Tools & products
Fourteen tools, built by auditors and risk managers for their peers: from a free self-scan of your audit function to the accountability of an entire municipality. One portal, hosted in Germany (EU).
Tools for the internal audit function: planning, execution, quality assessment and follow-up. Want to know where you stand first? Start with the free self-scan.
From audit universe and risk-based annual plan to file review and reporting to the audit committee. Six steps in one environment, with AI built in and hosted in the EU.
Self-assessment and preparation for the external quality assessment (EQA) against the Global Internal Audit Standards. Score each standard, record evidence and see the result per principle.
Track findings and improvement actions with owner, deadline and progress. Every status change is kept in a full audit trail, with a separate overview for management and oversight.
One structured workflow per audit: risk inventory, standards framework, work programme, findings and final report. An AI assistant contributes at every step and you decide per proposal.
Reconstructs from an export of your source system how a process actually ran and tests it against the design. Eight control tests on the full population, with a frozen definition per test run.
Tools to map risks together with management and keep sight of models, spreadsheets and AI agents.
Interactive risk matrix with heat map, radar chart and risk register in one environment, linked to controls and findings. The cockpit shows which high risks still have no control in place.
The voting mode of Risk Heat Map: participants vote anonymously by QR code on their own phone. The facilitator runs the session from the cockpit while the room sees the results live on the projector.
Register spreadsheets, calculation models and AI applications, rate them by risk and record how they are controlled. Owners confirm their accountability via a magic link, with signed ownership.
Fifty requirements across six domains: identity, mandate, human intervention, evidence, reliability and accountability. The privacy of the data the agent processes is assessed as well.
Tools for laws and regulations: NIS2 and the Dutch Cyber Security Act, the GDPR, and the accountability reports of a municipality.
ENSIA, privacy, lawfulness, efficiency and AI as separate tracks, with one shared layer of measures and evidence underneath. Prove it once, cover several accountability reports.
Transparency portal for clients and CISOs: security posture, ISAE 3000 compliance, uptime and architecture overview.
Check in a short self-scan how far your organisation is with NIS2 and the Dutch Cyber Security Act. You get a gap analysis per measure on the CRAFT standards engine and a worked-out action plan as follow-up.
Processing register, DPIAs and data breach log in one place. A compliance meter based on magic-link questionnaires shows where your organisation stands against the GDPR.
Supplier register with tiering and a dependency graph down to subcontractors. The Register of Information export refuses a half-empty file, and you assess supplier assurance reports in the same environment.
Hosted in Germany (EU) under the GDPR. Your organisation's data is kept separate from that of other organisations and encrypted in transit and at rest. A data processing agreement is available on request.
Schedule a demo or request access. We will show you the tool starting from your own question, not from a standard presentation. You license the tools per app, from € 750 per user per year (or € 75 per month), including the reporting duty with reporting clock (Incident), the asset register (Asset) and contract management.