- When you need extensive public proof before engaging
- If procurement requires publicly verifiable certifications (SOC 2 / ISO) and published case studies/reviews, the vendor's public evidence appears limited.
- When you primarily need an established, end-to-end audit management suite today
- If primary requirements include audit planning, workpaper management, remediation workflow, and board reporting with mature, out-of-the-box workflows, incumbent platforms may be a more straightforward fit.
- When your controls are mostly narrative and not data-testable
- If the environment lacks clean system data to support executable control tests, the benefits of programmatic control definitions will be limited.
- When you cannot operationalize agent-generated change
- If you cannot staff review and approval processes for frequent control logic changes, automation could increase governance risk rather than reduce it.
- Current limitations acknowledged in public material
- The vendor's public pages do not list explicit product limitations.
- Roadmap items
- Not publicly documented on vendor pages captured during this research.
- Scale limitations
- Not publicly documented.
- Security or compliance gaps
- Publicly visible gaps (as of August 8, 2026): no publicly available SOC 2 / ISO certificates and no detailed security whitepaper or controls list.
- API limitations or integration constraints
- Not publicly documented; verify available connectors and API maturity during procurement.