Questions we are often asked.

AuditHD is software for planning and running audits, quality reviews and compliance assessments, and for following findings through to closure. It is used by internal audit and QA teams in banks, by external audit firms, and by ISO and CMMI consultancies.

A ready-made set of one country's regulatory content: its regulators' frameworks and rules described requirement by requirement, audit checklists, the calendar of recurring regulatory deadlines, record-retention periods and rating rules. Packs are available for Pakistan, Saudi Arabia, the UAE, Bahrain, Qatar, Kuwait, Oman, the European Union and the United States. You license the packs you need; the International standards pack is included with every licence.

Over a hundred frameworks and regulations across the country packs, for example SBP, SECP and SOE rules in Pakistan; SAMA, NCA, CMA, PDPL and ZATCA in Saudi Arabia; CBUAE and UAE federal law; the CBB Rulebook; QCB and QFMA; CBK and CMA Kuwait; CBO and FSA Oman; GDPR, DORA, NIS2 and the AI Act; and SOX, FFIEC, GLBA, BSA/AML and NYDFS Part 500. International standards include ISO/IEC 27001, ISO 9001:2026, ISO 22301, ISO 37001, ISO/IEC 42001, COSO, PCI DSS, NIST CSF 2.0, CMMI V3.0 and the FATF Recommendations. You can add your own policies and standards as checklists.

Yes. Build them in the checklist builder, import them from a spreadsheet, generate them from framework clauses, or ask the AI to draft one. Templates are versioned.

Yes. The on-premises edition installs on a Linux server with Docker in one command, or as a systemd service. An air-gapped edition installs from an offline package. The SaaS edition is hosted in a region agreed with you.

Only if you allow it. Administrators choose a hosting policy: off, on-premises models only, in-country cloud, or any approved provider. Before text goes to a cloud model, personal data such as IBANs, national IDs and phone numbers is redacted. Every suggestion is logged.

No. It suggests. A person accepts or discards every suggestion, and nothing is issued, closed or changed by the AI on its own.

Yes. The interface is fully bilingual with right-to-left Arabic, and reports can be generated in English or Arabic.

Yes. It installs from the browser on any phone or tablet, works offline in the field, and syncs when the connection returns. Auditees can respond to findings from their phones.

Every file is fingerprinted with SHA-256 on upload and checked on download. All changes are written to an append-only audit trail in which each entry is linked to the one before, so alterations are detectable.

Per audit-team user, plus the country packs you choose. Auditees and read-only viewers are free and unlimited. On-premises licences are signed files that work offline and list the licensed packs.

Every function is available through a REST API described in OpenAPI, so it can be linked to ticketing, GRC or reporting tools.

SMH Global Services, an IT solutions company founded in 2013, with offices in the United Arab Emirates, Pakistan and Saudi Arabia. It builds banking platforms, enterprise software and regulatory compliance solutions for banks and large enterprises.