Audit Management Software · Custom audit

Run your framework on the same platform as your SOC 2

A Custom audit lets you bring your own control set, evidence requests, and report template, then run the engagement the way Audora runs SOC 1, SOC 2, ISO 27001, and CMMC: evidence requests, testing, review, and the report, in one place. NIST CSF assessments, privacy reviews, internal audits, and client-specific assessments stop living in side spreadsheets.

The Audit Process Benchmark: three calls or fewer, with a free sandbox to run a real engagement on your own framework in Audora.

For audit firms

You run more than SOC. Your audit system should too.

Most firms we talk to run SOC and ISO in a tool and everything else in spreadsheets on the side: NIST assessments, privacy reviews, internal audits, and the questionnaire a client’s customer sent over. That side process is where the manual tax is highest. Every engagement starts from a blank workbook, and the method lives with whoever built it. A Custom audit puts that work in the same system, on the same workflow, as the rest of your practice.

Audora is the audit management software built for the auditor’s side: one platform that runs your whole engagement and connects the tools your firm already uses.

A team working through engagements together

How a Custom audit runs

Your framework goes in once as a firm template. Every engagement after that runs from it, with every request, finding, and approval in the same file.

1

Bring your framework

  • Send your controls or requirements and evidence requests in Excel, mapped to each other if you have that.
  • Send a report you’ve issued in Word, and we style the template as your firm’s.
2

Set up and request

  • Guided engagement setup loads the template, so each new engagement starts from your method instead of a blank workbook.
  • Send requests, approve evidence in bulk, and take drag-and-drop uploads from the client.
3

Test

  • Document testing against each control or requirement in your framework.
  • Staff self-claim open work from the Task Queue, and bulk-edit details in the Walkthrough tab.
4

Review

  • Multi-step approvals with a full audit trail on every request, finding, and sign-off.
  • Give a reviewer their own role, and name roles to match how your firm works.
5

Report and sign

  • Edit the .docx report inside Audora with two-way sync to the engagement.
  • Collect e-signatures without leaving the file.

Rolls forward like every framework

A completed Custom audit carries forward into next year’s engagement, so the second run starts from the first.

The work around the engagement

A practice dashboard that flags engagements at risk, with HubSpot and Slack connected, so client and team updates don’t live in a side process.

AI on a process built first

Audora AI drafts walkthrough interview fields from your transcripts. Audora drafts, you keep the judgment.

Consistency

One method on every engagement, whatever the framework

Your firm’s reading of each framework, your control sets and report templates, and the review points your partners keep raising go into the engagement template. Every senior works the same way, review comes back with one answer instead of one per partner, and what your firm knows stays when people move on.

  • Standard workpapers across SOC, ISO, CMMC, and Custom audits
  • Review-ready files, with every request, finding, and approval on the audit trail
  • Faster and more consistent at once: automation runs every engagement the same defensible way

Partners and owners

Run more engagement types on one platform with the same team, with engagements at risk and reports projected in one dashboard.

Engagement managers

One methodology across every framework your firm runs, and a file that’s ready for review.

Seniors and staff

Less re-keying and chasing evidence, more time on the judgment calls.

Audit Process Benchmark

Run your own framework in Audora before you decide

In three calls or fewer we learn how your firm runs the framework, scope Audora to match, and you run an audit in a free sandbox against your own success criteria. Whether or not you buy, you keep a gap read-out on your process, a Benchmark Summary, and a free QA of one engagement by a working auditor.

Book a Workshop Not ready for a workshop? Talk to our team

Custom audit

What you can run, and how it’s set up

If your engagement runs on controls or requirements, evidence, testing, and a report, it can run as a Custom audit.

What is a Custom audit?

A Custom audit is an engagement type in Audora that runs on a framework your firm brings, instead of one Audora ships. It uses the same engagement engine as SOC 1, SOC 2, ISO 27001, and CMMC: guided setup, evidence requests, testing, multi-step review, the in-app report, and e-signature.

What can I run as a Custom audit?

Security frameworks

NIST CSF assessments, NIST SP 800-53 control reviews, CIS Controls, and state or sector security requirements.

Privacy

GDPR and US state privacy law assessments, and privacy program reviews built on frameworks such as Nymity.

Internal and IT audits

Internal audit programs, SOX IT general controls, and recurring IT audits your firm runs for clients.

Client-specific assessments

Vendor and third-party risk assessments, contractual security requirements, and your firm’s own methodology.

Other engagement types your firm runs on the same model of requirements, evidence, testing, and a report can run the same way. Bring yours to the workshop and we’ll scope it.

How is a Custom audit set up?

  • Your controls or requirements and evidence requests, in Excel. If they’re mapped to each other, we keep the mapping; if not, that’s fine.
  • A report you’ve issued, in Word, so the template comes out styled as your firm’s.
  • The tasks your team runs around the audit, like the kickoff deck and status updates, so they live in the engagement too.

We load it as a firm template once, and every engagement after that starts from it.

How is it different from a dedicated framework?

Dedicated frameworks ship with Audora’s framework structure and standard templates. A Custom audit runs on the structure you bring. If a framework becomes a large part of your practice, tell us: we build dedicated support for frameworks as firms need them.

Does a Custom audit roll over?

Yes. A completed Custom audit carries forward into next year’s engagement, the same as every other framework in Audora.

Do my clients get the same experience?

Yes. Clients use the same collaboration dashboard for open requests, uploads, and comments, whatever the framework.

Not sure your framework fits?

Bring it to the Audit Process Benchmark. We’ll scope it in Audora with you and set it up in a free sandbox, so you can run a real engagement on it before you decide.