
AI built for audit teams
Put AI to work on the audit — two ways
Skills that run inside the AI your team already has, for internal audit, SOX, and IT controls. And a full platform that takes a SOC 1 report from upload to signed workpaper.
Claude Skills
AI Skills for internal audit, SOX, and IT controls
Purpose-built Skills that run inside the AI your firm already pays for — no new platform, no new licence, no procurement.
- Journal entry testing, access reviews, fixed assets, regulatory change, and more
- Reads your control matrix and your workpaper templates, not ours
- Yours to keep, edit, and run — it is a file in your own workspace
For internal audit, SOX, and IT controls teams.
Browse the librarySOC 1 Platform
SOC 1 review, from upload to signed workpaper
A complete review platform for the work nobody wants: reading a vendor SOC 1 report and deciding what it means for your client.
- Full AU-C 402 / AS 2601 coverage — opinion, CUECs, deviations, subservice orgs, period
- Every finding cites the page it came from, so you can check it against the source
- Two-reviewer sign-off and an immutable audit trail, built for peer review
For CPA firms and audit teams relying on vendor SOC reports.
See the platformFrom ad-hoc chat to repeatable procedure
Your methodology, run the same way every time
In audit, variability is risk. Ask a chatbot twice and you get two different answers. Ask a Skill twice and you get the exact same procedure.
Skills turn ad-hoc conversations into an SOP the AI actually follows: your steps, your templates, your thresholds, applied the same way by whoever picks up the file. When peer review asks how something was arrived at, the answer is a document rather than a recollection.
What a Skill actually is
A packaged audit procedure, in three parts.
Testing logic
Your testing procedure, step by step.
The logic your team follows to test a control — which inputs to pull, in what sequence, what counts as an exception, and what to flag when the control fails.
Your firm’s methodology
Your templates, matrices, and thresholds.
Your control matrix, workpaper layout, risk rating scale, and materiality thresholds. The Skill reads them and writes back in your format, so there is no house style to adopt.
Deterministic execution
The parts that must never vary.
Sampling, date handling, totals, threshold tests — computed rather than reasoned, so the same inputs produce the same output on every run.
What about a Plugin?
A Plugin is simply a curated suite of related Skills bundled together into a single installation. Instead of managing individual tasks separately, a Plugin equips your team with an end-to-end toolkit tailored for a specific operational domain or audit focus area.
| Someone in a chat window | Buying a point solution | A Skill in the AI you have | |
|---|---|---|---|
| Time to first use | Immediate | Vendor review, security sign-off, procurement | Days — the tool is already approved |
| Incremental cost | Free, but nothing is reusable | A new licence, per seat, per year | None — the seats you already pay for |
| Whose format wins | Whatever got pasted in | Theirs. You migrate to it. | Yours. It reads your templates. |
| The next person who runs it | Different prompt, different answer | Same, if they have a seat | Same steps, same references |
| When your methodology changes | Everyone updates their own prompt | A feature request, then the next release | Edit the Skill once |
| If you stop paying | — | Access ends | You keep it |
| A three-hour quarterly task | Redone from scratch every quarter | Never worth buying software for | Worth automating |
Time to first use
- In a chat window
- Immediate
- Point solution
- Vendor review, security sign-off, procurement
- A Skill
- Days — the tool is already approved
Incremental cost
- In a chat window
- Free, but nothing is reusable
- Point solution
- A new licence, per seat, per year
- A Skill
- None — the seats you already pay for
Whose format wins
- In a chat window
- Whatever got pasted in
- Point solution
- Theirs. You migrate to it.
- A Skill
- Yours. It reads your templates.
The next person who runs it
- In a chat window
- Different prompt, different answer
- Point solution
- Same, if they have a seat
- A Skill
- Same steps, same references
When your methodology changes
- In a chat window
- Everyone updates their own prompt
- Point solution
- A feature request, then the next release
- A Skill
- Edit the Skill once
If you stop paying
- In a chat window
- —
- Point solution
- Access ends
- A Skill
- You keep it
A three-hour quarterly task
- In a chat window
- Redone from scratch every quarter
- Point solution
- Never worth buying software for
- A Skill
- Worth automating
Explore our Claude Skills Library
11 Skills published across 8 areas of the audit. Each one says exactly what it takes in, what it does, and what it hands back — so you can judge whether it fits before you run it.
SOC 1 Platform
The SOC review nobody wants to do, done in about nine minutes
Upload the report. The platform reads it end to end — the opinion and any qualification, every control objective and exception, the complementary user-entity controls, the subservice organizations and whether they're carved out, and the gap between the report period and your audit date.
On a real report, it surfaced a subservice-organization carve-out gap that a rushed manual review would plausibly have missed. Every finding cites its page, so you can check the source rather than take its word.
See what the platform coversAWS SOC 1 Type II — Acme Corp — Jan 2025
Executive Summary
14
CUECs
12
Mapped
2
Exceptions
CPA Assessment: Satisfactory
Controls operating effectively with noted exceptions
Who builds this
Built by an auditor who writes the code
Twenty-plus years in audit and controls — Grant Thornton, P&G, Shell, then Green Dot — followed by designing, building, and shipping a production AI system for audit work. Not a technologist who found an audit problem: someone who sat in the seat, then built the tool.
That's why the Skills know about the time-zone trap in a termination review, why a population has to tie before anything gets sampled, and why a reconciliation that compares a number against itself isn't a check at all.
More about AuditshoreStart with the work your team dreads
Tell us which part of your audit takes the most hours and returns the least judgment. That's usually the right place to begin.