DOCUMENT VAULTHow we work with you on documents

Three modes. Your choice. Version-controlled either way.

Pre-audit readiness is a multi-month relationship. You need a way to keep your document set current without re-uploading the same file every week. Pick the mode that fits your existing workflow — we recommend the Master vault for engagement-long work, but Connected folder and Upload-each-run are equally first-class.

The three modes

Master vault (we host)

Single source of truth, with full version control and audit trail.

Recommended

Auditus.ai is the canonical document store for the engagement. Every file lives in your vault, every change is versioned, every action is logged with timestamp and user. Your audit firm pulls a single, authoritative export when fieldwork starts — no chasing emails or hunting through SharePoint folders. This is the model audit firms expect for engagement-long work.

How it works

✓Upload once; every replacement creates a new version (v1 → v2 → v3) with the prior versions retained.
✓Every change is logged: who replaced the file, when, file-size delta, hash change.
✓Each document carries a status (Draft / In review / Approved / Superseded) you control.
✓Daily or weekly digest emails summarize what changed (configurable per-user).
✓Audit firm receives a single, signed, time-stamped export when fieldwork begins.
✓Data is encrypted at rest and in transit; stored in Canada (ca-central-1) by default.

Trade-offs

·Highest setup effort: you upload your file set once at the start of the engagement.
·Requires a permissioned user list — admin manages who can replace what.
·Your audit firm needs to onboard to the platform to receive the export (single sign-in).

Best for: Reporting issuers and IPO candidates running an engagement-long readiness program. The default for paying customers.

Auditor view: Audit firms strongly prefer this model. A signed, version-controlled, time-stamped vault eliminates the email-and-spreadsheet handoff that drives most audit-fee overruns.

Connected folder (point to your storage)

We watch your existing SharePoint, Google Drive, Box, or Dropbox folder. No re-upload.

If you already have a mature document management system (SharePoint, Google Drive, Box, Dropbox, OneDrive), connect it once and Auditus.ai reads from where your team already works. We index file names, modified dates, and content hashes — no files leave your storage unless we need to process them for an assessment. Changes are picked up automatically.

How it works

✓OAuth-connect your folder (SharePoint, Google Drive, Box, Dropbox, OneDrive supported).
✓We index file names + modified dates + content hashes; the files stay in your storage.
✓We fetch on-demand when an assessment runs — files are not persistently copied.
✓Version history is whatever your storage provider tracks (SharePoint history, Drive revisions, etc.).
✓Activity log records what we pulled, when, and which assessment used it.
✓Daily / weekly digest emails describe what changed in your folder.

Trade-offs

·Version history depends on your storage provider — if they don't keep it, neither do we.
·If a file is renamed or moved, the checklist link can break until you re-map it.
·Permission boundaries are whatever your OAuth scope grants — usually fine, but worth checking.
·Data residency follows your storage provider (e.g., SharePoint can be configured to Canada).

Best for: Larger issuers with an established data room or document management platform; teams that don't want a second source of truth.

Auditor view: Workable when the underlying storage is well-governed. The audit firm will ask to see your storage provider's audit log alongside ours.

Upload each run

Drop files when you want an assessment. We don't persist anything between runs.

No persistent state on our side beyond the active assessment. You upload your files, we generate the assessment, you download the report — and the files are purged. Fastest path to a point-in-time readiness check. No version control, no longitudinal view, no change-tracking. Useful for the free pulse and for one-off audit-readiness checks where the issuer prefers we hold nothing.

How it works

✓Upload your files into the assessment workspace.
✓We run the readiness check and produce the report.
✓You download what you want; files are purged at the end of the session (or after 24 hours, whichever first).
✓No version history, no change log between sessions.

Trade-offs

·Every run starts from scratch — re-upload everything you've changed since last time.
·No way to see what changed between runs except by comparing reports manually.
·Audit firm cannot pull a vault export from us; they receive whatever you forward.
·Recommended only for the free pulse or ad-hoc checks, not for engagement-long work.

Best for: Free-pulse users and one-off readiness checks where the issuer doesn't want us to hold any files between runs.

Auditor view: Not suitable for engagement-long work — the auditor needs a versioned record. Useful only for the very early 'where do we stand?' question.

VERSION CONTROL

Every version preserved. Every change logged.

When you replace a document, the prior version isn't overwritten — it becomes v(n-1). The vault retains every version with full provenance: who replaced the file, when, file-size delta, and the user's note. Your audit firm pulls the version history during fieldwork to confirm the file they tested is the file you produced.

Example — version history for one document

Final trial balance (locked)

TB_FY2025_locked_v3.xlsx· 192.7 KB· Daniel Tremblay· May 21, 2026, 03:42 p.m.

Q4 accrual adjustments posted; tied to the GL.

