Onspring vs Workiva Audit Management

Onspring is business process automation software for Governance, Risk and Compliance; Audit and Assurance; Vendor Management; and Legal. It describes its platform as a no-code system for automating governance, risk, and compliance management. Teams can build single-path and multi-path workflows across teams, while scheduled or ad hoc surveys deliver dynamic risk assessments, attestations, and compliance questionnaires. Reporting presents data in real-time tables, graphs, and maps that users can drill into for detail. Integrations connect Google Drive and OneDrive files, push Jira projects or issues, support Microsoft 365 document collaboration, and start Slack messages or workflows. Onspring also provides an API Planning Worksheet for integration planning. Security details include an annual SOC 2 Type II attestation and CSA STAR Level One; Onspring GovCloud is FedRAMP Class C Certified. The company says it conducts tests on public-facing networks and web applications and on non-public infrastructure. Platform levels range from Bronze to Platinum, with support coverage varying by level. Users and products are licensed separately, and Onspring AI requires Silver or higher. Pricing is on request.

Workiva Audit Management supports internal audit teams with audit planning, testing, evidence collection, issue tracking, and remediation. Its workflows include AI-driven features, pre-built frameworks, and testing automation. Audit Analytics can examine complete data populations to identify anomalies, errors, potential fraud, and trends for investigation. Teams can adopt and track conformance with the IIA Global Internal Audit Standards. Workiva says each plan includes more than 70 connectors, such as Oracle, Salesforce, Workday, and BlackLine, plus open APIs; iOS and Android mobile apps are also included. Plans have unlimited seats or users, but pricing and packaging are tailored to organizational needs and prices are available on request. Workiva lists SOC 1 Type II, SOC 2 Type II, ISO/IEC 27001:2022, CSA STAR, and FedRAMP Moderate credentials. It states that data is encrypted at rest using AES 256-bit encryption and that contracts include a 99.5% uptime commitment. Global technical support is available 24/7/365, alongside Customer Success Managers and learning resources. Workiva connects audit workflows with finance and risk on a shared platform.