Audit work, structured for the AI era.
Punchcard turns every request, test, and review step into a structured unit of audit work. Send a punchcard to a client. An agent completes it. You review it. Together they make the audit.
Built for external and internal audit and their clients. SOC 2 certified. GDPR-aligned.
Trusted by audit teams at
What is a punchcard?
A new unit of audit work.
A punchcard is a structured piece of audit work — a request, a test, a review step — with everything it needs to be completed and traced back to evidence. Send one to a client. An agent completes it. You review it. Together, punchcards make up the complete work of the audit.
1. Send
A structured request with selections, support types, and fields to extract. Clients see exactly what's needed — and get instant feedback when something doesn't tie out.
- Invoice — Selection #042
- Bank statement — Selection #042
- AR aging — doesn’t tie to TB
- Shipping doc — Selection #042
2. Complete
An AI agent reads the evidence, extracts the fields, runs the comparisons, and prepares the workpaper with citations. Mechanical work runs at scale. Judgment stays with the auditor.
3. Review
Every cell carries a reasoning trace and clickable citation. Validate, override, comment, and sign off — then export standardized workpapers without leaving the spreadsheet.
Flagship capability
CoAudit: substantive testing in minutes.
CoAudit is the first punchcard most firms send. Plain English in, audit workpapers with citations out. Up to 10× efficiency on substantive testing — without giving up judgment, traceability, or review.
Reads the documents your auditors do
Contracts, invoices, bank statements, payroll, debt agreements, revenue documents, offering memos. Extracts the fields and runs the comparisons.
Cites back to source evidence
Every conclusion is inspectable. One click takes you to the exact page, the exact line, the exact paragraph the agent reasoned from.
Built for substantive testing — and SOX
Great at substantive testing, revenue and expense testing, search for unrecorded liabilities, and operating-effectiveness testing of SOX controls.
More punchcards in the system
One system. Every kind of audit work.
CoAudit is one capability. The same operating system handles matching, testing, financial statement review, and more — each one a punchcard your team can send, complete, or review.
The substantive-testing punchcard.
One agent for detail testing, control testing, and contract review. CoAudit reads the source documents, runs your procedures, reasons through every assertion, and outputs a workpaper ready for partner and peer review.
- Match selections to source evidence at scale
- Apply procedures with tolerances and tick marks
- Reasoning trace + citations on every cell
The FSR punchcard.
Financial Statement Review reads the draft financials, ties balances to the trial balance, checks disclosure completeness, and surfaces inconsistencies between the notes and the numbers.
- TB-to-FS tie-out
- Disclosure checklist coverage
- Cross-section consistency checks
Who it's for
Built for the audit work you actually do.
One operating system. Same evidence, same testing, same review surface — whether you're signing the opinion or running the internal audit plan.
For external audit
CPA firms running assurance engagements.
Streamline client requests, evidence collection, substantive testing, and workpaper preparation. Keep professional judgment in your hands and turn engagement weeks into days.
- Per-selection client request flows
- Substantive testing with citations
- Reviewable, exportable workpapers
For internal audit
In-house teams across operational, financial, and IT audit.
Standardize procedures, automate evidence gathering and testing, and free your team for risk-based judgment work. Strong at operating-effectiveness testing of SOX controls.
- Standardized procedure templates
- SOX-controls testing with traceable evidence
- One workspace for evidence, testing, and review
What auditors are saying about CoAudit
In her first day using CoAudit, a senior at Richey May completed revenue testing across 41 selections and 123 supporting documents in 30 minutes — work that would normally take days to do manually.
CoAudit gives our auditors back the hours that don't require professional judgment, so they can spend more time where the risk actually lives.
Steve Checketts
Partner, Richey May
For a new classification standard on insurance investment bonds, I had CoAudit scan 12,750 pages of offering memos across 15 selections and quote the sections supporting each classification, against a flowchart I wrote. That isn't a procedure we would have attempted manually.
CoAudit didn't just make the work faster — it let us do work we wouldn't have done at all.
Paige Bassoli
Associate, JLK Rosenberger
Assurance, one punchcard at a time.
See Punchcard handle a real engagement. We'll walk through requests, testing, and review using your evidence — every judgment call still in human hands.
Trusted by RSM, Richey May, JLK Rosenberger, and more.