OpenWorkpaper vs Workiva Audit Management
OpenWorkpaper
openworkpaper.comWorkiva Audit Management
workiva.comSide by side
| Figure | OpenWorkpaper | Workiva Audit Management |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 2 |
| Spec score · Audit Management Software | 8.4 (#3) | 7.7 (#10) |
| Security controls | The security policy describes HSTS, TLS 1.2+, secure HttpOnly SameSite cookies, DOMPurify sanitization, CSP guidance and SAST/DAST scanning. | Listed controls include SSO with SCIM, IP restrictions, geofencing, two-factor authentication, session management, activity logging, granular permissions and customer-managed keys. |
| What it does | OpenWorkpaper is an open-source web application for documenting audits through planning, fieldwork and reporting. | Workiva is a cloud platform that connects data, workflows and reporting for finance, audit, risk and sustainability teams. |
Plans
Workiva Audit Management
- Customized Workiva planPriced on request
- Workiva customized pricingPriced on request
In their own words
OpenWorkpaper
OpenWorkpaper is an open-source web application for documenting audits from planning through fieldwork and reporting. Its task dashboard lists active audits, assigned procedures, and pending reviews. A centralized request area handles client information requests and master PBC spreadsheet uploads and downloads. Procedures can record purpose, source, scope, methodology, results, conclusions, and reviewer comments, with PDF, Word, Excel, and PowerPoint attachments. Audit programs export to Word, and automatic numbering organizes groups, procedures, and attachments hierarchically. Collaboration includes assignments, team management, discussions, and preparer and reviewer sign-offs. Role-based access combines system roles with audit-specific teams. OpenID Connect works with Microsoft Entra ID, Okta, and Keycloak. The project documents HTTPS through Nginx and SSL/TLS certificates and records sensitive actions in audit logs. It supports local, private-network, and cloud deployment with a portable SQLite database. The free open-source plan is free.
Workiva Audit Management
Workiva Audit Management supports internal audit teams with audit planning, testing, evidence collection, issue tracking, and remediation. Its workflows include AI-driven features, pre-built frameworks, and testing automation. Audit Analytics can examine complete data populations to identify anomalies, errors, potential fraud, and trends for investigation. Teams can adopt and track conformance with the IIA Global Internal Audit Standards. Workiva says each plan includes more than 70 connectors, such as Oracle, Salesforce, Workday, and BlackLine, plus open APIs; iOS and Android mobile apps are also included. Plans have unlimited seats or users, but pricing and packaging are tailored to organizational needs and prices are available on request. Workiva lists SOC 1 Type II, SOC 2 Type II, ISO/IEC 27001:2022, CSA STAR, and FedRAMP Moderate credentials. It states that data is encrypted at rest using AES 256-bit encryption and that contracts include a 99.5% uptime commitment. Global technical support is available 24/7/365, alongside Customer Success Managers and learning resources. Workiva connects audit workflows with finance and risk on a shared platform.