All industries

Audit & Compliance

Audit tests a sample. Agents test the population.

“We used to test twenty-five transactions and call it assurance. Now we test all of them.”
Director of internal audit · 2,400-person group
Agent 01

The Knot Finder

Holds the whole company as one graph and raises the knots: a spouse in the reporting line, a partner in the pay path, a vendor on the payroll.

Worker multiplier10×Tests every line, every night. Audit used to sample once a year.

How it works

The loop: Wakes on every people event, and once a night. Reads mirrors of the HRIS, payroll, benefits, expenses and the vendor master, bank details hashed at the source. Joins and rules first, the model only on the ambiguous records. Ties a knot with its evidence and a drafted memo. Your head of internal audit decides.

What it needs:

  • Read: mirrors of the people systems, never the systems
  • Write: the case file only
  • Owner: your head of internal audit
  • A surname alone never raises; every dismissal signed
  • Daily spend cap, every read logged

Walk the graph with it

Agent 02

The Access Reviewer

Works the quarterly access review before anyone opens a spreadsheet: who changed roles and kept the old rights, whose admin account went quiet months ago.

Worker multiplierReconciles every entitlement, not the sample managers rubber-stamp.

How it works

The loop: Runs on the review calendar, and again on every role change. Reads the identity provider, the ERP role tables and the sign-in logs. Rules first, the model only on the grants nobody can explain. Posts each manager a short list with the dormant and conflicting rights already marked. A named manager approves every revocation.

What it needs:

  • Read: the identity provider and the ERP role tables
  • Post: the reviewer worklist, evidence attached
  • Owner: your IT audit lead
  • It proposes revocations. It never revokes
  • Per-run spend cap, every read logged
Agent 03

The Evidence Puller

Works the external auditors' request list: finds the invoice, the contract and the approval behind each item, and builds the pack with every source attached.

Worker multiplierPulls every item on the list, sourced, while the team sleeps.

How it works

The loop: Wakes when the request list arrives. Reads the ledger, the contract store and the document archive. Matches each request to its evidence, cheap lookups first. Assembles the pack and says plainly what it could not find. Your controller reviews before anything leaves the building.

What it needs:

  • Read: the ledger, contracts and the document archive
  • Write: the audit pack folder, nothing else
  • Owner: your controller
  • Nothing reaches your auditors unless a person sends it
  • Per-request spend cap, every pull logged

All three read mirrors of systems you already run, and all three write paperwork. None of them can change a record, revoke an access, or send a file to your auditors.

The multiplier lands as coverage: the same team tests the population instead of a sample, and still closes the year on time.

An example scenario. The multipliers are estimates. Your real numbers come from the Readiness Map.

Get your real numbers

Live Demo · Agent 01

Two thousand people. One graph.

Not a video of the Knot Finder. The Knot Finder. A whole software company drawn as one graph, the org chart on top and the households underneath it, from the HR, payroll, benefits and vendor data you already hold. Zoom in on anyone, open the three knots it tied overnight, and catch the fourth before it lands on Monday.

It reads a mirror of the people systems and writes paperwork. It cannot change a reporting line, hold a payment, or contact an employee: that permission does not exist, so it cannot be misused. Bank details arrive hashed, a surname alone never raises anything, and every dismissal carries a name and a reason.

The Real Numbers

Enough ranges. Get your number.

Every number on this page is an estimate, because every company is different. The Readiness Map makes it exact: your workflows, your multipliers, your first agents, with names and owners.

Book the call