AI across the audit lifecycle,
with your auditors in control

  • Verity, your AI assistant: answers questions on ISO standards and on your own applications, audits and auditors.
  • Stage 1 document review: client documents checked before the audit, with missing evidence flagged per clause.
  • Human oversight by design: suggestions are reviewed, overrides are always possible and logged next to the original values.
Verity, Your AI Assistant
Online
Example view
Which evidence is still missing for this client's Stage 1 review?
Three items need evidence before Stage 1 (ISO/IEC 27001):
Clause 5.2 Information security policy: no document uploaded
Clause 6.1.2 Risk assessment: last version older than 12 months
Clause 9.2 Internal audit: no report found
REQUEST DOCUMENTS
EDIT
Reviewed by your auditor. Every change is logged next to the original value.

AI at every step of the audit

AI in TIC OS works inside the certification body software your team already uses. It reads, checks and drafts, so auditors spend their time on judgement, not on paperwork.

01 Application

Application chatbot

Helps clients with fields such as sites, sectors and repetitive roles, and runs a check before submission.

02 Stage 1

Document review agent

Reviews client documents before the audit and flags missing evidence per clause.

03 Preparation

Suggested audit questions

Suggests questions where evidence is missing, based on the expectations you configure.

04 Fieldwork

Clause tagging and findings

Tags audit notes to clauses and controls, and suggests findings created directly from snippets.

05 Reporting

One click draft reports

Draft reports with executive summary, scope and findings, built from the data captured during the audit.

Always on

Verity, your AI assistant

Answers questions on ISO standards and on your own applications, audits and auditors.

From document review to draft report

Stage 1 starts with complete evidence

The document review agent reads what the client uploaded, maps it to the clauses of the standard and shows what is missing or outdated. Your auditor requests the gaps before the audit instead of discovering them on site.

  • Evidence status per clause: found, missing or needs review
  • Document requests sent to the client from the same view
  • Works for every standard and scheme you configure
Stage 1 document review
Example view
4.3 Scope of the ISMS
Found
5.2 Information security policy
Missing
6.1.2 Risk assessment
Needs review
9.2 Internal audit
Missing
Audit note
Example view

Supplier changes in production are agreed by phone. No written approval was shown for the last two changes.

ISO 9001 Clause 8.1
ISO 9001 Clause 8.4
Suggested finding
Minor nonconformity: changes to externally provided processes are not approved in writing.
ACCEPT
EDIT
REJECT

From field notes to findings

During fieldwork, AI tags notes to the clauses and controls they relate to and suggests questions and findings based on the expectations you configure. The auditor accepts, edits or rejects each suggestion.

  • Notes linked to clauses across all standards in an integrated audit
  • Findings created directly from snippets
  • Nonconformities linked across clauses, with corrective action deadlines

A draft report the day the audit closes

One click turns the audit data into a draft report with executive summary, scope and findings. It then moves through your review and approval steps like any other document.

  • Built from the data captured during the audit, not from a blank page
  • Your report templates and report language per client
  • Review, approval and version history before the certification decision
Draft audit report
Draft
Executive summary
Scope
Findings
Minor NC
Observations
Draft
›
In Review
›
Approved
›
Generated

Human oversight, built in

Accreditation bodies increasingly ask how certification bodies validate, oversee and disclose their use of AI. TIC OS keeps people in charge of every decision and keeps the record your assessor will want to see.

Suggestions, not decisions

AI drafts and suggests. Auditors, reviewers and decision makers accept, edit or reject.

Overrides, always logged

Manual overrides are always possible, and each adjustment is stored next to the original value.

A complete audit trail

Every action is logged with timestamp and IP address and can be exported for accreditation assessments.

Ready for the new standards

ISO/IEC 17024:2026 already requires human oversight of AI.

See the transition dates

Your audit data stays yours

AI in TIC OS runs on infrastructure in the EU, and your client data is never shared with model providers.

AWS Bedrock in Frankfurt
AI processing in the EU
No model provider access
Model providers have no access to customer data
EU hosting by default
Self hosting available
ISO/IEC 27001 certified
AuditOne GmbH, Cologne
Encrypted
In transit and at rest
Role based access
With two factor login

See TIC OS AI on your own audits

We walk you through document review, suggested findings and draft reports with one of your standards.

x
Twitter
Medium
LinkedIn
YouTube