Control evidence
Evidence for every control collected each month, checked for dates, owners and sign-offs, and filed where your auditors look. Every gap gets an owner and a date.
The auditor asks for last month. It’s already in the folder.
Here’s a typical run, step by step: what automation handles, what the agent does, and the calls that stay with your team.
Step 1 of 5List what’s due
Automation
Pulls every control due from the register: backups tested, payroll approval, the quarterly access review on billing.
Due dates and owners are columns in the register. Listing them is a filter.
- Control register
- Evidence tracker
~8 hours a month back
Step 2 of 5Find the proof
The agent
Searches the evidence folders and system logs for what each control asks for: a restore log, a signed payroll run, a review.
“Evidence of review” might be a signed PDF, a “looks good” email or a ticket. All three can count, or none.
- Evidence folders
- System logs
- Evidence tracker
~30 hours a month back
Where teams differWhat counts varies by auditor: a screenshot for some, the system’s own export with its run date for others.
Step 3 of 5Check it holds up
The agent
Reads each item for the period it covers and who signed. The access review has an owner named but nothing on file since June.
A restore test from last quarter doesn’t cover this month, however right it looks.
- Evidence folders
- Evidence tracker
~18 hours a month back
Step 4 of 5Chase the gap
Automation
Anything missing or out of date goes to the compliance lead with the control, the owner and what’s needed on one screen.
Missing is missing. Which controls need a person is known the moment the check finishes.
Your teamIf evidence is missing
Chases the finance systems lead for the access review by Friday, or records why this quarter is an exception.
Whether a gap is a slip or a failed control is a call for someone who answers to the auditors.
- Evidence tracker
- Evidence tracker
~6 hours a month back
Where teams differSome give the owner a week to fix a gap. Stricter teams go straight to the owner’s manager.
Step 5 of 5File the pack
Automation
Files each item against its control, traced to its source, and logs every open gap with its owner and date.
Each item carries its control and its period. Where it goes follows from that.
- Evidence tracker
- Audit folder
~10 hours a month back
What changes
Audit season starts with the evidence already filed. Your compliance team spends its time on the few gaps that matter, not on hunting through folders.
- 3steps automated
- 2steps for the agent
- 1call kept with your team
Pick any step to see what happens there and why it sits in that lane.
What it could be worth
~72 hours a month back
$60,500 a year in time
For a company testing about 60 controls, most of them monthly, at $70 an hour. We work out yours from your own volumes before you sign.
Let’s build your agentOne proven agent, plugged into how you work.
Every team does this job a little differently, so we set these five with the people who do it today. We’ve done this in dozens of businesses, so we know where teams usually differ and ask about those first.
The agent
Same for every client- Follows the same proven steps
- A person on every exception
- Every decision logged
- Tested on your past work first
- Never marks a control passed without evidence
-
Your systems
Where the work comes in, and where the result goes.
For this agentYour control register, evidence folders and system logs.
-
Your rules
The limits and exceptions it works to.
For this agentWhich evidence counts for each control, and how old it can be.
-
Your team
Who signs off, and who covers when they’re away.
For this agentThe compliance lead for gaps, each control owner for their own evidence.
-
Your channels
Where your team hears from it.
For this agentEmail to owners, Slack for your team, a monthly summary.
-
Your output
What it hands back, in the format you already use.
For this agentAn evidence pack filed by control, with every gap logged.
Auditor requests, access reviews and contract obligations are other agents in the catalog. Deciding whether a control passes stays with your team.
The agent, and everything that keeps it working.
- The agentRunning on your systems, under your rules.
- The review screenWhere the exceptions land for your compliance team.
- Your rulebookYour limits, exceptions and who signs off, in one place, often for the first time.
- A test reportYour past control tests, run through it and checked against the number.
- The runbookHow it works, what to check, and what to do if it stops.
- 30 days of tuningAfter it goes live, through a full month of your real control tests.
Hours it takes to assemble an audit pack. We measure it before we start, and again at day 30.
Live in 3 to 6 weeks. About seven hours of your time.
We do the building. Your side: access, your control register and last year’s evidence, and a short weekly check-in.
Then 30 days of tuning, with a short check-in each week, about two hours of yours. At day 30 we show you the number and hand everything over.
It keeps running whether or not we stay.
It runs in your accounts
Your cloud, your systems, and an AI account in your name, billed by the provider at their rates.
Changes in the first 30 days are included
A new rule, a changed limit, someone new signing off. That’s what tuning is for.
After that, your call
Your team edits the rulebook, the care plan covers it, or a bigger change is quoted first.
A lender built on work like this keeps a full audit trail across the life of every loan.
About this agent.
Which frameworks does it work with?
Can our auditors see it?
Our process isn’t quite like this. Will it still work?
How do we agree the number?
What does it cost to run once it’s live?
Want audit season to start with the evidence in?
Tell us how your team handles control tests today. We’ll show you this agent on examples like yours, and whether it fits the fixed price.
- 3 to 6 weeksto live, then 30 days of tuning
- $12,500fixed, per agent
- Yours to keepno license fees