AuditBoard (now Optro) vs OpenWorkpaper

AuditBoard, now Optro, is a paid AI-powered GRC platform connecting audit, risk, information security and compliance work. Optro AI uses GRC-focused models, configurable oversight and audit trails for AI activity. Audit workflows can assist with planning, sampling, evidence gathering, document annotation and continuous testing, while Optro Analytics schedules automated workflows and checks full data populations for control failures. A preloaded library contains more than 30 frameworks, including SOC 2, ISO 27001 and GDPR. Listed integrations include Power BI, Tableau, Oracle NetSuite, Workday, Paylocity, Jira, ServiceNow, Azure DevOps, Microsoft Teams, Slack, Google Drive and Microsoft Office. Access options include REST and SCIM APIs, an MCP server and secure PostgreSQL access to Optro data. Optro says its information security program is ISO 27001 certified and its application runs on cloud infrastructure meeting FedRAMP Moderate requirements. It says customer data is not used to train Optro AI or other models, with customers retaining control and ownership of inputs and outputs. Pricing is on request; flexible plans are tailored to business needs and include unlimited stakeholder licenses.

OpenWorkpaper is an open-source web application for documenting audits from planning through fieldwork and reporting. Its task dashboard lists active audits, assigned procedures, and pending reviews. A centralized request area handles client information requests and master PBC spreadsheet uploads and downloads. Procedures can record purpose, source, scope, methodology, results, conclusions, and reviewer comments, with PDF, Word, Excel, and PowerPoint attachments. Audit programs export to Word, and automatic numbering organizes groups, procedures, and attachments hierarchically. Collaboration includes assignments, team management, discussions, and preparer and reviewer sign-offs. Role-based access combines system roles with audit-specific teams. OpenID Connect works with Microsoft Entra ID, Okta, and Keycloak. The project documents HTTPS through Nginx and SSL/TLS certificates and records sensitive actions in audit logs. It supports local, private-network, and cloud deployment with a portable SQLite database. The free open-source plan is free.