AI Evidence Annotation Trail is now automatically generated after every test run. Each uploaded document receives a structured annotation card covering procedures performed, key findings, exceptions noted, and a reliability rating (High / Moderate / Low). A consolidated evidence trail summarises overall sufficiency, compliance gaps, and recommended additional procedures. Fully compliant with PCAOB AS 1215 and IIA GIAS 2024 Standard 14.1. One-click workpaper creation links the full annotation trail to the workpaper file.

Open any workpaper's evidence directly in the Annotator with AI auto-annotations pre-loaded. The evidence queue shows all documents attached to the workpaper. Click any document to view AI-generated tick marks (✓), pins (📌), and exceptions (✗) overlaid on the document. Annotations are saved back to the workpaper evidence trail for auditor review and sign-off.

After AI analysis completes in Evidence Intelligence, generate a structured per-document annotation trail compliant with PCAOB AS 1215, IIA GIAS 2024 Standard 14.1, and ISA 230. Each document receives a full annotation card (type, procedures performed, key findings, exceptions, conclusion, reliability assessment). A consolidated trail summarises overall reliability, evidence sufficiency, and recommended additional procedures. All fields are editable inline. Save directly to an existing workpaper or create a new one — the annotation trail is linked and viewable from Workflow with a 📎 Evidence Trail badge.

Attach up to 10 files (PDF, DOCX, XLSX, CSV, TXT, PNG, JPG) directly to your Agent Pipeline run. PDFs and images are passed as native content blocks to Claude; text files are prepended as context. Drag-and-drop supported with a total size indicator.

The Agent Pipeline now remembers your last 5 runs. Each run is automatically summarised and stored locally. On subsequent runs, Co-Pilot builds on prior analysis rather than starting from scratch — surfaced via an in-page context banner with one-click history clear.

Select 2–6 GRC modules and run a coordinated AI analysis across them simultaneously. The AI orchestrator surfaces patterns, gaps, and interdependencies invisible when viewing modules in isolation — presented in four collapsible sections with export to text.

Import policies from any source — paste a URL, paste text directly, or upload files. Extracted content is stored in your Policy Library and can be used to review workpapers, check compliance gaps, feed the Agent Pipeline, or generate test procedures — all in one click.

AI-powered escalation predictions across your full risk register. Identifies the top 3 risks most likely to escalate in the next 90 days with confidence scoring and recommended actions.

Context-aware AI assistant with full knowledge of your active engagement, open findings, risks, and workpapers. Answers audit questions, drafts workpapers and findings, and suggests procedures.

Board-level reporting with live KPIs, findings trend chart, 5×5 risk heatmap, engagement progress, and AI-generated executive insights panel.

Live presence indicators show who else is viewing or editing. Instant toast notifications when team members update workpapers or change finding status.

AI-generated risk-based audit procedures inside Internal Audit engagement files. Generate 10–15 specific procedures from your audit objective with one click.

MRC evaluations now run at temperature=0 — the same evidence always produces the same conclusion. Every attribute evaluation cites the exact text from your uploaded document. No hallucinations. Full audit trail.

MRC test results now render as a full 6-section Big 4 workpaper — header, 5-attribute evaluation table with evidence quotes and pass/fail verdicts, missing evidence alerts, AI auditor conclusion, editable sign-off fields, and print-ready format.

After Evidence Intelligence classifies your documents, an automatic coverage check identifies which key MRC attributes are present and which are missing — before you run the test.

Upload your existing Risk Control Matrix in any format — Excel, PDF, Word, or CSV. AI extracts every control automatically with no template required. Add directly to your control library or generate evidence request lists.

Classified documents are automatically matched to controls in your library based on content analysis. High/Medium confidence matching with one-click linking.

Upload any prior year workpaper — PDF or Word. AI reads the structure, objectives, procedures, and conclusions, then creates a new Draft workpaper pre-populated with [PY] markers for this year.

Paste your walkthrough meeting notes — AI generates a structured process narrative, SVG flowchart, list of controls identified, and risk points. Meeting to workpaper in minutes.

AI identifies the exact passages in your evidence documents that support each PCAOB attribute conclusion and highlights them Big 4 style. Download a print-ready redboxed evidence package.

