What we do

Four delivery lines, two advisory lines

Capabilities that modernise your assurance – plus two advisory lines that govern the tools you already have and turn stakeholder engagement into risk intelligence. Every engagement includes knowledge transfer, so your team owns what we deliver.

Terms

Working with us

Engagement basis

Outside IR35, fixed-fee statement of work – no day-rate staffing arrangements

Indicative first engagement

Diagnostic from £1,500, fixed fee

Knowledge transfer

Documentation and upskilling are included in every engagement, not an add-on

Location

Based in Edinburgh, Scotland; works remotely across the UK and on site as required

Continuous Assurance & Controls Monitoring

We design and build always-on control monitoring: data feeds from your source systems, blended and scored, with exception logic that surfaces breaches automatically and routes them to the right auditor – moving you from periodic samples to full-population coverage

Microsoft FabricPower BIDataflowsPower Automate

GenAI for Internal Audit

Practical, governed LLM and vision AI across the audit lifecycle – document and policy review, risk assessment, fraud indicators, QA and reporting. We deploy it safely for regulated environments, with a human in the loop by design.

Generative AIDatabricksRAGVision

Audit & Analytics Automation

We automate the audit operating model – follow-ups, request management, incident summarisation and reporting – so your team spends its time on judgement, not admin. Built on the Microsoft and Alteryx stack you already run.

Power AutomateAlteryxPythonSharePoint

Process Mining & Process Intelligence

We reconstruct how a process actually runs from its event data – not how the flowchart says it does. Expose variants, rework loops and control gaps, and quantify the case for change with evidence, not anecdote.

SnowflakeProcess MiningEvent logs

Self-Service Analytics Assurance

Business-built Alteryx workflows, Power Automate flows, Power BI models and Python scripts now run critical processes – usually outside any formal development lifecycle. We review the estate for logic errors, hidden control weaknesses, key-person risk and missing documentation, and put the governance in place to keep it audit-ready. Assurance over the tools, not just building with them.

Long-standing research finds ~88% of business spreadsheets contain errors – that's the estate you're not testing. Panko / EuSpRIG
Alteryx reviewPower Automate reviewPythonEUC governanceData lineage

Stakeholder & Risk Intelligence

Audit teams meet the business on a schedule – but those meetings are often run ad hoc: sessions slip, notes never get written up, and the insight ends up scattered across individual notebooks and laptops. We build a single tracker for the whole relationship model – stakeholders, tasks, follow-ups and notes in one place – with an AI layer reading across the notes to surface emerging risks and recurring themes. It turns everyday stakeholder contact into a live input for audit planning and risk assessment: the soft-signal complement to continuous controls monitoring.

Engagement trackerAI note insightsRisk signalsAudit planningPower Platform
Internal audit

Co-sourced Internal Audit

FCCA-led internal audit capacity that works alongside your in-house team. We take on audits from your plan and deliver them to your methodology and reporting standards – and bring data analytics into every one, testing whole populations where your data allows rather than defaulting to samples. Your function keeps ownership of the plan and the opinion; we add capacity and capability.

Co-sourcingInternal auditData analyticsFull-population testing

More on co-sourced internal audit →