Your audit function has outgrown the spreadsheet. Run it in Scrutive.

Download the Excel template, paste in your risk and control matrix and upload it. Controls, risks, owners and dates appear in your register, ready to check and correct on screen. You pay nothing until you accept your first leadership pack.

Yes. Registers import from Excel with a template, and you can export registers, status reports and a full data backup at any time. Scrutive replaces the spreadsheet as the system of record, not as a tool.

A system that runs the internal audit lifecycle in one place: the audit universe and risk-based plan, audit programs and work papers, evidence and review, findings with agreed actions, reports to management or the audit committee, and the follow-up of every action until it is verified. Scrutive replaces the spreadsheets, shared drives and email threads most functions still use.

Scrutive AI drafts audit programs, checks evidence against each point of a control, tests samples item by item and helps write and correct text. Every result is a draft: it is marked as AI, recorded with the model and files used, and becomes part of the audit only when an auditor reviews and accepts it. Work papers holding an AI draft cannot be sent for review until the auditor replaces it.

Scrutive is built around how the Standards expect a function to work: a risk-based plan approved by the board, independence declarations for each engagement, preparer and reviewer sign-off, review points, a final report issued by the Chief Audit Executive, quality review after issue and a retention policy. Scrutive does not certify conformance; it gives your function the structure and the evidence to show it.

Yes. The audit universe holds each auditable area with its owner, risk rating, risk factors and audit frequency. Areas due for audit and not yet in the plan are flagged, and the annual plan tracks scope, team, budget and status, with a change log once the plan is approved.

Each work paper holds the control, the test objective, population, sample, test performed, observation, conclusion and evidence files. The preparer sends it for review; a different person signs it off or returns it with review points. Observations that need management action are listed under Findings so none is lost before the report.

When the final report is issued, each agreed action goes to its owner with a target date. Owners confirm by one-click email before the date, attach evidence, or ask for a new date that audit approves. Only an independent verifier can close an action, and overdue items are escalated to line managers.

No. Scrutive runs on its own: single sign-on with your identity provider (Google Workspace, Okta, Auth0 or any OpenID Connect provider) or its own approved accounts, follow-up emails through any company mail server, and evidence in its own secure storage. If you use Microsoft 365, it can also sign people in with Entra ID, send from your Outlook mailbox, add due dates to calendars, alert people in Teams and keep files in SharePoint, with permissions agreed with your IT team.

Each customer has a dedicated deployment and database. Access is enforced on the server per register and role, segregation of duties is built in, every change and email is logged, and AI is off until a master switches it on with a daily limit. An IT review pack is available during evaluation.

Most functions start with a pilot on one register or one audit. Registers import from Excel with a template, email (and Microsoft 365, if you use it) is connected with your IT team, and owners, verifiers and auditors are onboarded by role, with a training manual and walkthrough videos.

Starter is a flat monthly price for up to 3 users. Team is priced per user per month, in US dollars. Dedicated, with hosting in your own region or cloud, is quoted. Control owners who only answer follow-ups do not need a paid seat. See the Editions page for current prices.