Builds.
Source repositories and installable programs.
Every codebase is built for institutional sovereignty: self-hosted, modular, and designed to run entirely on-premise or locally on-device.
No recurring SaaS licenses, zero customer data leakage, and full adherence to global professional standards (IIA, AICPA, COSO).
All tools prioritize local execution and zero external telemetry. Confidential ERP data, accounts payable ledgers, and whistleblower disclosures remain strictly within the client enterprise perimeter.
Software built for audit operations.
From full-population CAATs engines to self-hosted ethics intake pipelines, these platforms operationalize modern assurance.
Industrial Packaging Plant Audit Master Model
100% continuous controls monitoring & yield analytics model for corrugated manufacturing.
A production-grade, macro-free 10-tab institutional Excel model covering 35 granular audit procedures across 7 operational domains (Raw Paper Logistics, Corrugator Wet/Dry End, Converting & Printing, Scrap Baling & Mass Balance, Tooling & Asset Longevity, Warehouse & Dispatch, Boiler House & EHS Continuity). Connects trench-level sensor and PLC feeds directly to 5 Fiduciary Assurance Pillars with an automated Critical Override Governance Protocol.
- Self-contained 10-tab workbook with 442 formula cells, dynamic cross-sheet aggregation, and zero macro dependencies
- 35 granular audit test procedures across 7 operational domains from inbound weighbridge RS-232 feeds to high-pressure steam boilers
- Five Fiduciary Assurance Pillars: Margin Truthfulness, Asset Longevity, Mass Balance & Anti-Theft, Catastrophic Continuity, Customer Spec Integrity
- Automated Critical Override Governance Protocol: mathematically collapses Overall Opinion upon any Ineffective Critical control failure
- Tiered commercial licensing via Gumroad: Single Plant ($69), Enterprise Multi-Plant ($129), and Commercial Advisory Rights ($249)
POS Cashier & Till Fraud Detection Model
Automated forensic analytics testing electronic journal logs across 4 fraud engines.
A production-grade, macro-free 8-sheet Excel model analyzing raw POS electronic journal exports. Detects post-settlement voids, pre-tender item cancellations, off-hours no-sale drawer kicks, and supervisor PIN concurrency anomalies. Features a ranked cashier risk scorecard and prioritized CCTV investigation queue.
- 4 automated forensic engines: Post-settlement void latency, pre-tender item cancellations, no-sale kicks, supervisor PIN concurrency
- 2,009 active formula cells running strictly on native Excel formulas with zero macro security dependencies
- Automatic Z-Score outlier detection isolating cashiers exceeding +2.5 standard deviations above branch mean
- Prioritized CCTV Review Queue with exact transaction IDs and surveillance camera timestamps
- Ready-to-use schemas for Oracle Micros Simphony, NCR Aloha, Toast, Revel, and Square POS exports
Continuous Controls Monitoring (CCM) Field Audit Toolkit
Enterprise-grade continuous audit testing model across 5 ERP exception engines.
Replaces retrospective 20-invoice samples with 100% population testing across Split POs, Dormant Vendor resuscitation, 7-layer duplicate invoice string normalization, Off-hours journal entries, and Round-sum advisory fees. Paired with a 715-row synthetic corporate stress pack and ERP data request specifications.
- 5 deterministic exception engines testing 100% of subledger records with automated EBITDA exposure quantification
- Audit Stress Test Data Pack with 715 synthetic corporate transactions and 205 benchmarked exception ground truths
- 7-layer invoice normalization stripping punctuation, hyphens, and whitespace to catch split billing fraud
- Ready-to-issue IT Data Request Specification for SAP ECC/S4HANA, Oracle Cloud ERP, and NetSuite
- Fieldwork Cheat Sheet and Anomaly Triage Rubric defining immediate audit escalation protocols
Cloud Kitchen & F&B ERM + CCM Suite
18-file white-label governance, KRI tracking & order-to-cash assurance architecture.
A complete white-label Enterprise Risk Management (ERM) and Continuous Controls Monitoring (CCM) toolkit for multi-brand cloud kitchens, QSR networks, and food-tech operators. Replaces sample-based compliance checks with 100% population 3-way delivery aggregator remittance matching (FI-002), theoretical-vs-actual BOM recipe yield telemetry (OP-003), and unannounced physical line-walk verification.
- 18 unlocked working files: Board ERM Policy, 12-Month Implementation Manual, 7 Excel registries, and 5 executive reporting packs
- Automated 3-way Order-to-Cash delivery aggregator remittance & refund deduction reconciliation schema (FI-002 / FI-KRI-06)
- Theoretical-vs-actual recipe BOM inventory yield tracking and rebalanced kitchen KPI scorecards (OP-003 / OPS-KRI-06)
- Two-tier licensing via Gumroad: Standard Single-Entity ($169) and Enterprise Multi-Entity & Advisory ($399)
Invoice Audit Engine
Air-gapped 100% continuous controls monitoring & invoice document audit analytics.
