GRC software for audit management, I to Z:
31 providers with AI classification.
In short: Part 2 of 2 of the Audit management category: full entries for 31 of the 61 providers, alphabetically from I to Z, as of 18 October 2026. Of these, 28 document specific AI functions (90%). In Germany, Austria or Switzerland, eight have a documented headquarters, all of them in Germany.

Neither completeness nor a general suitability for banks is claimed. Providers are listed alphabetically. The order is not a performance rating.
All 682 GRC providers in the market overview · 379 European GRC providers · Audit management category page (61)
Publisher: T-NEX GmbH. Andreas Unruh and Christoph Gembruch are managing directors of T-NEX. This editorial market overview is based on vendor sources and specialist primary sources. It contains no ranking and is not based on a joint product test. The market overview covers 682 providers from GRC and adjacent specialist areas. Acquired brands and former product names are not counted separately. Methodology and sources
Context, figures, review questions and the regulatory framework are on the Audit & audit management category page.
Entries from I to Z: functions, AI classification and sources.
The assignment describes the offering considered, not all of the company's products. AI information names specific functions or limits of the public documentation. Scope of delivery, data storage and regional availability must be checked for each offering. Download provider overview as CSV (German), licensed under CC BY 4.0, credit “T-NEX GRC-Anbieterregister, t-nex.de”.
Is a provider missing or an entry out of date? Send us a note with a source via the contact form. Accepted changes are marked in the entry with the date they were checked.
31 providers
Missing evidence does not mean that the provider has no AI functions. Vendor documentation does not replace a product test. Licence, pilot status and availability are listed with the provider. Unchecked locations are hidden in a regional selection; this does not mean they are regarded as non-European. The location is not evidence of ownership structure, hosting or regulatory suitability.
There is no entry for this combination. Try another keyword or reset the filters.
Audit & audit management: I to Z
31 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| ibo Software · Product: ibo QSR / ibo Audit Follow-up / ibo Iris (S-OHB) · Headquarters: Germany [1] · The legal notice names ibo Software GmbH, Im Westpark 8, 35435 Wettenberg (Amtsgericht Gießen, HRB 1457); no statement on hosting or owners. · ibo Software GmbH; ibo Gruppe; ibo.de; ibo QSR; ibo QSR Risk; ibo QSR-WebInfo; ibo Audit; ibo Audit Follow-up; ibo Iris; ibo S-OHB; ibo Athena; nicht ibi systems iris | Documented focus: ibo QSR supports internal audit from risk-based multi-year planning with calculation of audit capacity and resource matching, through workflow-driven audit execution with digital audit files, to findings, measures and reports. ibo Audit Follow-up tracks measures and deadlines, also for compliance and appointed officers, and can be used without ibo QSR. The organisational handbook ibo Iris, offered to savings banks as ibo S-OHB, maps the written rules of procedure. | AI functions and classification: ibo QSR has offered AI suggestions since version 25.2, for example for findings and measures, help with summarising and rephrasing, and chat functions; according to the vendor, professional review by the users is essential. In the AI chat ibo Athena, employees query released processes, organisational structure data and documents from ibo Iris in natural language; the answers are to be checked against the authoritative content.[2] [3] [4] [5] [6] [1] · Specific AI functions documented Draft findings · Suggest measures · Summarise and rephrase texts in audit work · Query processes and documents in the organisational handbook (beta) AI evidence: [5] [6] · QSR functions from version 25.2 (since October 2025) can be activated optionally; selection, operation and contract of the AI service (OpenAI API, Azure OpenAI Service or local models) rest with the customer. ibo Athena has been in beta since version 2026.1 (May 2026), with trials by arrangement; the handling of individual access rights is not yet conclusively settled. Source check: 2026-10-18 |
| IBS Schreiber · Product: CheckAud · Headquarters: Germany [7] · The legal notice names IBS Schreiber GmbH, Zirkusweg 1, 20359 Hamburg, registered at Hamburg Local Court under HRB 60790; no statement on hosting or owners. · IBS Schreiber GmbH; ibs-schreiber.de; Easy Content Solution (ECS); CheckScan | Documented focus: CheckAud audits SAP systems on the basis of locally exported snapshots without installation in the SAP system and analyses roles, authorisations down to field level and system parameters, including segregation-of-duties conflicts with risk scores, can-do and did-do analyses and snapshot comparisons. The vendor supplies standard rule sets, for example on DSAG, GDPR and SOX, states certification under IDW PS 880 and describes CheckAud as a detective complement to preventive GRC systems. | AI functions and classification: The product page, use-case booklet, flyer and 2026.1 release article document no specific AI work step in CheckAud. General AI articles by the vendor, the description as intelligent software and automated rule-set checks are not sufficient as evidence.[8] [9] [10] [11] [12] [7]Not specifically documented in the source check Product page, booklet, flyer, 2026.1 release article and AI-related vendor pages read; full release notes only in the customer and partner area. AI articles, seminars and the statement “optionally AI-supported” for the S/4HANA Compliance Pack consulting package name no CheckAud function. Sources checked: [8] [9] [10] [11] [12] · No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-18 |