Every uploaded document is automatically scanned for authenticity indicators — inconsistent formatting, suspicious dates, round-number patterns, and AI-generated text signatures.

AssurAI now offers VPC and on-premise deployment for organisations with strict data governance requirements. SSO/SAML, SCIM, custom SLAs, and dedicated tenants available.

Upload two datasets — GL and bank statement, intercompany balances, AR/AP — and AI matches, identifies exceptions, explains likely causes, and generates a complete reconciliation workpaper.

AssurAI workpapers are now explicitly formatted to Big 4 standards — accepted by external audit teams without reformatting. PCAOB AS 2201 aligned throughout.

New compliance module covering Bank Secrecy Act and Anti-Money Laundering requirements — risk assessment, SAR review assistance, CIP/KYC testing, and AML program assessment.

Dedicated guidance for companies building their SOX program before IPO — scoping, control framework, gap analysis, and external auditor readiness. AI-native from day one.

Every uploaded document receives a SHA-256 integrity certificate — timestamped proof that evidence has not been altered since collection. Download the certificate for your audit file.

AI analyses your historical audit data to surface repeat findings, control effectiveness trends, testing efficiency improvements, and suggested focus areas for the current year.

Paste walkthrough meeting notes — AI generates process narrative, flowchart, and identifies controls automatically. Big 4 standard workpaper output.

Big 4 standard redboxing — AI identifies exact text passages that support each PCAOB attribute conclusion. Downloadable printable package.

AI-powered detection of potentially forged or AI-generated documents. Flags suspicious patterns including weekend dates, round numbers, and copy-paste artifacts.

SHA-256 cryptographic certificates for every uploaded document. Printable integrity certificate proves evidence has not been altered since upload.

Upload two datasets — AI matches transactions, identifies exceptions, and generates audit-ready reconciliation workpapers with exception analysis.

AI insights from your prior year audit history — repeat findings, control effectiveness trends, and testing efficiency metrics.

New module for Bank Secrecy Act and AML compliance — risk assessment, SAR review, CIP/KYC testing, transaction monitoring, and AML program assessment.

Dedicated page for pre-IPO companies building their SOX program. AI-native from day one — cut Big 4 readiness costs by 70%.

VPC and on-premise deployment options for large organizations. SSO/SAML, SCIM, dedicated tenant, custom SLAs, and white-labeling.

The ERM Agent Pipeline now automatically visualises risk-scoring output as a colour-coded dashboard — a 5×5 risk heat map with numbered risk badges plotted by likelihood and impact, a risk register table with coloured severity badges (Critical / High / Medium / Low) and key-metric cards (Total Risks, Critical, High, Avg Risk Score). It auto-renders from Agent 2 output with no manual steps, and Agent 5 (Board Report) shows the same visual dashboard.

All 12 pre-built analytics use cases now demo instantly without uploading data — click Run Analysis on any use case to see realistic KPIs, severity-rated findings and audit-language narrative immediately. Covers JE Anomalies, Vendor Payments, UAR, Payroll, Three-Way Match, Revenue, Expense, IT Change, Access Provisioning, Bank Reconciliation, Fixed Assets and Contract Review. A "Using sample data" badge clearly marks illustrative output; upload real data to run live AI analysis.

Export any individual agent output or the full pipeline report. PDF gives a clean, print-formatted report with all tables and dashboards; Word (.doc) preserves tables, the risk register and severity badges; PowerPoint (.pptx) is a real downloadable file with one slide per agent, navy headers and risk-register bullets. Export buttons appear on each agent output after completion.

Full narrative, risks and controls now render correctly after generation. Export to Visio (.vsdx) downloads flowcharts as genuine Visio files for editing in Microsoft Visio or draw.io, and a more robust JSON parser handles truncated API responses gracefully.

Classification now retries automatically on timeout — showing "Analysing… (retrying)" instead of an error — which significantly reduces classification failures during high-load periods.

A new Integrations Hub brings live connections to Workday Financials (full connection setup, GL data import with risk flagging, field mapping and MRC testing) and BlackLine (reconciliation data import, close calendar and MRC testing from recon data). Sample-data mode lets you explore without credentials. Eight integrations are shown: Workday, BlackLine, SAP, NetSuite, ServiceNow, Dynamics 365, Okta and Workiva.

