASB updates mapped to your controls.
📐
Peer Benchmarking
Compare your GRC metrics against 40+ industry benchmarks across 7 categories.
📆
Engagement Planner
Gantt timeline, team capacity RAG status, deadline alerts and drag-to-reschedule.
📥
Audit-Ready Excel Output
Export in Big 4, PCAOB or standard templates.
🔐
MFA Security
Two-factor authentication via Google Authenticator or Authy.
🔌
Enterprise API
REST API access with key management and rate limiting.
✅
Workpaper Reviewer Agent
Quality score 0-100 against IIA Standards and PCAOB AS 2201.
🤖
48 AI Agents
Full suite of autonomous agents for every GRC use case.
May 2026
Launch
Platform Launch
🚀
AssurAI launches with 6 modules
SOX & ICFR, Internal Audit, Risk & ERM, Compliance, BCM & Resilience, Financial Intelligence.
📊
320+ AI tools
Expert Big 4 prompts across all 6 modules.
📊
Excel Add-In
AI audit tools inside Microsoft Excel.
📈
KRI Monitor
Key risk indicator tracking and continuous monitoring.
🌐
20+ native integrations
SAP, Oracle, Workday, Okta, ServiceNow and more.
Get notified of new features
We'll email you when we ship something new. No spam.
Thanks — you're subscribed ✓