ClairAudit

The audit cycle, one schedule at a time.

Each module is named for the standard it implements and keeps the record a reviewer needs: inputs, versions, citations and sign-off.

An open printer’s type-case drawer divided into small compartments, with closed drawers below.
Printer’s type cases, American Bookbinders MuseumDaderot · CC0
B-1 ISQM 1 · ISA 220 · IESBA

Acceptance, continuance and independence

Record client acceptance and continuance decisions, collect independence declarations, and track identified threats and safeguards before planning begins. Firm-level ISQM 1 quality objectives and responses are managed alongside.

B-2 ISA 315

Risk assessment

Risk areas carry inherent, control and detection risk against the governing standard, with a risk graph linking accounts, assertions and anomalies so the team can see where evidence needs to go.

B-3 ISA 320

Materiality

Overall materiality is computed per engagement with performance materiality and the clearly-trivial threshold derived from it. Every revision is kept as a numbered version, so the file shows what changed and when.

Open the materiality file
B-4 ISA 240 · ISA 520

Journal entries and analytics

Journal entries are scored for anomalies with an explanation per score. Computer-assisted audit techniques, exception lists and Benford first-digit analysis sit in the same workspace as the procedures they support.

B-5 ISA 500 · ISA 505 · ISA 530

Evidence, confirmations and sampling

Evidence files are scanned, hashed and attached to workpapers. External confirmations are tracked to response. Monetary unit sampling computes sample size from confidence factors, records item results and projects misstatement.

B-6 ISA 570 (Revised)

Going concern

Model base and downside cash-flow scenarios from revenue, expenses, growth rates and opening cash. Test covenants against thresholds month by month and track key risk indicators, with an agent drafting the assessment for review.

Open the going concern file
B-7 ISA 560

Completion and subsequent events

Subsequent events are logged against the period end with their evaluation. Review notes, comments and tasks keep open points visible until they are cleared.

B-8 ISA 700 · ISA 701

Reporting, letters and filing

Draft audit reports by section, including key audit matters, and prepare engagement, representation and management letters. Reports are signed electronically, and financial statements can be tagged and validated for XBRL and ESEF export.

A narrow aisle between tall archive shelves filled with binders and storage boxes.
Archive storage, CERN, MeyrinSamuel Zeller · CC0

Agents do the procedure. People keep the pen.

Agent definitions, prompt templates and the standards corpus are managed centrally. What reaches a workpaper has passed the checks below, or says plainly that it has not.

Citation enforcement
A finding without a clause link is returned to the agent with a corrective prompt. After two retries it is stored as not citation-validated, never shown as clean.
Verifier gate
A separate judge model scores each finding from 0 to 1 against its evidence and cited clause. Findings below the threshold are flagged for human review.
Approval gates
Agents run in modes that pause for human approval. Sign-off belongs to the people who hold it.
Model routing
An LLM router chooses the model per task type, and token usage is booked to the tenant that ran it.

Ask across engagements without writing SQL.

A question becomes a structured plan, the plan is validated against an allow-listed set of tables and fields, and the query runs under your tenant's row-level security. The model never writes the SQL.

Queryable areas include engagements, workpapers, findings, risk areas, agents and their runs, evidence, monitoring events, anomaly scores and the audit trail. Sessions and queries are logged.

Continuous monitoring rules evaluate on a schedule and record each trigger, so exceptions surface between fieldwork visits.

Evidence from the systems your clients already run.

Connectors are built on the Model Context Protocol. Credentials are encrypted at rest. Most connectors are read-only; where write-back exists, each job needs partner and tenant-administrator approval. Clients without a connector upload through a request portal limited to their own document list.

The connector file
  • SAP S/4HANA
  • Oracle Fusion
  • Oracle NetSuite
  • Microsoft Dynamics
  • Workday
  • Xero
  • QuickBooks
  • Salesforce
  • HubSpot
  • Snowflake
  • Databricks
  • PostgreSQL
  • Confirmation.com
  • Bank APIs (PSD2)
  • Microsoft 365
  • Google Drive
  • Slack
  • Jira
  • ServiceNow
  • GitHub
  • AWS CloudTrail
  • Azure Monitor
  • Bloomberg

Availability of individual connectors depends on your plan.

Bring an engagement. We will walk the file with you.

A demo covers your audit methodology, the standards you report under, and how agents, citations and review gates would fit your team. Pricing is discussed on the call.