| Intemic · Product: Intemic AI Agents · Headquarters: Spain [13] · Platform privacy policy names Intelligent Chemistry, S.L., CIF B72532692, with registered office in Sant Cugat del Vallès, Spain. The public start-up directory of the Catalan business location agency confirms the assignment. · Intelligent Chemistry, S.L.; Intelligent Chemistry SL; Intemic AI Agents | Documented focus: Intemic connects enterprise systems and documents for compliance, audit and quality processes. The platform prepares evidence packages, deviation reports, supplier dossiers and recurring regulatory evaluations for subject-matter approval. | AI functions and classification: AI agents read and consolidate data from ERP, QMS, document repositories and other sources. They create audit documentation with source references, support root cause analyses and draft corrective and preventive actions. Responsible persons review and approve the results.[14] [13] [15] · Specific AI functions documented Consolidate audit evidence · Draft audit documentation · Support root cause analyses · Draft corrective actions · Prepare supplier dossiers AI evidence: [14] [13] · Platform offered with customer-specific integration and phased implementation. Privacy notices confirm external language model processing but still contain open information on model providers, subcontractors and processing locations; clarify these before procurement. Source check: 2026-10-15 |
| Irame Tech · Product: Intelligent Risk Auditor (IRA) · Headquarters: India [16] · Irame Labs Private Ltd, registered office New Delhi; CIN U22300DL2019PTC350901. Additional corporate office in Gurgaon. · Irame Labs Private Ltd; IRAME.AI; Intelligent Risk Auditor; IRA | Documented focus: Software for data analytics, internal controls and audit automation. Reusable controls, evidence packages and exception tracking support internal audit and ongoing monitoring. | AI functions and classification: The AI agent IRA interprets natural-language audit instructions, maps data fields and analyses ERP exports and documents. Analysts can review and adjust processing steps and save them as reusable control tests.[17] [18] [16] · Specific AI functions documented Analyse audit data in natural language · Map data fields · Create control tests from analyses AI evidence: [17] [18] · Commercial offering with demo and customer-specific implementation. Published case study references are in some cases still marked as available in future. Source check: 2026-10-15 |
| Litmus · Product: LENS / SCOUT / PEN / CHECK · Headquarters: United Arab Emirates [19] · Privacy notice names Litmus AI Labs Software Designing L.L.C, registered in Abu Dhabi, UAE. · Litmus AI Labs Software Designing L.L.C | Documented focus: Specialised software for internal audit and assurance: document research, risk-based audit planning, findings, reports and follow-up. | AI functions and classification: AI reads policies, procedures and earlier audit reports, answers questions with document and page references and shows contradictions. It drafts audit plans and reports from reviewed findings; approvals remain with auditors.[20] [21] [19] · Specific AI functions documented Search audit documents with sources · Detect contradictions and control gaps · Draft audit plans and reports AI evidence: [20] · Commercial offering with product demo and own, managed or isolated deployment. Published sample outputs are explicitly based on synthetic demonstration documents. Source check: 2026-10-15 |
| LOKIQ · Product: NORMARIS · Headquarters: Germany [22] · Product page names LOKIQ GmbH in Munich, HRB 310574, and explicitly names NORMARIS as its own product. · LOKIQ GmbH; NORMARIS; Normaris | Documented focus: NORMARIS is aimed at internal audits of IFS broker companies. The product is intended to bring existing evidence, audit notes, gap indications and draft reports together in one workflow. | AI functions and classification: The announced AI supports the mapping of evidence to audit requirements, points out missing or unclear documents and formulates draft reports. Subject-matter assessment and approval remain with the auditors.[22]Announced or in development Map audit evidence · Detect documentation gaps · Draft audit reports AI evidence: [22] · Validation phase before the general launch: free practice-partner tests with early access are offered. Therefore conservatively listed as announced; no general market availability assumed. Source check: 2026-10-15 |
| MindBridge · Product: MindBridge AI / Transaction Risk Analytics · Headquarters: Canada [23] · MindBridge Analytics; MindBridge AI; Ai Auditor; Transaction Risk Analytics | Documented focus: MindBridge analyses financial transactions to support financial statement audits, internal controls and the monitoring of financial risks. The platform assesses transactions on the basis of combined audit characteristics and makes unusual patterns visible. Audit and finance teams can investigate conspicuous entries in a targeted way and incorporate the results into their risk-based audit planning and control work. | AI functions and classification: MindBridge combines machine learning with statistical methods and rules in order to detect unusual transaction patterns and prioritise financial risks for audits. Not every individual control point is therefore itself an AI method.[24] [23] [25] · Specific AI functions documented Detect unusual patterns in financial transactions · Prioritise transaction risks for audits AI evidence: [24] · Documented by the vendor; use in audit and control workflows. No product test. Source check: 2026-10-14 |
