Packs

Ready-made packs for your country, your industry and your export markets.

Pick your industry — banking, insurance, textiles and apparel, food and beverages, manufacturing, the public sector — and AuditHD puts the right content first. Country packs load one jurisdiction's regulators; industry packs load the standards, buyer codes and domestic rules of your sector; market-access packs load what an exporter must meet to sell into the EU, the UK, the United States or the Gulf. Each pack brings frameworks, checklists ready to run, a calendar of deadlines, record-retention periods and rating rules. International standards come with every licence.

17country, industry and market-access packs
165frameworks and regulations
80ready-to-run checklists
266recurring regulatory deadlines

Industry packs — for manufacturers and exporters

Market-access packs — what importing countries require

Country packs — Gulf Cooperation Council

Country packs — South Asia, Europe and the Americas

Included with every licence

Inside AuditHD.

Set your organisation's industry once, and Library → Packs shows the packs and frameworks that apply to it first, what your organisation has licensed and what each pack holds. Open a pack for its regulators, frameworks, checklists, regulatory calendar and retention rules, and apply its reporting conventions to your rating methodology in one step.

The Saudi Arabia pack in AuditHD: regulators, who it applies to, reporting conventions and frameworks with their verification status.
The Saudi Arabia pack, as an administrator sees it.

What is in a pack.

The same six parts in every pack, so a group that operates in several countries or sells into several markets works the same way everywhere.

Frameworks and regulations

Each regulator's instruments, with their own article and section numbers where confirmed, a plain-language description of every requirement and a link to the official text.

Checklists ready to run

Audit programmes built on those requirements: internal audit function reviews, AML/CFT independent testing, Shariah compliance audits, ICFR, cyber, data protection and governance reviews.

Regulatory calendar

The recurring deliverables: annual opinions, committee reports, independent reviews, external quality assessments, certifications and incident-notice deadlines, with who requires them.

Record retention

How long AML records, audit working papers and other records must be kept under each regime, so retention settings match the strictest rule that applies.

Rating rules and conventions

Regulators' rules on rating findings, such as SAMA's default high rating for breaches of its instructions, and reporting conventions: Arabic, Urdu, Hijri dates and Arabic-Indic digits.

Kept current

Each pack carries a content version and review date. Items checked against the regulator's own publication are marked, and updates arrive with your subscription or maintenance.

Who the packs cover.

  • Banks and Islamic banks: governance, internal audit, compliance, operational risk, AML/CFT, cyber, outsourcing, business continuity and Shariah governance.
  • Lenders and other financial institutions: finance companies, microfinance banks, NBFCs, insurers, payment providers and exchange houses.
  • Listed companies: corporate governance codes, audit committees and internal control over financial reporting.
  • State-owned and large enterprises: data protection, national cybersecurity rules, anti-bribery and e-invoicing.
  • Textile, apparel and leather exporters: the social compliance audits buyers demand (amfori BSCI, Sedex SMETA, WRAP, SA8000, Higg), chemicals and product safety (OEKO-TEX, ZDHC, GOTS, GRS), environment and the Pakistani labour and factory rules those audits test.
  • Food and beverage manufacturers: Codex HACCP, ISO 22000, FSSC 22000, BRCGS, IFS, SQF, halal, provincial food-authority licensing, traceability, recall and allergens.
  • Exporters to the EU, the UK, the United States and the GCC: REACH, GSP+ and DCTS origin, the Deforestation and Forced Labour regulations, CSDDD and LkSG questionnaires, FSMA, UFLPA, CPSC and FTC rules, SFDA, SABER, GSO and halal recognition.
  • Audit and consulting firms: every pack, for every client industry.

How licensing works.

  • International standards (ISO, COSO, PCI DSS, NIST, FATF and more) are included with every licence.
  • License one country pack or several. A group with operations across the GCC, South Asia, Europe or the US licenses each country it reports to.
  • Packs you have not licensed stay visible in the library, locked, so you can see what they contain.
  • On-premises and air-gapped licences list the packs inside the signed licence file, so nothing needs to call home.

Pricing

Regulator text and verification.

AuditHD does not reproduce regulators' or standard-setters' wording. Requirements are identified by their official numbers and titles and described in our own words, with a link to the official text. Organisations that hold a licence for the official wording of a standard can load it into their own private copy.

Regulations change. Every framework, deadline and retention rule in a pack shows whether it has been checked against the regulator's own publication, and each pack lists what is still being confirmed. Content version 2026.10, reviewed 27 October 2026.

See it with your own checklists.

Open the live demo now, or book a walkthrough and we will load one of your frameworks or work programmes.