Features
Auditor portal and audit export
The audit is coming up. Instead of collecting evidence by email, you invite the auditor, who finds everything in one place, time-limited and logged.
Before every audit the same: hunting for evidence, packing folders, questions by email, and in the end nobody knows which version the auditor saw.
For your company
Invite instead of packing folders
Administrators invite auditors to exactly one audit, free of charge and without a seat, up to 5 per audit. You confirm every invitation with your second factor.
Read only, this audit only
Auditors see the frameworks of the audit and, if you want, only approved versions. Risks, assets, tasks, incidents, suppliers and your team stay invisible, and so do internal notes.
Ends by itself
An access is valid for at most 90 days and can be extended once. On the end date it is over, without anyone having to remember.
Every look in the log
The auditor log shows which pages the auditor opened; every download is recorded there too. You can also switch downloads off entirely.
For auditors and audit firms
Request list from templates
For ISO 27001, NIS2 and IEC 62443 or by import. Every request becomes a task at the customer, and the answer comes back in the same place.
Samples anyone can recompute
The population is frozen with a checksum before the draw. The sample record can be recomputed offline, and a new draw needs a reason.
All engagements in one place
With their own auditor account, auditors see all their audits with different customers under “My audits”; an audit firm manages its members itself.
Closing with a sealed hand-over
The customer accepts proposed findings into the register or rejects them with a reason. The closing report is filed as a PDF with the evidence, together with a hand-over package with checksums. In the following year the customer takes the request list over.
Audit export: everything in one file
For auditors who prefer to work offline, or for your own archive.
One package, numbered folders
Projects, documents, actions, incidents, risks, assets, evidence and further registers in 14 fixed folders, according to the read permissions of the person exporting.
Encrypted and single use
Complass builds the package in the background and encrypted. The download link arrives by email, valid for seven days and only once.
Provably unchanged
A manifest with checksums shows that the package is unchanged; you verify this in the portal with “Check package”.
Frequently asked questions
Does an auditor access cost extra?
No. Auditor accesses are free and take no seat. A company can grant up to 25 at the same time.
Does the auditor need a second factor?
Yes. Auditors sign in like everyone else, with a password and a second factor.
Does the auditor portal replace the audit?
No. It replaces email threads and ZIP files. The audit and its result stay with the auditor.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.