| NCS SoftSolutions · Product: eTHIC · NCS SoftSolutions; eTHIC | Documented focus: Digitalises audit and compliance processes, in particular for banks and insurers. Configurable checklists, data analytics and audit frameworks are combined with industry-specific audit modules. | AI functions and classification: For eTHIC C-Life, NCS describes AI for evaluating supplier due diligence, highlighting contract risks and supporting supplier assessments.[26] · Specific AI functions documented Evaluate supplier due diligence data · Highlight contract risks · Support supplier assessments with AI AI evidence: [26] · Documented by the vendor for eTHIC C-Life; no product test. Source check: 2026-10-14 |
| nextAudit · Product: AuditCloud / KIRA · Headquarters: Germany [27] · nextAudit GmbH, Aachen, HRB 23192, Amtsgericht Aachen. · nextAudit GmbH; nextAudit UG; AuditCloud; KIRA | Documented focus: Audit management for planning, execution, findings, actions and reports. KIRA supports the evaluation of existing audit information. | AI functions and classification: KIRA detects similar findings across areas and languages, suggests actions and maps findings to requirements. Earlier audit data feeds into the current audit.[28] [29] [27] [30] · Specific AI functions documented Detect similar audit findings · Suggest actions · Map findings to requirements AI evidence: [28] [29] · KIRA is offered with a demonstration; a vendor report from September 2024 already describes its use in audits. Confirm the specific functional scope in the AuditCloud offering. Source check: 2026-10-15 |
| OP.Serv (ROK Solution) · Product: ROK Risk · Headquarters: France [31] · ROK Solution; ROK; ROK Risk; OP.Serv | Documented focus: ROK Risk supports the preparation, execution and evaluation of internal audits as well as the subsequent tracking of actions. Dynamic risk maps and key figures supplement the audit workflows. The solution is part of a platform for process automation and access rights management, which allows audit tasks to be linked to roles and organisational responsibilities. | AI functions and classification: ROK Solution describes AI support for creating audit processes and risk reference frameworks in its no-code platform. Users describe their requirements; configurable process drafts are generated from them.[32] [33] [31] · Specific AI functions documented AI-supported drafting of audit processes · Creation of risk reference frameworks AI evidence: [32] · AI support for no-code configuration documented by the vendor; adaptation to own workflows required. No product test. Source check: 2026-10-14 |
| Oxus · Product: Oxus Internal Audit Platform · Headquarters: USA [34] · The active accelerator profile names San Francisco; the privacy policy refers to the provider as Oxus AI, Inc. Not to be confused with Oxus Acquisition Corp. · Oxus AI; Oxus AI Inc.; Oxus, Inc. | Documented focus: Oxus links audit planning, process documentation, control tests and reporting for internal audit and SOX teams. The platform manages evidence, risk control matrices, working papers and the tracking of identified deficiencies. | AI functions and classification: The AI creates process descriptions and flowcharts from walkthrough recordings, tests controls against evidence and prepares audit reports. The evaluation of SOC reports and the mapping to user-side controls are also documented. Auditors retain review and approval.[35] [36] [34] · Specific AI functions documented Create process documentation from walkthroughs · Test controls on the basis of evidence · Evaluate SOC reports and document findings AI evidence: [35] · Specific product modules and demo access documented. The accelerator profile mentions the onboarding of early customers; the contractually available module scope needs to be confirmed. Source check: 2026-10-15 |
| Petual · Product: Petual SOX Testing · Headquarters: USA [37] · The privacy policy explicitly names the headquarters in San Francisco, California, USA. · Petual Inc.; Petual AI | Documented focus: Petual supports companies and audit firms with SOX and internal control testing. The starting point is existing risk control matrices, test procedures and evidence; results and deviations are brought together in working papers for review and remediation. | AI functions and classification: AI agents read and structure evidence, map it to controls and samples and perform defined test procedures. The vendor describes annotated evidence, the examination of complete data populations and the highlighting of conspicuous matters. Human review remains part of the workflow.[38] [37] [39] · Specific AI functions documented Map evidence to controls and samples · Perform defined control tests · Prepare working papers and deviations AI evidence: [38] · Vendor offers demo and control tests on request; specific workflows are described. Confirm licence, integration and deployment scope before procurement. Source check: 2026-10-15 |
| proISMS · Product: proISC@ · Headquarters: Germany [40] · proISC@; proISMS GmbH | Documented focus: proISC@ supports the planning, execution and documentation of information security audits. The application organises audit criteria and audit topics, takes qualifications into account when putting together the audit team and records findings during the audit. Audit reports and deficiency lists are produced from these. Own criteria catalogues can be imported; named areas of use include ISO 27001, IT-Grundschutz, KRITIS and TISAX. | AI functions and classification: The product and company pages checked describe guided audit workflows, audit bases and report documentation. A specific AI work step within proISC@ is not documented in this scope of sources.[41] [40] [42] [43]Not specifically documented in the source check Product page, company page and targeted AI search checked. Standardised answers and planned benchmarks alone are not evidence of an AI function. Sources checked: [41] [43] · AI availability cannot be determined within the scope of public sources checked. No product test. Source check: 2026-10-14 |
