FAQ
Frequently asked questions.
Overview
What is the Audit & Risk Platform?
The ThinkFinancials Audit & Risk Platform is a unified workspace for internal audit teams to structure their audit universe, assess risk, build a risk-based annual plan, execute engagements, document evidence, manage findings, follow up on remediation, and report results to management — in one system instead of spreadsheets, documents and email.
Who is the platform for?
Chief Audit Executives, Internal Audit Directors and Managers, internal audit teams, and risk, compliance and governance professionals who need a defensible, auditable process from planning through follow-up.
What does the platform cover end to end?
The full internal audit lifecycle: Audit Universe, Risk Assessment, Annual Audit Planning, Engagements, Audit Programs, Working Papers, Findings, Follow-Up, and Dashboards & Reporting — with Audit Intelligence assisting with drafting at several of those stages.
Audit Intelligence
What is Audit Intelligence?
Audit Intelligence is the AI-assisted capability of the Audit & Risk Platform. It drafts and refines audit and risk content, such as risks, findings, engagement objectives and scope, audit programs, and report narrative. Every output is labelled as an AI-generated draft. Your auditors review and edit it, and they make the decisions.
Which workflows does Audit Intelligence support?
Risk drafting from a short title; finding generation from a template and the facts you observed; refinement of engagement objectives and scope; generation and review of audit programs; and narrative drafting for the audit report and for an executive presentation.
Does Audit Intelligence automate the audit or approve findings?
No. Audit Intelligence drafts and suggests. It does not approve findings, issue reports or make audit conclusions, and it does not automate every audit activity. A proposed conclusion is not the audit conclusion until an auditor confirms it. For example, AI drafts presentation narrative but does not create the slides.
Can Audit Intelligence generate or review an audit program?
Yes, as an AI-assisted capability. Audit Intelligence can help draft an audit program of proposed procedures for an engagement, and can review an existing or generated program to support your evaluation and refinement of those procedures. A generated program is checked against the platform's validation rules, then you can edit and reorder the procedures and save it to the engagement. It does not execute the audit or perform testing. Your auditors must review and validate every proposed procedure before it is used.
Is AI-generated content accurate?
Not necessarily. AI-generated content can contain errors or omissions, so we do not promise accuracy. Drafts are labelled, flag missing information and unverified statements, and must be checked against your evidence before use. A draft is only as good as the facts and evidence you supply; where evidence is limited the draft says so.
What happens before an AI draft is saved?
Nothing is saved automatically. You choose which parts of a draft to apply, edit them, and save explicitly. For findings you confirm that you have verified the facts and evidence, and the finding is saved with status Draft rather than issued to management.
Does AI create the report or the presentation?
Audit Intelligence can draft the narrative text for an audit report or an executive presentation. The platform then offers draft Word and PDF export for reports, and draft PowerPoint and PDF export for presentations. AI does not generate or design the slides.
How do I see Audit Intelligence or check availability for my package?
Audit Intelligence is included in the Professional and Enterprise packages and is not included in Starter. Book a demo or contact the ThinkFinancials team, and we will show you the workflows and confirm what applies to your organization.
Audit Universe
How does the platform structure the audit universe?
Organizations are broken down into departments, business units and auditable entities, giving every audit a clear, structured scope instead of an ad-hoc list.
Risk Assessment
How does risk assessment work?
Risks are recorded in a risk register, scored against auditable entities, and visualized on risk matrices and heatmaps so audit leadership can see exposure at a glance and prioritize accordingly.
Audit Planning
How does risk assessment inform the annual audit plan?
Risk scores from the risk assessment feed directly into annual audit planning, so higher-risk entities are prioritized and the resulting plan can be defended to the audit committee on the basis of evidence, not guesswork.
Audit Programs
What is an audit program in the platform?
An audit program is the structured set of procedures and test steps executed within an engagement, giving every audit a consistent, repeatable methodology.
Working Papers
How is evidence documented?
Working papers are attached to each engagement and procedure, centralizing evidence and testing documentation in one auditable record instead of scattered files.
Findings
How are findings tracked?
Findings are logged with severity and ownership, linked to a management action plan describing the agreed remediation.
