The agentic audit platform.
Your team directs internal audit. Prufy gathers the context, tests full populations and prepares every conclusion with its evidence.
Frameworks your methodology can reference
- Global Internal Audit Standards
- COSO
- COBIT 2019
- ISO/IEC 27001
- ISO/IEC 42001
- NIST CSF 2.0
- DORA
- NIS2
- GDPR
- ENS
- AI Act
- SOC 2
- PCI DSS
Specialists that work for your team.
Each one in the step you assign, with the permissions your organisation grants.
Prufy Auditor
Runs the tests.
On your data and with the plan's programme. Each test keeps its working paper.
Prufy Research
Watches your environment.
Regulation, threats and good practice, with source and date. It maintains the frameworks and authorised sources.
Prufy Assistant
Coordinates fieldwork.
Prepares information requests, follows up the answers and files meetings in the record.
Your agents
The ones your organisation has already approved.
They work within the same method and with the same auditor review.
Prufy prepares. You decide.
Your team sets the method. Prufy works under your rules and stops where your judgement is needed.
Context
Supplier payments
Supplier paymentsProcessusesFinance ERPSystemFinance ERPSystemmaintained bySupport providerSupplierSupplier onboardingProcessowned byFinance departmentOwnerSupplier accountsInformationchanged inSupplier portalSystemNewContext updated today
Risks / R-007
Bank account changes not confirmed with the supplier
HighProposed risk- Why it appears
- New supplier portal in the context
- Next action
- Test every account change this quarter
DismissAcceptRuns / EX-026
Payments to changed accounts
Result preparedCut-off 30 Sep 2026- Population
- Every payment this quarter
- Criterion
- Change confirmed before payment
Working paper · EX-026.pdf18,391Conforming27Exceptions2Cannot concludePrepared by Prufy
Payments to changed accounts without confirmation
- Condition
- 27 payments to changed accounts without a verification call
- Criterion
- Supplier data change procedure
Basis for your decision
All 27 exceptions reviewed. The 2 inconclusive items go to manual review.Open caseRejectValidate finding
Context
Supplier payments
Context updated today
Risks / R-007
Bank account changes not confirmed with the supplier
- Why it appears
- New supplier portal in the context
- Next action
- Test every account change this quarter
Runs / EX-026
Payments to changed accounts
- Population
- Every payment this quarter
- Criterion
- Change confirmed before payment
Prepared by Prufy
Payments to changed accounts without confirmation
- Condition
- 27 payments to changed accounts without a verification call
- Criterion
- Supplier data change procedure
Basis for your decision
More depth. All year round.
Coverage
TodaySamples, because there is no time for more.
With PrufyThe full population when the data exists.
Audit plan
TodayAn annual plan that falls behind.
With PrufyA plan that moves with risk.
Follow-up
TodayEvery cycle the engagement is rebuilt.
With PrufyTests repeat at every cut-off.
Regulation
TodayBulletins nobody has time to read.
With PrufyEvery change with its source and date.
Closer to your organisation. Without losing the thread.
You visit a department, meet a supplier or rehearse the supervisor's visit. Prufy keeps executing and waits for you at each decision.
Everything your function audits. One method.
From systems to suppliers, with the same way of testing, documenting and deciding.
IT and cybersecurity- Leavers with active access
- Production changes without approval
- Backups that have never been restored
Financial processes- Payments to changed accounts without confirmation
- Manual journal entries out of hours
- Duplicate or unsupported expenses
Third parties and suppliers- Suppliers onboarded without validation
- Invoices above the contracted amount
- Outsourced services without periodic review
AI and data- AI uses outside the inventory
- Personal data in unauthorised systems
- Automated decisions without human review
Internal investigations- Timeline of a report from the internal channel
- Related-party transactions
- Conflicts of interest in purchasing
User-friendly. Enterprise-ready.
Designed to work with data and AI in Europe, protect your information and leave every decision to the auditor.
How your organisation governs it- PrufyISO/IEC 27001Information security
- PrufyISO/IEC 42001AI management systems
- PrufySOC 2Security and availability controls
Designed around ISO/IEC 27001, ISO/IEC 42001 and SOC 2 and ready for certification.
Our view on internal audit.