| PwC Deutschland · Product: KIRA (Knowledge IntegRation Assistant) · Headquarters: Germany [44] · PwC; PwC Deutschland; PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft; KIRA; Knowledge IntegRation Assistant; KIRA as One | Documented focus: KIRA is SaaS audit software offered by PwC Germany for internal audit and compliance. Users upload documents, select predefined or their own checklists and receive analyses with source references. The solution supports design audits, document-based control tests, service provider monitoring and self-assessments. A central directory of own use cases enables the repeated use of defined work programmes. | AI functions and classification: KIRA analyses documents on the basis of customisable audit programmes, extracts relevant information and compares requirements with policies or control evidence. The AI creates suggested answers and summaries and flags deviations with reference to the source document. Control tests presuppose existing documented evidence.[45] [46] [44] · Specific AI functions documented Analyse documents on the basis of audit checklists · Compare policies with regulatory requirements · Check control evidence on a document basis · Summarise audit reports and highlight deviations AI evidence: [45] · Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| QualityReady · Product: QualityReady Auditmanager · Headquarters: Germany [47] · QualityReady UG (hb); QualityReady Auditmanager | Documented focus: QualityReady offers browser-based software for audit planning, execution and action tracking. Own and predefined questionnaires support internal and external audits as well as self-assessments. Findings, responsibilities and deadlines remain linked in the same system. The Auditmanager adds draft reports, assessment suggestions and support in reviewing submitted corrective actions to this workflow. | AI functions and classification: The Auditmanager uses Azure OpenAI for audit reports from answers and notes, assessment suggestions for audit questions, mapping of deviations and reasoned assessments of submitted actions. Those responsible in the specialist areas can use the suggestions for their decisions.[48] [49] [47] · Specific AI functions documented Draft audit reports from answers and notes · Assess audit questions on the basis of comments · Map deviations to audit questions · Assess actions with reasoning AI evidence: [49] · Vendor describes the functions as productive; connection via Microsoft Azure OpenAI, named on the page as GPT-4o. No product test. Source check: 2026-10-14 |
| Regulatory Intelligence Compliance Solutions · Product: GAIA and GAIA | RIA · Headquarters: USA [50] · The vendor website names Regulatory Intelligence Compliance Solutions Inc. and a contact address in Ramsey, New Jersey. RICS, GAIA and GAIA | RIA are combined in one entry. · RICS; Regulatory Intelligence Compliance Solutions Inc.; Global Artificial Intelligence Auditor; GAIA; GAIA RIA; GAIA | RIA | Documented focus: Regulatory Intelligence Compliance Solutions develops software for compliance audits and financial market compliance. GAIA | RIA targets the planning, execution and documentation of annual compliance reviews at US investment advisers. | AI functions and classification: The specific product announcement describes AI for planning and conducting the Annual Review and for documenting the results. For GAIA | RIA, human control steps are explicitly named; product access is still listed as Early Access.[50] [51] [52] · Specific AI functions documented Plan compliance reviews · Perform audit steps with AI support · Document Annual Review results AI evidence: [52] [51] · Early access programme since January 2026, extended according to an announcement of 8 July 2026 and already used by early access customers. General availability not documented. No blanket promise of fully autonomous or legally binding correct audits. Source check: 2026-10-15 |
| RINA · Product: ADAM by RINA · Headquarters: Italy [53] · RINA S.p.A., headquarters Via Corsica 12, Genoa; company register and VAT no. IT03794120109. · RINA S.p.A.; ADAM by RINA; ADAM | Documented focus: Browser-based platform for internal ISO audits: audit plan, documents, checklists, interviews and report with gap analysis. | AI functions and classification: ADAM generates questions from the uploaded documents, searches for answers with source locations and flags gaps. Asynchronous interviews supplement the evidence; the report structures conformity status and missing elements.[54] [53] · Specific AI functions documented Create audit checklists from documents · Map evidence and gaps · Prepare audit reports with gap analysis AI evidence: [54] · RINA describes ADAM as operational and tested internally; a demo is offered. Additional ISO standards are in some cases only announced so far. Final assessment and approval remain with the auditor. Source check: 2026-10-15 |
