Skip to content
TrustMosaic

GRC core

MeshAudit

Internal audit management from the audit universe to the reviewed work paper, with programs, tests and evidence in one place.

If your audit still works like this

  • Plan in one spreadsheet, work papers in another folder?No one knows which version counts, and coverage of the audit universe is a guess.
  • Evidence arriving by email?No trace of who sent it, when, or whether the file changed afterwards.
  • Follow-up depending on manual reminders?An overdue action plan only shows up when someone remembers to ask.
  • Committee report built by copy and paste?Every number needs checking, and the source gets lost along the way.

What MeshAudit does

  • Audit universe and annual plan

    Entities, processes and systems with the risk and last audit of each. The plan shows coverage and records, with a rationale, what was left out.

  • Programs and work papers

    Programs saved as templates and reapplied to new engagements, with an owner for every step.

  • Tests with sampling and conclusion

    Each step records the test type, the sample, the result and the conclusion: effective, partially effective or ineffective.

  • Evidence requests

    The audited area receives only its own request and uploads the file to the program step, with no user license.

  • Review with two sign-offs

    Whoever prepares does not review. A reviewed step is locked, and unlocking requires the supervisor and clears both sign-offs.

  • Evidence with source and hash

    Every file is hashed on upload and keeps who sent it and when. Accepted evidence is linked to the program step.

Review

The supervisor reviews where the work was done.

The program step holds the test, the sample, the result and the conclusion. The preparer signs off, someone else reviews, and the reviewed step is locked with both sign-offs.

Evidence

Every file tells where it came from and how it arrived.

The file comes in through the evidence request, is hashed on upload and, once accepted by the auditor, is linked to the program step. Anyone with access to the engagement sees who sent it, when and the recorded hash.

Illustrative screens with fictitious data.

Aligned with the standards you answer to

A cycle modeled on the Global Internal Audit Standards (IIA, 2024), with regulatory profiles for BACEN (CMN Res. 4,879/2020) and ANS (RN 518/2022). When more than one regulator applies, the platform combines their requirements.

The AI suggests, the auditor decides

Mesh Intelligence proposes work programs based on previous audits and drafts findings, seeing only what the auditor can see. Nothing enters the work paper without approval, and every accepted suggestion is recorded.

Fits with

Questions from auditors

Can I use my audit methodology?

Yes. Programs, finding rating criteria and risk matrices are configurable. The default structure follows the IIA Global Standards, and you adapt it to your department's manual.

Does the audited area need a license to send evidence?

No. Whoever answers a request only accesses that request, at no user cost. The auditor still sees everything in the work paper.

See MeshAudit with a case from your industry

The demo is led by the founder, who has seven years of internal and external audit experience.

Modules are licensed separately. The platform comes with all of them.