Governed audit documentation.
Structured data in. Governed documents out.
AuditForge is a system of structure — not a system of execution. It defines what the control is. The auditor issues the opinion. AuditForge produces the evidence package. That line does not move.
See it in action →WHAT IT DOES
Define
Star schema. Fact_Control at center. 7 dimensions. 3 bridge tables. Effective dating. Controls, risks, processes, frameworks, assertions, and owners in a governed relational model.
Generate
RCM, MCL, Walkthroughs, Audit Plan in XLSX and DOCX. Every document produced from live cloud data. Full DDL brand standards baked in. Under one second each.
Govern
Draft → Prepared → Reviewed → Approved. Silent Fix Prevention: edit without rationale is rejected. Audit trail on every mutation. Segregation of duties enforced.
THE ARCHITECTURE
The dimensional model is the product.
Fact_Control at the center. Seven dimension tables radiating outward. Three bridge tables with effective dating. One control can simultaneously mitigate multiple risks, map to multiple frameworks, and cover multiple assertions.
THE GRAIN
One control instance per company per period per version.
"The architecture repeats. The data changes."
LIVE DATA — NEON POSTGRESQL
The product demos itself governing itself.
The demo data is DDL’s own Control Audit Engine. The product’s first audit is of its own creator’s governance.
COMPANY
CO-DDL · Dropdown Logistics
PERIOD
FY2025
CONTROLS
15 (11 CAE + 4 test imports)
RISKS
14 (bridge-mapped to COSO)
PROCESSES
7
DOMAINS
GOV · PRO · CTX · HAB
FRAMEWORKS
COSO 2013 · SOX/PCAOB · COBIT 2019
DOMAIN
auditforge.dev (live)
STACK
Next.js 16 · Prisma 6 · PostgreSQL 17 (Neon)
FEATURES
DOCUMENT GENERATION
RCM, MCL, Walkthrough Narratives, Audit Plan. XLSX and DOCX. One click. Full DDL standards on every output.
FRAMEWORK MAPPING
Map controls to SOX, COSO, COBIT simultaneously. Coverage gaps surface instantly.
REVIEW WORKFLOW
Draft → Prepared → Reviewed → Approved. Segregation of duties enforced. Every transition logged.
AUDIT TRAIL
Every change recorded. Who, when, what, why. Edit without rationale? Rejected.
BULK IMPORT
Three-step flow: Upload → Map → Preview → Execute. Controls, Risks, Processes. Auto column mapping. Row-level validation.
GLOBAL SEARCH
Cmd+K / Ctrl+K modal. Searches controls, risks, and processes simultaneously. Results grouped, text highlighted.
ANALYTICS DASHBOARD
Council-ratified KPIs: unmitigated risks, coverage rate, control health heatmap, workflow funnel, nature × type matrix.
VERSIONING
Controls versioned. Templates versioned. Generated documents carry data hashes. Regenerate any historical document exactly as it was.
SILENT FIX PREVENTION
Edit without documented rationale is rejected at the system level. Not a policy. A constraint.
MULTI-COMPANY
Data isolation by company. One system, many clients.
FRAMEWORK SUPPORT
Map once. Generate everywhere.
COSO 2013
17 requirements
SOX / PCAOB
15 requirements
COBIT 2019
13 objectives
PCAOB Assertions
9 assertions
NO AI REQUIRED
Core is deterministic.
Structured data in, governed documents out. No black box. No hallucination risk. No AI dependency. An optional AI acceleration layer is planned for a future premium tier — but the core product works fully without it.
ROADMAP
Phase 1
Core Engine
SHIPPED
✓ Star schema + dimensional model
✓ Bridge tables with effective dating
✓ Review + lifecycle state machines
✓ Audit trail + Silent Fix Prevention
✓ RCM, MCL, Walkthrough generation
✓ Full API with CRUD + validation
✓ Natural ID resolution
Phase 2
Web UI + Import
SHIPPED
✓ Dashboard with council-ratified KPIs
✓ Controls, Risks, Processes views
✓ Generate view — fires from browser
✓ Bulk import UI (3-step, 3 entity types)
✓ Global search Cmd+K modal
✓ Analytics dashboard
✓ Audit Plan generator (v0.4 layer)
Phase 3
Desktop App
NEXT
○ Electron wrapper
○ Install like Quicken, opens as native app
○ Cloud sync with web version
Phase 4
Mobile App
NEXT
○ Read-only dashboard + approvals
○ Review status on the go
○ Push notifications for review queue
Phase 5
AI Layer
PLANNED
○ Draft control descriptions from process inputs
○ Suggest risks by industry/process type
○ Flag coverage gaps
○ Local AI option for data-sensitive firms
Phase 6
Platform Integration
LONG-TERM
○ Clayton's multi-agent knowledge platform
○ Real-time collaboration
○ Automated testing schedules
○ Predictive risk analytics
BUILT BY
Dave Kitchens, CPA
10 YEARS OF AUDIT. ONE PRODUCT.
AuditForge was designed by someone who has lived inside audit documentation for a decade. The dimensional model reflects real audit methodology — not a software engineer’s approximation of it.
CREDENTIAL
CPA
BACKGROUND
10+ yrs internal audit
ARCHITECTURE
Star schema, dimensional
STUDIO
Dropdown Logistics
PARTNER
Clayton Hotze (engineering)
AUDITFORGE · v0.4 · auditforge.dev