AI agents for internal auditing and SOX compliance teams
Traack agents do the busy work of control testing so your team spends its time on judgement calls. Upload your RCM and evidence, and the agent runs continuous full-population testing, drafts the workpaper and flags every exception. SOC 2 compliant, zero data retention.
JE-03 in the RCM is the manual journal entry review control, tested quarterly with a 25-item sample. I'll screen the full Q3 population first, then pull evidence for the sample and every entry the screen flags.
Eleven entries need your judgement. Four were approved by their own preparer (all by the same user, R. Meyer, in August). Seven posted before the approval timestamp; six of those are period-end accruals approved the next morning, which may be an accepted practice worth documenting. Three entries above $10,000 have a single approval, and three have no support in Drive or NetSuite. Each exception in the workbook links to its approval log record and the file it was tested against, so a reviewer can follow the same path.
How it works
- 1
We turn your test procedures into institutional knowledge
We sit with your team and write down how each control is actually tested: the population, the attributes, the thresholds, what counts as an exception. That becomes a test procedure the agent runs the same way every quarter.
- 2
Upload the RCM and evidence
Upload the RCM and the exports you already pull, or connect the source systems. Ask for the test the way you would brief a staff auditor. The agent gathers the evidence and performs the test.
- 3
You review and sign off
You get a workpaper with the population, the sample, the exceptions and an evidence index, every row tied to the record it was tested against. Ambiguous cases are flagged for your judgement, never auto-passed.
Judgement stays with your team
The agent drafts the workpaper. Your team makes the call on every exception, and nothing is filed until a reviewer signs off.
Every action is traceable
Every command, query and raw response is recorded and replayable. Each conclusion carries the file, field and record it was tested against.
- Journal entryJE-2026-07-0912 · $18,400.00 · NetSuitePulled 14:02:11View
- Approval recordPreparer R. Meyer · Approver R. Meyer · 04 Aug 17:02Pulled 14:02:16View
- Support searchFinance / Close / FY26 Q3 / JE support · not foundSearched 14:02:20View
- ConclusionFail: preparer ≠ approver · dual approval · support attachedWritten 14:02:23View
Tested every week, not once a quarter
Once a test procedure is written, the agent runs it on every new record as it lands. Exceptions surface the week they happen instead of at quarter-end, and the workpaper is already drafted when your reviewers sit down.
Evidence retrieval from the systems you use
Connect the places evidence lives, or upload the exports you already pull for testing. The agent locates the right records, keeps the original responses as evidence, and only writes back to a system when you say so.
Security
Audit evidence is sensitive by definition. Traack is built so your team can answer your own auditors' questions about where it went and who touched it.
SOC 2 Type II compliant
Controls you can reference in your own review, with an audit log of every action taken on your account.
Zero data retention
Your evidence is processed for your engagement and nothing else. It is never used to train any model and is deleted when you say so.
Encrypted, with SSO
Encrypted in transit and at rest. Sign in through your identity provider, with single sign-on available for your organisation.
Isolated per person
Each person works in an isolated workspace. Evidence never crosses between people, teams or clients.
Read-only unless you approve
The agent reads by default. Any action that would send, change or delete in a connected system requires your approval first.
Replayable for your auditors
Every step is recorded and replayable, so an external auditor can see exactly what was done, on which records, and when.
See it on one of your controls
Bring an anonymised RCM and an export. In thirty minutes you will have a results workbook and a clear view of what the agent can take off your plate this quarter.
Book a demo