Contact Book a call

Audit-ready

Record approvals as the work happens, so an audit is an export.

When an auditor or a large customer asks who approved a payment or changed a price, the answer is often buried in email or a WhatsApp group. We move approvals and changes into tools that record who did what and when, under named logins, and keep the log where you can export it.

For finance, compliance and operations leads preparing for audits, certifications or customer due diligence.

0

shared or demo logins, for a consulting firm’s internal tool

Read how it was measured

Before and after

What changes in a normal week.

Today

  • Approvals are given by reply-all, and the evidence is spread across inboxes.
  • Several people share one login, so changes cannot be traced to a person.
  • Before an audit someone spends days collecting screenshots and emails.
  • Nobody can say for certain which version of a policy applied last March.

After the build

  • Each approval is a recorded step with the approver, the time and the document attached.
  • Each person has their own account, and their role limits what they can change.
  • The evidence an auditor asks for comes out of the log as a filtered export.
  • Policies and templates are versioned, with the date each version took effect.

What we build

The systems behind the change.

Built in your accounts, at a fixed price agreed after the audit. Builds start at $1,500.

  • Approval workflows with a record

    Purchases, payments, discounts and contract changes approved in a tool that stores who approved, when and on what basis.

  • Named logins and roles

    Shared accounts replaced with invited users, with permissions enforced on the server.

  • Change log

    Edits to prices, customers and other key records logged with before and after values.

  • Evidence export

    The log filtered by date, person or record and exported in the format your auditor wants.

    Google Sheets

How it starts

Three steps, each with a price.

  1. 01Discovery call

    Thirty minutes on the work your team does by hand. Free, and you leave with a yes or no on fit.

  2. 02Automation Audit, $500

    One to two weeks with the people who do the work. Each fix gets hours saved and a fixed price. Credited to the build.

  3. 03Build, from $1,500

    Two-week sprints in your accounts, then 60 days of hypercare by the same engineers.

Questions

What people ask first.

Does this make us compliant with a specific standard?

No tool can promise that. We build the records your auditor or framework asks for, and your auditor decides whether they meet the standard.

Will approvals slow the team down?

Requests under a limit you set are recorded without waiting for anyone. Only the ones above it need a person, who can approve from Slack or email.

Where is the log stored, and who can change it?

In your own database and accounts. Normal users can add entries but cannot edit or remove them, and we document who has administrator access.

Be audit-ready

Bring one process your team still runs by hand.

On a discovery call we look at how it runs today and tell you what it would take to change it, with a price. The call is free.

Book a discovery call
A team of six gathered around one screen in an open-plan office
A discovery call with the people who own the process.

Cookie preferences

Choose what this site may use on your device. You can change this at any time from “Cookie settings” in the footer.

Strictly necessary

Keep the site working and remember the choices you make here. These cannot be switched off, and none of them track you.

Always on
What this includes (4)
NameProvider PurposeDuration
sbd-consentThis site Remembers your cookie choices12 months
Vercel Web AnalyticsVercel Inc. Counts page views in aggregate. Sets no cookie and stores nothing on your deviceNone
ticker-dismissed, sbd-note-offThis site Remembers that you closed a notice or language tipUntil the tab closes
sbd-voice-resume, sbd-voice-prefillThis site Carries a voice conversation across pages, only if you start oneUntil the tab closes

Analytics

Tell us which pages are read and where visitors leave, so we can improve them. IP addresses are anonymised and nothing is used for advertising.

What this includes (2)
NameProvider PurposeDuration
_gaGoogle Analytics (Google LLC) Distinguishes visitors with a random ID13 months
_ga_FPXDMQPRV1Google Analytics (Google LLC) Keeps the session state for this site13 months

Functional

Embedded services that set their own cookies. Without them the site still works; you get a link to open the service instead.

What this includes (1)
NameProvider PurposeDuration
Booking calendarCal.com Inc. Shows live availability and books the call on the booking pageSet by Cal.com

Advertising

Not used. This site has no advertising, retargeting or social media tracking, and we never sell data.

Not used

Questions about your data: hello@smallbaydigital.com