For CPA firms and auditors
Early accessA dedicated dashboard for CPAs and auditors
The TrustProof Auditor Dashboard gives your CPA or auditor their own sign-in and their own dashboard, separate from your team's workspace. They review only the evidence you release, read-only and for a limited time, after signing in with two-step verification.
Key facts
What you can check
- Two-step verification for auditors
- Auditors must turn on two-step verification (an authenticator app code, with backup codes) and sign in with it before they can see any client evidence.
- Read-only, time-limited, revocable
- Access is read-only and ends on the date the client sets. The client can revoke it at any time.
- Released evidence only
- The auditor sees only evidence the client has released, and each release is an owner sign-off. Never internal notes, other clients or prices.
- Everything logged
- Requests, answers, views and downloads are logged for the audit file. Downloads are possible only when the client allows them.
- SHA-256 sign-offs
- Each owner sign-off pins a SHA-256 fingerprint of exactly what was approved. If the document or decision changes, the sign-off stops counting until it is approved again.
- Write-once evidence
- Each evidence file version is written once and kept. Versions are never overwritten, and evidence is withdrawn and replaced rather than edited.
What TrustProof does
- Gives your firm one login for every client who uses TrustProof
- Organises evidence by requirement, with sign-offs, versions and AWS checks attached
- Keeps evidence requests and answers in one place
- Exports a Statement of Applicability for ISO frameworks
What TrustProof doesn't do
- TrustProof never certifies and does not form or influence your audit opinion. You review, you decide.
- Auditors cannot change client evidence or the client’s AWS account.
- It does not show internal notes, other clients or prices.
For CPA firms and certification bodies
How TrustProof works with auditors, and our independence commitment: no referral fees or commissions, and we never ask auditors to recommend us.
FAQ
Frequently asked questions
How does an auditor get access?
The client invites you by email. You accept with a signed-in TrustProof account whose verified email matches the invitation, turn on two-step verification, then use Auditor sign in.
Can the auditor change anything?
No. Auditor access is read-only. You can view released evidence, make requests and download files when the client allows it, but not change evidence or the client's AWS account.
What does the auditor see?
Only evidence the client has released to your engagement, until the access end date. Internal notes, other clients and prices are never shown.
How do I know a document hasn’t changed since sign-off?
Each owner sign-off pins a SHA-256 fingerprint of exactly what was approved. If the document changes, the sign-off no longer counts until it is approved again.
Does TrustProof issue certificates or reports?
No. TrustProof never certifies. Your firm keeps its independence and forms its own opinion.