TB_FY2025_locked_v2.xlsx· 180.2 KB· Priya Patel· Apr 30, 2026, 11:08 a.m.

Intercompany eliminations re-run; correctional entries.

TB_FY2025_initial.xlsx· 174.7 KB· Daniel Tremblay· Apr 15, 2026, 09:30 a.m.

Initial trial balance after period close.

ACTIVITY FEED

Daily or weekly digest. Or stream the feed in-app.

Every action in the vault is logged. Subscribe to the daily or weekly email digest, or pull the activity feed any time. Each event records actor, document, version delta, and a one-line summary in plain English.

Example — activity feed (recent events)

🔁
Daniel Tremblay — Replaced final trial balance — v2 → v3 (+12.8 KB)
May 21, 03:42 p.m.
📥
Priya Patel — Uploaded IFRS 16 lease register (v1)
May 21, 02:18 p.m.
✅
Maya Chen — Approved MD&A draft for audit-committee review
May 21, 01:55 p.m.
💬
James O'Neill — Comment on ICFR narrative: "Q3 cutover walkthrough still pending IT lead sign-off."
May 21, 11:30 a.m.
🔒
Daniel Tremblay — Checked out GL extract for journal-entry tagging
May 21, 09:12 a.m.
📤
Auditus.ai (system) — Generated weekly digest email (12 recipients)
May 20, 05:05 p.m.
🏷️
Sasha Kim — Status: Draft → In review
May 20, 04:40 p.m.

Digest cadence (your preference)

Off

No digest emails. Use the in-app activity feed instead.

Daily

One email per day summarizing every change in the last 24 hours: new uploads, replacements, status changes, comments.

Weekly

One email per week with a rolled-up summary plus the current readiness score and outstanding-gap list.

REPORTS YOU CAN PULL

Eight artifacts, on-demand.

Pull a current readiness scorecard, the outstanding-gaps list, the full document index, the per-document version history, the activity log, an audit-committee one-pager, the auditor-ready PBC package, or a rolling change summary — any time. Formats are designed for the audience: PDF for executives, CSV for the audit firm, ZIP for the PBC handoff.

Readiness scorecard

pdf

Point-in-time scorecard: overall readiness, sub-scores by category, missing-doc count, gaps by severity, illustrative audit-fee impact. Branded, dated, signed.

Audience: Internal — CFO, controller, audit committee chair.

Cadence: Refresh on every assessment run; archive monthly.

Outstanding-gaps list

pdf

Every required document still missing, plus every conditional document that may apply, with the cited standard for each. Sorted by severity.

Audience: Internal preparation team — the to-do list.

Cadence: Weekly through the engagement; daily in the four weeks before fieldwork.

Full document index

csv

Every document in the vault: ID, name, category, requirement (required / conditional / recommended), cited standards, current status, current version, current uploader, last modified.

Audience: Internal audit team, audit firm at handoff, audit committee.

Cadence: On-demand; pre-fieldwork it's the master inventory.

Version history (per document)

csv

Every version of every document: docId, version number, replaced-by user, replaced-at timestamp, file-size delta vs. prior, hash delta. Full audit trail.

Audience: Audit firm — they pull this during fieldwork to confirm the file they tested is the file you produced.

Cadence: Pulled at engagement start, mid-engagement, and pre-report sign-off.

Activity log (audit trail)

csv

Every action in the vault, timestamped: uploads, replacements, status changes, comments, check-outs, sign-offs, exports. Filterable by user, date range, document.

Audience: Internal SOX / NI 52-109 evidence; audit firm for control-walkthrough testing.

Cadence: Always available; exported for SOX / NI 52-109 binders annually.

Audit committee one-pager

pdf

Executive summary for the audit committee meeting: readiness score trend (4 quarters), critical / high gap counts, what's been remediated since last meeting, what's outstanding.

Audience: Audit committee chair, board members.

Cadence: Before each audit-committee meeting (quarterly).

Auditor-ready PBC package

zip

Pre-formatted handoff package the audit firm pulls at the start of fieldwork: every approved document, organized by category, with the document index, version history, and activity log included.

Audience: Your audit firm. The first thing they pull when fieldwork begins.

Cadence: Once at start of fieldwork, refreshed if material updates land mid-engagement.

Change summary (last N days)

pdf

Rolling summary of every change in the last 7 days (configurable): new uploads, replacements with size deltas, status changes, comments. Same format as the daily / weekly digest email.

Audience: Anyone who missed the daily / weekly digest email.

Cadence: On-demand.

Start with the readiness check.

Run the free pre-audit pulse to see the size of your gap. When you sign up, the vault mode picker is the first thing you set — pick Master, Connected, or Upload-each-run, and the rest of the workflow follows.

Run the free pulse →See the auditor's process