| Roz · Product: Roz Audit & Advisory · Headquarters: USA [55] · Contracting party Hampton Innovations Incorporated; legal contact Newark, Delaware, according to the terms of use. · Hampton Innovations Incorporated d/b/a Roz | Documented focus: Roz links evidence collection, control mapping and audit processing for audit and advisory teams. Existing policies, configurations and documents can be linked to own frameworks and control requirements. | AI functions and classification: AI agents map collected evidence to controls and support the search for gaps. Ask Roz answers questions about policies, controls and evidence with references to the documents used.[56] [55] · Specific AI functions documented Map evidence to controls · Identify gaps between requirements and evidence · Answer questions on policies and evidence AI evidence: [56] · Demo and contractually delimited trial/production offerings. The terms of use generally limit trial data to approved sample or synthetic content; check the functional scope in the offer. Source check: 2026-10-15 |
| RunAudit · Product: IT audit platform · Headquarters: Ireland [57] · Provider names Dublin and, in the footer, RUN Audit Ltd with the addition trading as Cyb3rboard GRC Ltd. CYB3RBOARD GRC LIMITED is listed in the Irish CRO new incorporations report under 774953; confirm the exact contracting entity. · Run Audit; RUN Audit Ltd; Cyb3rboard GRC Ltd; CYB3RBOARD GRC LIMITED | Documented focus: Specialised software for internal and external IT auditors. Links audit documentation with controls of multiple frameworks and supports gap analysis, actions and editable audit reports. | AI functions and classification: AI reads and indexes uploaded evidence, maps it to controls and supports mapping across multiple frameworks. It flags possible gaps and suggests remediation actions.[57] [58] · Specific AI functions documented Evaluate audit evidence · Map evidence to controls · Suggest gaps and remediation actions AI evidence: [57] · Software platform offered with demo request; supplementary audit services for selected customers. Licence scope and deployment available on request. Source check: 2026-10-15 |
| SANNOS · Product: SANNOS AI Compliance Manager · Headquarters: Denmark [59] · Provider page names SANNOS ApS with an address in Græsted, Denmark. CoreStream GRC is presented as a partner, not as an identical provider. · SANNOS ApS; E-V-E AI | Documented focus: SANNOS checks policies, contracts and control evidence against defined criteria. Findings remain linked to their source material and can be used for control tests, supplier audits and internal audits. | AI functions and classification: The AI analyses the relevance of evidence, maps it to controls and identifies insufficiently evidenced requirements. Subject-matter reviewers confirm findings or document divergent assessments.[60] [59] [61] [62] · Specific AI functions documented Check control evidence · Map evidence to requirements · Identify gaps and exceptions AI evidence: [60] · Product briefing and commercial service agreements offered. Confirm specific frameworks, audit rules and mode of operation in the offer. Source check: 2026-10-15 |
| Skepta · Product: Skepta Audit Platform, AI Analyst and Ask Skepta · A regional website for India does not document a legal headquarters assignment. Legal entity and headquarters are not conclusively documented in the primary sources checked; no assignment to the British company of the same name. · Skepta AI; Ask Skepta; Skepta AI Analyst | Documented focus: Skepta bundles audit planning, information requests, findings, responses and action tracking for internal audit teams. Approvals and the review of implemented actions remain within the documented audit process. | AI functions and classification: According to the product description, Skepta AI Analyst performs audit data analyses and documents the audit steps. Ask Skepta answers questions about the audit inventory. Data sets, thresholds and working papers are reviewed and approved by named persons.[63] [64] · Specific AI functions documented Analyse audit data · Prepare audit steps and working papers · Query audit inventory in natural language AI evidence: [63] · Demo and plans with included AI assistant described. Product functions are documented; confirm legal entity, contractual terms and productive access separately. Source check: 2026-10-15 |
| Skeptics.ai · Product: Skeptics.ai SOX & ICFR Platform · Headquarters: USA [65] · The company's own profile names Bellevue, Washington, USA. The exact contracting entity is not separately confirmed in the sources checked. Independent brand and domain; not to be equated with Skepta in the inventory. · Skeptics AI; SKEPTICS; Skeptics.ai SOX | Documented focus: Skeptics.ai combines software and supplementary managed services for SOX compliance and internal controls over financial reporting. The platform covers audit scope, risk control matrices, tests, deficiency tracking and management reports. | AI functions and classification: The AI evaluates trial balances, annual reports and policies in order to narrow down audit-relevant entities, accounts and business processes. The provider also describes the analysis of complete data populations to prioritise particularly high-risk matters.[66] [67] [68] [65] · Specific AI functions documented Derive audit scope from financial data and policies · Identify high-risk items in data populations · Support SOX and ICFR audit workflows AI evidence: [66] · Public product page, login access and demo request available; software and managed services are offered in combination. Confirm specific modules and contract scope. Source check: 2026-10-15 |
