AuditForge

AI-assisted document review engine for audit and advisory firms. Built for partner-trust workflows: the firm reviews and signs off every finding before delivery, the deliverable carries the firm's brand, and every LLM call is logged for procurement-review defensibility.

Live at https://metis-demo.base2ml.com/?view=auditforge.

Who AuditForge is for

Mid-market regional CPA firms and consulting boutiques doing:

• CMMC pre-assessment / SOC 2 readiness gap analysis
• HIPAA Security Rule assessments
• FedRAMP advisory document reviews
• FAR / DFARS / agency contract compliance reviews
• M&A due diligence
• Internal-audit periodic refresh

Specifically firms whose partners want to take on more audit volume but can't proportionally grow their associate bench.

Not a fit: tax-only firms, solo practitioners, Big-4 audit groups (their procurement timeline is years), litigation support (privilege concerns warrant a different approach).

How AuditForge fits in the engagement

1. Firm uploads the client's corpus to AuditForge (5-10 minutes self-serve)
2. AuditForge runs the 7-stage audit pipeline (~5-10 minutes for 50 documents)
3. Findings stream in with verbatim source quotes, root cause, remediation, severity
4. Partner reviews each finding — accept, reject, refine, or edit
5. Deliverable exports as DOCX (with firm branding) / Markdown / JSON / PDF
6. Firm delivers to its client under its own name

The methodology disclaimer baked into every deliverable formalizes the relationship: "[Firm Name] used AI-assisted document review tooling during this engagement. All findings have been reviewed and validated by a senior partner before delivery."

Get started

• Co-delivery one-pager — front-door explanation for partners
• Commercial terms — how engagement and licensing work; tier detail shared under NDA
• Methodology white paper — the document procurement reviewers ask for
• Sub-processors — every vendor that touches customer data

What we connect to

• Data sources — drag-and-drop + CSV bulk import out of the box; Google Drive / SharePoint / OneDrive / Box / Dropbox / CMMS connectors scoped per engagement

Roadmap and changelog

• Public roadmap — what's discussed, in flight, considered, deferred
• Changelog — what's shipped, when

Trust & compliance

• Sub-processors
• Incident response plan (DRAFT)
• Business continuity / DR (DRAFT)

Sales artifacts

• Co-delivery one-pager — for prospect partner firms
• Sales one-pager — partner-firm pitch deck

Agreement templates

Engagement-specific agreements — the Tier A co-delivery agreement, the Tier B and Tier C addenda, and the law-firm trade agreement — carry negotiated pricing and are shared directly under NDA. See commercial terms.

Architecture, API, and per-phase technical docs

The full architecture overview, API reference, mermaid diagrams, operator manual, engine internals, investor brief, and the per-phase engineering history (Phase 0 through Phase 29) live at private.base2ml.com behind basic auth.

Credentials are shared after a signed NDA, pilot agreement, co-delivery agreement, or — for investors — a standard mutual NDA. Email chris@base2ml.com and we'll have you reading within the hour.

Contact

chris@base2ml.com with the kind of engagement you're considering, your firm's audit-volume range, and the rough timeline you're working against. First reply within one business day.