Internal audits moved from spreadsheets and email to one platform
Internal audits ran on spreadsheets, emails and shared folders, so evidence was hard to find and follow-up depended on memory. AuditVault Pro puts the whole audit in one place, from plan to report.
From our own project and product work. Client names and identifying details are removed, and some figures are rounded.
The situation
Internal audits were run with spreadsheets, emails and shared folders. Files and evidence were spread across many places. Managers could not quickly see which audits were late or which findings were serious. Follow-up depended on someone remembering to chase it, reports took manual copying, and there was no clear record of who changed what.
What we built
AuditVault Pro, part of the CompliBear family, is a web application where the whole audit happens in one place.
- Roles. Admin, auditor and auditee each see only what they need.
- Audit tracking. Each audit moves through planning, fieldwork and reporting, with due dates and progress.
- Findings. Each issue is logged with a severity, an owner and a status.
- Evidence. Uploaded into ready-made folders, such as audit planning, IT controls and legal compliance.
- Compliance. Requirements tracked against six frameworks, including ISO 27001 and SOX.
- Insights. The system points out overdue audits and low completion on its own.
- Reports. Six PDF reports in one click, including an executive summary.
- Audit trail. Every login, upload and change is recorded and can be exported.
In numbers
| Feature | What it gives |
|---|---|
| Modules | 10 in one application |
| Roles | 3, each with its own access |
| Compliance frameworks | 6 built in |
| Reports | 6, each in one click |
| Severity levels | 4 |
| Evidence folders | 20+ ready-made |
| Actions logged | 100% of logins, uploads and changes |
| Audit plan setup | Loaded from one Excel file, no retyping |
What changed
- One place for the audit. Plan, evidence, findings and reports live together.
- Late items show themselves. Nobody has to remember to chase.
- A record people can trust. Every action is logged, which is the heart of audit work.
The screens are built in React, with a Python backend and a PostgreSQL database, and the product can be set up for any client.
Products and services
The Audit Suite brings analytics into internal audit. See audit effort and CompliBear.