| SOX-AI · Product: SOX-AI Audit Automation · Headquarters: Israel [69] · The legal notice names SOX-AI Ltd., Raanana, Israel, as parent company and operator of the English website. SOX-AI GmbH in Munich is a subsidiary; no European group headquarters is derived from this. · SOX AI; SOX-AI Ltd.; SOX-AI GmbH | Documented focus: SOX-AI offers a platform for SOX control programmes with test execution, evidence processing and audit documentation. The provider works with existing test plans and describes the connection to internal IT systems. The Israeli group includes a German subsidiary. | AI functions and classification: According to the vendor, a language model supports the execution of SOX tests on structured tables and unstructured documents. The platform combines this processing with predefined audit logic and documents results with test and decision logs.[70] [69] [71] · Specific AI functions documented Support SOX tests from existing test plans · Process structured and unstructured evidence · Record test decisions and audit documentation traceably AI evidence: [70] · Public product description with demo request. Clarify scope of available tests, human approvals and contracting entity before procurement. Source check: 2026-10-15 |
| Sumeru · Product: Audit360 · Headquarters: India [72] · The current product footer names Sumeru Technology Solutions Private Limited with a corporate office in Bengaluru; the older privacy policy names Sumeru Software Solutions. Both are listed under Sumeru; a legal change of name is thus not conclusively documented. · Audit360; Audit 360; Knowledge360; Sumeru Technology Solutions Private Limited; Sumeru Software Solutions Pvt. Ltd.; Sumeru Software Solutions Private Limited | Documented focus: Audit360 supports internal audits from planning through checklists and digital evidence to the follow-up of findings. Audit teams can evaluate risks, create reports and track results across multiple sites. In addition, Knowledge360 offers a search function for internal audit knowledge; managed audit services are offered separately. | AI functions and classification: According to the vendor, Knowledge360 uses AI and machine learning to make content in videos of internal audit knowledge searchable.[72] [73] · Specific AI functions documented Search audit knowledge within video content AI evidence: [72] · Documented by the vendor as Knowledge360; package scope not specified. No product test. Source check: 2026-10-14 |
| Supervizor · Product: Supervizor Financial Risk Discovery & Monitoring · Headquarters: USA [74] · SUPERVIZOR CORP | Documented focus: Supervizor supports internal audit and financial control through ongoing analyses of financial transactions. The software combines ERP data with predefined controls, prioritises anomalies by risk and supports investigations, task allocation and documented findings. The focus is on audit analytics, fraud detection and continuous controls in financial processes such as purchasing, sales, general ledger and travel expenses. | AI functions and classification: Supervizor supplements financial controls with unsupervised machine learning and language models in order to detect hidden risks and trends in transaction data. The results feed into a prioritised review of conspicuous transactions.[75] [76] [74] · Specific AI functions documented Detect hidden risks and patterns in financial transactions · Prioritise conspicuous transactions for audit and control AI evidence: [76] · Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| Trenta · Product: Trenta Audit Execution · Headquarters: USA [77] · Contact address San Francisco according to the website terms and conditions; privacy policy names Trenta, Inc. Legal information is not fully worked out. · Trenta, Inc. | Documented focus: Trenta supports IT audits and compliance audits for SOC 2, ISO 27001 and PCI DSS, among others. The software works with existing document repositories, GRC tools and working papers instead of requiring a complete changeover of the audit process. | AI functions and classification: AI agents analyse evidence, perform described control tests and write results into working papers. Draft reports with source references are produced from test results; consistency checks compare reports with notes and evidence.[78] [79] [77] · Specific AI functions documented Prepare and perform control tests on the basis of evidence · Create working papers and draft reports · Flag discrepancies between reports and evidence AI evidence: [78] · Vendor names ongoing audit engagements and offers demonstrations. Check functions and approvals using own test cases. Website terms and conditions still contain placeholders for the choice of law; check binding product terms separately. Source check: 2026-10-15 |
| Trullion · Product: Trullion Internal Audit and Trulli · Headquarters: Israel [80] · The privacy policy explicitly designates Israel as the headquarters; it also names a contact address in New York. Provider is Trullion Ltd.; no European assignment derived from European customer coverage. · Trullion Ltd.; Trulli; Trulli Agents | Documented focus: Trullion offers a workspace for internal and external audits, control tests, reconciliations and evidence. The entry relates to audit and control functions, not to the general accounting also offered. | AI functions and classification: The vendor describes AI-supported evidence collection, data reconciliations and control tests across complete data populations. The assistant Trulli researches uploaded documents; results are linked to sources and reviewed by humans before decisions are made.[81] [82] [80] · Specific AI functions documented Support control tests and evidence collection · Reconcile data and detect exceptions · Answer audit questions on the basis of documents AI evidence: [81] [82] · Commercial audit platform with sign-up, demo and product tours. Check control coverage, integrations and accessible agents in the desired package. Source check: 2026-10-15 |
