Punchcard

Spec sheet

Product

Punchcard organizes audit client requests and tasks, while CoAudit prepares reviewable workpapers with reasoning and citations.Read 8 Oct 2026 · punchcard.com

Intended users

Punchcard describes its users as CPA firms running assurance engagements and in-house operational, financial, and IT audit teams.Read 8 Oct 2026 · punchcard.com

Integrations

The maker describes CoAudit working in Excel and Word and its changelog documents a Karbon integration.Read 8 Oct 2026 · punchcard.com

Security

Punchcard states it is SOC 2 certified and GDPR compliant, with TLS 1.3 in transit and AES-256 encryption at rest.Read 8 Oct 2026 · punchcard.com

Support

Punchcard says it will acknowledge reported security vulnerabilities within one business day and provide investigation updates.Read 8 Oct 2026 · punchcard.com

Headquarters

Provo, Utah, United StatesRead 28 Sep 2026 · punchcard.com

Company

Punchcard says its company, Substantive AI, is based in Provo, Utah; the company's LinkedIn page lists its founding year as 2023.Read 8 Oct 2026 · punchcard.com

Access controls

The security page describes role-based access reviews, single sign-on, and mandatory multi-factor authentication for internal accounts.Read 8 Oct 2026 · punchcard.com

Availability

The public site invites visitors to book a demo and does not list plan prices on the opened product pages.Read 8 Oct 2026 · punchcard.com

CoAudit

CoAudit works across Punchcard, Excel, and Word to analyze evidence, perform procedures, and prepare source-linked workpapers.Read 8 Oct 2026 · punchcard.com

Encryption

The security page specifies TLS 1.3 in transit and AES-256 at rest.Read 8 Oct 2026 · punchcard.com

Evidence workflow

Each punchcard keeps the request, evidence, procedure, agent reasoning, citations, and reviewer sign-off together.Read 8 Oct 2026 · punchcard.com

External audit customers

The external audit offering is aimed at CPA firms running assurance engagements and includes structured client requests, evidence collection, substantive testing, and workpaper preparation.Read 8 Oct 2026 · punchcard.com

Financial statement review

Financial Statement Review ties balances to the trial balance, checks disclosure completeness, and identifies inconsistencies between notes and numbers.Read 8 Oct 2026 · punchcard.com

Human review

Auditors can inspect reasoning, validate or override results, comment, and sign off; the maker says professional judgment stays with the auditor.Read 8 Oct 2026 · punchcard.com

Internal audit customers

The internal audit offering targets operational, financial, IT, and SOX-controls testing teams.Read 8 Oct 2026 · punchcard.com

Product support

The site invites prospective customers to book a demo and bring a real client request or audit procedure for a walkthrough.Read 8 Oct 2026 · punchcard.com

Request workflow

Teams can create structured evidence requests with selections, support types, and fields to extract.Read 8 Oct 2026 · punchcard.com

Review

Auditors can inspect citations, validate or override results, comment, and sign off while retaining professional judgment.Read 8 Oct 2026 · punchcard.com

Security support

Punchcard says it will acknowledge reports sent to [email protected] within one business day.Read 8 Oct 2026 · punchcard.com

Testing

CoAudit reads evidence, extracts fields, runs procedures, and prepares source-linked workpapers with reasoning.Read 8 Oct 2026 · punchcard.com

Workpaper testing

The Workpaper workflow matches selections to supporting evidence, tests assertions with tolerances, and attaches reasoning traces and source citations to cells.Read 8 Oct 2026 · punchcard.com

Where Specifiction places it

• External Audit Software#25 of 296.7