A complete visual redesign of the external auditor portal — a navy app shell with a 64px header bar, a 280px sidebar with firm avatar, icon navigation and permission chips, an engagement hero card with a Planning → Fieldwork → Review → Complete progress tracker, workpaper cards with hover effects and colour-coded status badges, and finding cards with severity-driven left borders.

A 14-day free trial is now enforced automatically, with a colour-coded trial countdown banner in the dashboard navigation, automatic emails at 3 days remaining and on expiry, upgrade prompts and a locked-account flow — all backed by full Stripe payment integration.

Compare your audit program against industry peers across six key metrics — audit cycle time, control coverage, findings per audit, remediation rate, cost efficiency and risk coverage — with four CSS comparison charts pitting your program against the industry average. Pick your sector (Technology, Financial Services, Healthcare, Manufacturing, Retail, Energy or Professional Services); benchmarks are based on IIA CBOK 2024.

Configure exactly which email alerts you receive across 13 notification types — findings overdue, control untested, SOX cert due, weekly digest and more — and choose your email frequency: Immediate, Daily Digest or Weekly Only.

A visual Gantt chart for audit engagement planning with colour-coded phases — Planning (navy), Fieldwork (blue) and Reporting (amber). Click any task to edit its details, owner, status and notes, add tasks dynamically (stored in localStorage), and use the today line plus print/export support.

Track audit hours by engagement, team member and activity with a quick time-entry form and weekly timesheet view. Three report tabs — By Engagement, By Team Member and By Activity — give hours-vs-budget tracking with variance analysis, plus CSV and PDF export.

Manage external auditor document requests (Prepared By Client) with 15 sample requests, colour-coded status badges and a full filter bar (status, category, priority, auditor). Upload via a drag-and-drop modal and track submission dates and overdue items.

A consolidated view across all entities in your group — an entity comparison table with risk colour coding, individual entity drill-down views, an Add Entity modal and a risk-aggregation chart by severity.

A standalone token-authenticated portal for management to view and respond to findings — no AssurAI account needed. Management receives a secure link via email, submits their response, remediation plan and target date, and the audit team is notified instantly.

A public security and trust page for enterprise procurement teams — covering encryption, infrastructure, access control and data residency. Includes GDPR, CCPA, IIA Standards and PCAOB compliance documentation, with DPA available on request.

Copy any workpaper to a new engagement period with one click — carrying forward objectives, procedures and prior year conclusions. The new workpaper is created as a Draft with a CF reference, available on every workpaper row in the workpaper list.

An Aging Analysis tab on the findings page — four aging buckets: 0–30 days (green), 31–60 (amber), 61–90 (red) and 90+ (dark red) — plus a full aging table sorted by days open descending. Zero additional API calls: uses existing findings data.

A formal IIA Standard 1130 pre-engagement independence declaration — six conflict-of-interest questions with Yes/No answers, an impairment warning and CAE approval workflow if a conflict is identified, a digital signature with reference number saved to Supabase, and PDF download support.

Auto-prompts to schedule a follow-up when a finding is marked Remediated — set the follow-up date, assigned auditor and verification scope. A Follow-Up Due filter tab shows findings with upcoming follow-ups, and a badge appears on finding cards with scheduled dates.

Time logging now saves directly to Supabase — log entries with date, engagement, activity, hours and notes. A recent entries panel shows the last 10 logged entries, and the resource planning page uses hours-based capacity planning with budgeted vs actual hours, configurable weekly hours and an audit target percentage.

The audit universe database is now fully connected to Supabase — risk-scored audit entities drive annual audit plan generation, with AI risk scoring 1–5 per entity.

A premium, enterprise-grade redesign rolled out across all 16 core pages — cleaner layouts, consistent components and a faster, calmer feel throughout the platform.

Evidence Intelligence now auto-detects Management Review Controls and evaluates five attributes — Performance, Competence, Timeliness, Effectiveness and Documentation — aligned to PCAOB AS 2201 review-precision expectations.

"Save as Workpaper" is now available on every one of the 20+ AI agents — file any AI output straight into the right engagement via the Module → Engagement → Business Process → Section → Workpaper Type hierarchy.

Engagement files are organised by business process — Order-to-Cash, Procure-to-Pay, Record-to-Report, Hire-to-Retire and ITGC — with process filtering and By Phase / By Process views.

