New: Standard Requirement Lists. Stop retyping the same client document list for every audit. See how it works

Security & controls

Your clients trust you with their records. You should be able to trust where they live.

Audit Assistant is built around clear boundaries: between firms, between roles inside your firm, and between your internal work and what clients can see.

01 Separated firm spaces
02 Role-based access in your firm
03 Controlled client visibility

Tenant separation

Each firm works in its own separated space. One firm's engagements, clients and documents are not visible to another.

Roles & permissions

Your firm admin decides what partners, managers, reviewers and team members can view and change.

Internal stays internal

Audit Programs, rules and staff-only process notes and attachments are never exposed through the client portal.

Deliberate client requests

Requirements reach a client only when a team member reviews and sends them. Nothing is sent automatically.

Activity trail

Review activity, observations and comments remain connected to the work they relate to.

Locked closed assignments

Once an assignment is closed it can be locked, protecting completed work from later changes.

Two-factor sign-in

An extra verification step at login, on top of each user's password.

User controls

Admins can add, modify or flag users and change access as people join, move or leave.

Who sees what

A clear line between your firm and your client.

Inside the firm, access follows the roles your admin configures. The client line is fixed.

InformationPartnerManager / ReviewerAudit TeamClient
Audit Programs & rulesPer rolePer rolePer roleNever
Staff-only process notes & attachmentsPer rolePer rolePer roleNever
Engagement workspace, evidence, reviewPer rolePer roleAssigned workNever
Requests sent to that clientPer rolePer roleAssigned workTheir own requests only
Firm reports & analyticsPer rolePer rolePer roleNever
Hosting, backups & compliance

The details your IT team will ask about.

We publish only what we can verify. For anything not listed here, ask us during the demo and we'll answer in writing.

Request security information
Professional reviewing and signing documents
Hosting region & provider
[to be confirmed]
Backup frequency & retention
[to be confirmed]
Encryption in transit / at rest
[to be confirmed]
Certifications
[only if obtained]
Data processing agreement
[link when ready]

Walk through access and visibility with us, using your own firm structure.

Book a Demo