| Valid8 Financial · Product: Valid8 Verified Financial Intelligence · Headquarters: USA [83] · The contact page names Boulder, Colorado, and Seattle, Washington. Valid8 Financial, Inc. is named as the provider in the privacy policy. · Valid8; Valid8 Financial Inc.; Verified Financial Intelligence | Documented focus: Valid8 Financial prepares financial evidence for audits, forensic investigations and the investigation of suspicious payment flows. The software links bank records and accounting data to traceable transactions; a partnership supplements Thomson Reuters audit workflows. | AI functions and classification: The vendor describes AI-supported extraction of financial evidence and prompt-based categorisation of transactions. Auditors can specify categories on the basis of payee, amount, date or description. The assignments are logged and carried over into evaluations; original evidence is retained.[84] [85] [86] [83] [87] · Specific AI functions documented Structure financial evidence for audits · Categorise transactions on the basis of specified criteria · Create traceable data foundations for fraud investigations AI evidence: [85] [86] · Product access, demo and the Prompt Categorization function are publicly documented. The Thomson Reuters announcement describes an available integration for evidence verification; confirm scope per contract. Source check: 2026-10-15 |
| Vero AI · Product: Vero AI Audit Platform / SOX Testing · Headquarters: USA [88] · The terms of use name Vero AI, Inc. as the operator and North Carolina, USA, as the location. Not to be confused with AI products of the same name from other vendors. · Vero AI Inc.; Vero AI SOX | Documented focus: Vero AI offers software for evaluating audit evidence and automating control tests. The SOX offering is aimed at internal audit, control owners and audit and advisory firms; further compliance frameworks can be included. | AI functions and classification: The documented AI agents read evidence, map it to controls, check requirements and flag gaps or exceptions. Further agents prepare traceable working papers, quality reviews and draft reports; results are made available for human review.[89] [90] [88] [91] · Specific AI functions documented Map evidence to controls · Detect control deviations with source references · Prepare working papers and reports AI evidence: [89] · Product description, demo and SOX pilot offering publicly documented. The specific production and licence scope must be confirmed in the offer; a pilot offering is not a blanket guarantee of availability for all functions. Source check: 2026-10-15 |
| zapliance · Product: Team Werner + Wilma; Continuous Control Monitoring; DuPa Recovery · Headquarters: Germany [92] · The legal notice names zapliance GmbH, Holzdamm 57, 20099 Hamburg, Germany; Amtsgericht Hamburg, HRB 134758. Registered office documented; no statement on hosting or owners. · zapliance GmbH; zapliance.com; Team Werner and Wilma; Team Werner + Wilma; DuPa Recovery; Duplicate Payment Recovery; Cash Recovery AI; zapHome; zapAnalytics | Documented focus: zapliance analyses SAP data for continuous auditing, digital audit preparation, ICS assessment, finance benchmarking and the search for duplicate payments and unclaimed input VAT. The agent Werner extracts approved SAP data read-only via RFC into a separate project database and provides results per indicator with marked SAP documents; Continuous Control Monitoring runs the indicators on a recurring basis for the first and second lines of defence. | AI functions and classification: Werner prioritises analysis results using locally executed machine learning; according to the vendor, DuPa Recovery uses machine learning to detect duplicate payments and unclaimed input VAT and prioritises the cases. On request, Wilma helps users explain and prioritise results in a chat, and SAP attachments can be analysed with a language model; users review the AI results and are responsible for the professional judgement.[93] [94] [95] [96] [97] [92] · Specific AI functions documented Prioritise analysis results from SAP data · Detect duplicate payments and unclaimed input VAT · Explain analysis results · Analyse SAP attachments with language models AI evidence: [93] [94] [95] [96] [97] · Operation in the customer's IT environment on a separately commissioned zapHome platform, with AI and non-AI variants; ML and LLM analyses are only included insofar as the Solution Bundle and contract activate them, and Wilma uses a language model approved by the customer. Wickie + Wilma and Wolfgang + Wilma are marked as “Coming soon” in the website menu; no product test. Source check: 2026-10-18 |
| Zenya · Product: Zenya DOC, FLOW, AUDIT, CHECK and RISK · Headquarters: Netherlands [98] · Infoland; Infoland B.V. | Documented focus: Zenya links document control, incident reporting, audits, inspections and risk management with a strong focus on healthcare. Quality and safety teams can work on procedures, actions and risks together. The vendor, formerly known as Infoland, additionally offers functions for information security and collaboration between institutions. | AI functions and classification: Zenya AI Chat answers questions about the organisation's own policies, procedures, forms and reports with source references. It summarises information from multiple documents and explains it in the context of the query.[99] [98] [100] [101] · Specific AI functions documented Answer questions on internal policies with sources · Summarise procedures and requirements from multiple documents AI evidence: [101] · Paid add-on to an existing Zenya environment; central activation as well as user and document permissions. No product test. Source check: 2026-10-14 |
Sources.
The numbers in square brackets refer to this list. It is numbered consecutively for this page.