An open-source, on-premise document audit engine for accounts payable and procurement teams. Runs 100% locally with zero cloud API dependencies to protect confidential vendor pricing. Extracts printed invoices and thermal till receipts via local OCR, reconciles 3-way line item arithmetic, flags VAT billed without a valid Tax Registration Number (TRN), and generates an executive 5-tab Excel audit register.
- 100% air-gapped on-premise execution with zero cloud telemetry or vendor pricing data leakage
- Three-way mathematical verification: Qty × Rate == Line Total, Sum(Lines) == Subtotal, Subtotal - Discount + Tax == Total
- Statutory tax compliance gate detecting VAT charged without valid TRN / VAT identification
- Zero-install Windows x64 standalone executable with automated multi-tab Excel register generation
Payroll Forensic Variance & Integrity Engine
100% continuous controls monitoring & collusion detection across comparative payroll registers.
Replaces retrospective sample-based payroll audits with 100% comparative population reconciliation across consecutive periods. Resolves heterogeneous, uncleaned payroll registers from SAP, Oracle HCM, Workday, and legacy ERPs using deterministic fuzzy schema mapping. Deterministically flags ghost employees, post-termination salary leakage, duplicate IBAN clustering indicative of payroll clerk collusion, unapproved off-cycle salary spikes, and statutory tax discrepancies. Outputs execution telemetry alongside an automated, macro-free multi-tab Excel audit workpaper ready for Audit Committee presentation.
- Performs 100% comparative population reconciliation between consecutive payroll months to isolate ghost employees, unrecorded terminations, and unapproved joiners.
- Resolves dirty, non-standard column headers across SAP, Oracle HCM, Workday, and legacy exports using deterministic fuzzy schema normalization.
- Uncovers payroll clerk and supervisor collusion networks by clustering duplicate bank IBANs, national identification numbers, and shared payout accounts.
- Isolates post-termination cash leakage by cross-referencing separation effective dates against subsequent active disbursement registers.
- Generates an institutional-grade, macro-free Excel audit workpaper with frozen panes, color-coded risk tiers, and structured variance schedules.
AuditDesk
Privacy-first, zero-dependency fieldwork & forensic workbench for internal auditors.
A modular, high-performance command-line and local workbench built to replace fragile audit spreadsheets. Conducts 100% population computer-assisted audit techniques (CAATs), statistical AICPA sampling, and generates standardized IIA-aligned working papers without external cloud dependencies.
- 100% population substantive testing replacing manual 25-sample substantive testing
- AICPA-compliant monetary-unit and classical variables sampling calculation
- Deterministic working paper generation structured for IIA Standard 2300
- Zero-telemetry local execution ensuring full compliance with GDPR and banking secrecy
ThirdEye: Vendor Risk Scanner
AI-assisted vendor intelligence and accounts payable anomaly detection.
Automated forensic scanner designed for internal audit and risk management teams to uncover hidden procurement risks across high-volume ERP transaction data. Detects potential shell vendors, employee-vendor address conflicts, bank account alterations, and split-invoice purchase order circumventions.
- Automated cross-matching between vendor master records and payroll databases
- Segregation of duties (SOD) conflict discovery in requisition-to-check workflows
- Sequential invoice clustering to identify purchase order threshold splitting
- Exportable audit finding summaries mapped against COSO control deficiencies
ZK Whistleblower
Sovereign whistleblowing intake platform with zero-server cryptographic anonymity.
A sovereign, self-hosted ethics intake platform engineered for enterprises that require a secure reporting channel without routing sensitive disclosures through third-party multi-tenant SaaS providers. Features encrypted intake tokens, role-based investigator access, and Audit Committee briefing exports.
- Cryptographically secure two-way anonymous dialogue for whistleblower intake
- Self-contained Docker container deployment requiring zero ongoing cloud licenses
- Role-based triage interface routing disclosures directly to Audit Committee chairs
- Audit log immutability ensuring tamper-evident investigation record tracking
RoleForge: Audit Agent Architecture
31 production-grade agentic roles for CrewAI, LangChain, and LangGraph.
A comprehensive library of hardened agent specifications designed for complex governance, risk, and internal audit automation. Bridges the gap between generic LLM prompts and deterministic, audit-standard execution traces across forensic investigation and compliance review.
- Hardened system prompts with few-shot reasoning for audit finding severity classification
- Pre-configured multi-agent roles: Risk Assessor, Forensic Analyst, and CAE Synthesizer
- Standardized schema definitions ensuring verifiable JSON / Markdown deliverable structures
- Benchmarked against international accounting scandal case studies
AuditPatterns
Explainable population triage and anomaly clustering for internal auditors.
The algorithmic triage layer engineered to sit directly upstream of audit verification. Ingests full transaction populations, applies unsupervised anomaly clustering, and ranks high-risk sub-populations with deterministic explanations before substantive audit sampling begins.
- Unsupervised population triage isolating multi-dimensional outlier clusters
- Rule-assisted isolation trees preventing black-box opacity in working papers
- Direct integration with AuditDesk fieldwork working paper pipelines
- Available under confidential retained advisory engagements and enterprise advisory