A responsible approach to compliance
AuditProo is designed to support audit and accounting professionals in organising audit work and preparing financial reporting outputs. We recognise that our customers operate in regulated professional environments and that the platform may process confidential business information and personal data.
Our compliance approach focuses on responsible data handling, contractual clarity, security governance and supporting customers in carrying out their professional responsibilities. Use of AuditProo does not, by itself, guarantee that a customer or an audit engagement complies with any law, regulation or professional standard.
Data protection and privacy
Where applicable, AuditProo seeks to align its personal data processing practices with relevant data protection requirements, including the EU General Data Protection Regulation (GDPR).
The role AuditProo performs depends on the processing activity. For customer audit files and records processed on customer instructions, the customer will commonly act as controller and AuditProo as processor. For certain business activities, such as managing its own customer accounts, billing, website enquiries or employment records, AuditProo may act as a controller.
How we approach data protection
- Identify the purposes and lawful basis for personal data processing where AuditProo acts as controller.
- Process customer personal data on documented instructions where AuditProo acts as processor.
- Use appropriate technical and organisational safeguards to protect personal data.
- Limit access to authorised personnel and service providers with a legitimate need.
- Support appropriate retention, deletion and data subject request processes.
- Use written data processing terms and assess relevant sub-processors.
- Assess international data transfers and use a lawful transfer mechanism where required.
GDPR and international customers
The GDPR may apply to organisations established in the European Union or to organisations outside the EU in the circumstances set out in Article 3, including offering goods or services to individuals in the EU or monitoring their behaviour there. AuditProo assesses applicability by reference to its activities and relationships. Where GDPR applies, relevant requirements include transparency, lawful processing, data subject rights, security, processor contracts, breach management and international transfer rules.
Audit and accounting standards
AuditProo provides tools and workflows intended to support audit professionals. Its audit work programmes and related functionality are developed with reference to relevant International Standards on Auditing (ISAs) and quality management concepts, including ISQM 1 and ISQM 2, as applicable to the product features.
Professional standards are applied by the audit firm and engagement team in the context of each engagement. AuditProo is a technology platform and does not replace the auditor's professional judgement, responsibility for the audit or obligation to comply with applicable professional requirements.
Artificial intelligence and responsible use
AI-supported features are intended to assist defined audit and financial reporting tasks. Outputs should be reviewed by appropriately qualified users before they are relied upon or issued. Customers remain responsible for engagement decisions, audit conclusions and approval of financial statements. AI processing must be subject to appropriate privacy, confidentiality, access and provider safeguards.
Contracts and customer responsibilities
The applicable customer agreement and, where relevant, Data Processing Agreement set out the parties' responsibilities. Customers are responsible for ensuring they have authority and a lawful basis to upload and process personal data and confidential client information through the platform.
Compliance enquiries
Customers who require information about privacy, data processing, security measures or contractual safeguards may contact AuditProo through its designated support or business contact channel.