Standards and compliance
The standards you audit against, and the rules you run under.
AuditHD carries the frameworks your auditors test, keeps the evidence regulators expect to see, and runs where your data has to stay. This page says what the product does and does not claim.
Frameworks in the product.
165 frameworks and regulations across 17 country, industry and market-access packs. These are described in detail in the framework library:
Data residency and regulation.
AuditHD is designed so you can meet the rules that apply to you. Your compliance function decides how; here is how the product helps.
| Requirement | How AuditHD helps |
|---|---|
| SAMA cloud rules (Saudi Arabia) | Install on your own servers or in an approved in-Kingdom cloud. AI can be limited to on-premises models. |
| Saudi PDPL and similar privacy laws | Personal data is redacted before text reaches a cloud AI model; data stays in the deployment you choose. |
| State Bank of Pakistan and Central Bank of the UAE outsourcing rules | Deployment on infrastructure you choose, with backups and exit under your control. |
| EU AI Act transparency | AI-generated content is clearly marked, and every suggestion is logged with the person's decision. |
| Internal audit standards | Documented evidence, review and sign-off, and a complete trail of who did what and when. |
Internal audit standards
Engagement reports follow the conventions of published internal audit reports and the IIA Global Internal Audit Standards on final engagement communication: an overall opinion, scope and limitations, findings in the condition–criteria–cause–effect–recommendation form with management responses, and a consolidated action plan.
Copyright of standards
ISO, ISACA/CMMI, SAMA and NCA texts are copyrighted. The library ships clause identifiers, titles and paraphrased intent only; organisations that hold licences can load the official wording themselves. The NIST CSF is US-government work and is included in full.
AuditHD has not yet been through an independent security certification, and the product does not claim certification against any standard named on this site. We are glad to support your own assessment or penetration test. We are not a law firm, and nothing here is legal advice.
See it with your own checklists.
Open the live demo now, or book a walkthrough and we will load one of your frameworks or work programmes.