Follow-Up
How does follow-up work?
Follow-up reviews and follow-up actions track remediation progress against each management action plan until the finding is closed, keeping owners accountable.
Dashboards
What visibility do dashboards provide?
Dashboards and the Reporting Center give management and the audit committee a live view of plan status, risk exposure and open findings, without waiting on a manually built report.
Multi-tenancy
Is my organization's data isolated from other tenants?
Yes. The platform is built as a multi-tenant system with tenant-level data isolation, so one organization's audit data is never mixed with another's.
Security
How is access controlled?
Authentication runs through an OIDC identity provider, with role-based access control and granular permissions governing what each user can see and do. See our Security page for details.
Evaluation
How can I evaluate the platform?
Start with the guided product tour on this site, then contact the Think Financials team to discuss your requirements. We'll walk you through the platform, help you identify the right package and licensed quantity, and arrange onboarding through our existing process. There is no self-service sign-up at this stage.
Deployment
Can the platform run on our own infrastructure or in a specific region?
For organizations with specific infrastructure, data-residency or governance requirements, dedicated deployment and customer-specific hosting arrangements — including dedicated application and database environments where appropriate — can be discussed as part of an Enterprise or tailored engagement. These are evaluated with our team as part of a commercial arrangement rather than automated self-service features, and are not automatically included in a package. Contact us to discuss your requirements.
Demo
How long is the product demo?
The guided product tour is approximately three minutes and walks through the full lifecycle, from audit universe and risk assessment to findings, follow-up and reporting.
Pricing
How does pricing work?
There are three packages: Starter, Professional and Enterprise. Starter is USD 20 per user per month and Professional is USD 30 per user per month. Enterprise is tailored — Contact us. Pricing is per user per month: you choose the number of user licenses you need and pay the per-user price for that quantity. You can choose monthly or annual billing on the pricing page — annual is invoiced once per year and discounted against the monthly per-user price. Prices are set in USD; on the pricing page you can view them in a range of currencies, converted from the USD list price using published exchange rates. Published pricing is informational — to subscribe or discuss quantities, contact the Think Financials team.
How does user licensing work?
Packages are priced per user per month. You select the number of user licenses you need and are billed for those licenses. Your organization can have up to that number of users. If you need more, you can increase your licensed quantity through Billing. If a user is archived or made inactive, that license becomes available for another user. Packages are not sold as a fixed number of seats — you choose the quantity, and the package itself only determines which features are available.
What's the difference between Starter, Professional and Enterprise?
Starter is for organisations that need structured risk management and audit planning (Audit Intelligence is not included): risk management, risk assessment, risk appetite, risk tolerance and materiality, the Risk dashboard, the Audit Universe, annual audit planning, a limited Chief Internal Auditor dashboard and limited Executive dashboard, standard risk and planning reports, and user and role management. Professional adds the broader audit management and execution lifecycle — audit programs, audit engagements, working papers and audit execution, findings management, follow-up management — plus advanced audit and risk dashboards, the enhanced Chief Internal Auditor and Executive dashboards, advanced reporting and analytics, management and executive reporting, Audit Intelligence (AI-assisted drafting) and enhanced configuration flexibility. Enterprise provides the comprehensive platform plus advanced enterprise analytics and reporting, advanced governance and oversight, enterprise-level and bespoke configuration, enterprise onboarding and implementation support, dedicated deployment options where required, enhanced security and deployment arrangements, and a custom requirements assessment.
Does buying a package give every user full access to the platform?
No. Your subscription determines the features available to your organization, while user roles determine what each individual user can access within those features. The first Tenant Administrator can administer the tenant, but access always remains subject to the features included in your package.
Can I get dedicated infrastructure or enhanced security?
Dedicated server infrastructure and enhanced security, isolation and deployment arrangements can be discussed with our team as part of an Enterprise or tailored engagement. These are agreed for availability, configuration and pricing as part of a commercial arrangement — they are not automatically included in a package. Contact us to discuss your requirements.
See the Audit & Risk Platform in action.
Watch the demo or talk to the team to see how the platform fits your audit function.
Prefer a live walkthrough? Book a demo