Spin up a new 302/906 certification cycle, assign certifiers and track sign-offs to completion.

A complete, animated guided tour of the platform — the fastest way to onboard a new team.

The canonical animated AssurAI logo is now consistent across all 118 pages for one coherent brand experience.

A further 13 pages upgraded to the enterprise-grade UI, completing the premium redesign across the platform.

A rebuilt, searchable user guide covering every feature — getting started, workpapers, findings, Evidence Intelligence, MRC testing, AI agents and Save to Engagement.

Universal save modal for all AI agents — pick module, engagement, business process, section and workpaper type, then Save as Draft or Save & Submit for Review.

SOX engagements are now organised by business process — O2C, P2P, R2R, H2R, ITGC and more — with a process filter, process grouping and a By Phase / By Process ring view.

A visual SOX process map in the SOX module — ELC → O2C → P2P → R2R → H2R → Treasury → ITGC → Financial Close — click a process to filter the relevant AI tools.

Annotate PDF, image, Excel, and CSV evidence. Link marks to test attributes and workpaper sections. Includes templates, split view, and a submit/approve/return review workflow.

Detect journal-entry anomalies with Benford's Law and fraud heuristics (round amounts, unusual times, rare users).

Automate PO/GR/Invoice matching with configurable tolerance thresholds; exceptions flagged and saved as workpaper.

Extract key contract terms from PDF and map them to audit risks automatically.

Accruals and cash-conversion ratios, Benford's Law on reported figures, and a 0-100 earnings quality score.

ITGC gap analysis against NIST CSF, SOC 2, ISO 27001, and PCAOB with a prioritised remediation roadmap.

Validate sustainability disclosures against GRI, SASB, TCFD, and CSRD; traffic-light gap report for assurance readiness.

Find exact and near-duplicate payments across vendor, amount, date, and invoice number with a recovery estimate.

Test transactions and processes against a policy PDF; AI flags every non-compliant item with a policy reference.

Log hours per engagement phase; budget vs actual burn chart with amber/red overrun alerts.

Inventory auditable entities, score by inherent risk, set frequency, and generate a risk-based annual audit plan.

Define and schedule continuous control monitoring rules that run automatically against live data.

Automated weekly digest of engagement progress, open findings, and upcoming deadlines sent to the audit team.

Automated reminder sequence for outstanding PBC requests — escalates to manager if evidence remains overdue.

Submit, approve, or return annotation sets with reviewer comments — full audit trail stored per workpaper.

Test every transaction autonomously, not just samples. Up to 50,000 rows with AI judgment and decision logs.

Upload your existing audit testing plan. AI follows your procedures step by step against uploaded evidence.

Every AI decision traced to specific data points. Fully auditable at every stage.

Top 10 fraud schemes per ISA 240 for any process with likelihood/impact ratings and management inquiry questions.

Formal management response workflow with owners, target dates and closure evidence.

Automatic weekly monitoring of PCAOB, IIA, SEC, ISACA, FRC and FASB updates mapped to your controls.

Compare your GRC metrics against 40+ industry benchmarks across 7 categories.

Gantt timeline, team capacity RAG status, deadline alerts and drag-to-reschedule.

Live presence, comment threads and @mentions on workpapers.

Export in Big 4, PCAOB or standard templates.

Two-factor authentication via Google Authenticator or Authy.

REST API access with key management and rate limiting.

Track AI usage, hours saved and workpaper trends.

Quality score 0-100 against IIA Standards and PCAOB AS 2201.

Full suite of autonomous agents for every GRC use case.

SOX & ICFR, Internal Audit, Risk & ERM, Compliance, BCM & Resilience, Financial Intelligence.

AI-powered document classification, control mapping and workpaper generation.

Chain multiple agents for complex multi-step audit workflows.

Visual process mapping with AI risk overlay.

Expert Big 4 prompts across all 6 modules.

Map controls across 25 regulatory frameworks simultaneously.

AI audit tools inside Microsoft Excel.

Full workpaper lifecycle with sign-off workflow.

Request portal with auditor access — no login required for clients.

Key risk indicator tracking and continuous monitoring.

SAP, Oracle, Workday, Okta, ServiceNow and more.