- ibo Software: vendor source, headquarters evidence checked 18.10.2026
- ibo Software: main source checked 18.10.2026
- ibo Software: vendor source checked 18.10.2026
- ibo Software: vendor source checked 18.10.2026
- ibo Software: vendor source, AI evidence checked 18.10.2026
- ibo Software: vendor source, AI evidence checked 18.10.2026
- IBS Schreiber: vendor source, headquarters evidence checked 18.10.2026
- IBS Schreiber: main source checked 18.10.2026
- IBS Schreiber: vendor source checked 18.10.2026
- IBS Schreiber: vendor source checked 18.10.2026
- IBS Schreiber: vendor source checked 18.10.2026
- IBS Schreiber: vendor source checked 18.10.2026
- Intemic: vendor source, AI evidence, headquarters evidence checked 15.10.2026
- Intemic: main source, AI evidence checked 15.10.2026
- Intemic: vendor source checked 15.10.2026
- Irame Tech: vendor source, headquarters evidence checked 15.10.2026
- Irame Tech: main source, AI evidence checked 15.10.2026
- Irame Tech: vendor source, AI evidence checked 15.10.2026
- Litmus: vendor source, headquarters evidence checked 15.10.2026
- Litmus: main source, AI evidence checked 15.10.2026
- Litmus: vendor source checked 15.10.2026
- LOKIQ: main source, AI announcement, headquarters evidence checked 15.10.2026
- MindBridge: vendor source, headquarters evidence checked 14.10.2026
- MindBridge: main source, AI evidence checked 14.10.2026
- MindBridge: vendor source checked 14.10.2026
- NCS SoftSolutions: main source, AI evidence checked 14.10.2026
- nextAudit: vendor source, headquarters evidence checked 15.10.2026
- nextAudit: main source, AI evidence checked 15.10.2026
- nextAudit: vendor source, AI evidence checked 15.10.2026
- nextAudit: vendor source checked 15.10.2026
- OP.Serv (ROK Solution): vendor source, headquarters evidence checked 14.10.2026
- OP.Serv (ROK Solution): main source, AI evidence checked 14.10.2026
- OP.Serv (ROK Solution): vendor source checked 14.10.2026
- Oxus: third-party source, headquarters evidence checked 15.10.2026
- Oxus: main source, AI evidence checked 15.10.2026
- Oxus: vendor source checked 15.10.2026
- Petual: vendor source, headquarters evidence checked 15.10.2026
- Petual: main source, AI evidence checked 15.10.2026
- Petual: vendor source checked 15.10.2026
- proISMS: vendor source, headquarters evidence checked 14.10.2026
- proISMS: main source checked 14.10.2026
- proISMS: vendor source checked 14.10.2026
- proISMS: vendor source checked 14.10.2026
- PwC Deutschland: vendor source, headquarters evidence checked 14.10.2026
- PwC Deutschland: main source, AI evidence checked 14.10.2026
- PwC Deutschland: vendor source checked 14.10.2026
- QualityReady: vendor source, headquarters evidence checked 14.10.2026
- QualityReady: main source checked 14.10.2026
- QualityReady: vendor source, AI evidence checked 14.10.2026
- Regulatory Intelligence Compliance Solutions: main source, headquarters evidence checked 15.10.2026
- Regulatory Intelligence Compliance Solutions: vendor source, AI evidence checked 15.10.2026
- Regulatory Intelligence Compliance Solutions: vendor source, AI evidence checked 15.10.2026
- RINA: vendor source, headquarters evidence checked 15.10.2026
- RINA: main source, AI evidence checked 15.10.2026
- Roz: vendor source, headquarters evidence checked 15.10.2026
- Roz: main source, AI evidence checked 15.10.2026
- RunAudit: main source, AI evidence, headquarters evidence checked 15.10.2026
- RunAudit: vendor source checked 15.10.2026
- SANNOS: vendor source, headquarters evidence checked 15.10.2026
- SANNOS: main source, AI evidence checked 15.10.2026
- SANNOS: vendor source checked 15.10.2026
- SANNOS: vendor source checked 15.10.2026
- Skepta: main source, AI evidence checked 15.10.2026
- Skepta: vendor source checked 15.10.2026
- Skeptics.ai: vendor source, headquarters evidence checked 15.10.2026
- Skeptics.ai: main source, AI evidence checked 15.10.2026
- Skeptics.ai: vendor source checked 15.10.2026
- Skeptics.ai: vendor source checked 15.10.2026
- SOX-AI: vendor source, headquarters evidence checked 15.10.2026
- SOX-AI: main source, AI evidence checked 15.10.2026
- SOX-AI: vendor source checked 15.10.2026
- Sumeru: main source, AI evidence, headquarters evidence checked 14.10.2026
- Sumeru: vendor source checked 14.10.2026
- Supervizor: vendor source, headquarters evidence checked 14.10.2026
- Supervizor: main source checked 14.10.2026
- Supervizor: vendor source, AI evidence checked 14.10.2026
- Trenta: vendor source, headquarters evidence checked 15.10.2026
- Trenta: main source, AI evidence checked 15.10.2026
- Trenta: vendor source checked 15.10.2026
- Trullion: vendor source, headquarters evidence checked 15.10.2026
- Trullion: main source, AI evidence checked 15.10.2026
- Trullion: vendor source, AI evidence checked 15.10.2026
- Valid8 Financial: vendor source, headquarters evidence checked 15.10.2026
- Valid8 Financial: main source checked 15.10.2026
- Valid8 Financial: vendor source, AI evidence checked 15.10.2026
- Valid8 Financial: vendor source, AI evidence checked 15.10.2026
- Valid8 Financial: third-party source checked 15.10.2026
- Vero AI: vendor source, headquarters evidence checked 15.10.2026
- Vero AI: main source, AI evidence checked 15.10.2026
- Vero AI: vendor source checked 15.10.2026
- Vero AI: vendor source checked 15.10.2026
- zapliance: vendor source, headquarters evidence checked 18.10.2026
- zapliance: main source, AI evidence checked 18.10.2026
- zapliance: vendor source, AI evidence checked 18.10.2026
- zapliance: vendor source, AI evidence checked 18.10.2026
- zapliance: vendor source, AI evidence checked 18.10.2026
- zapliance: vendor source, AI evidence checked 18.10.2026
- Zenya: vendor source, headquarters evidence checked 14.10.2026
- Zenya: main source checked 14.10.2026
- Zenya: vendor source checked 14.10.2026
- Zenya: vendor source, AI evidence checked 14.10.2026