v2.18October 2026Latest Production Release
Evidence in bulk, your own storage bucket, a scoped API — and the app in three more languages
The work around an audit programme: bringing a folder of evidence in at once, keeping files where your policy says they live, and connecting the systems that need to know when an audit fails.
FeatureBulk evidence intake (Growth). Upload a batch of files or a ZIP; text is extracted from plain text, CSV, Excel, Word and PDF files that carry a text layer, with the page, row, cell or paragraph it came from, and each file comes back with suggested control mappings quoting the passage behind them. A person accepts, rejects or reassigns every suggestion — nothing is marked met on its own.
FeaturePhoto evidence on any question. An auditor can attach photographs to a yes/no, a reading, a note or a dropdown, not only to a photo question, on every plan — on the guided form, the phone checklist and a shared link. A template can require a photo on a question, or only when its answer fails (Growth), and the refusal names the question. The photos print under their question in the audit PDF.
FeatureOCR for scanned evidence (Scale and Enterprise, or as an add-on on request). With OCR switched on for a batch, scanned PDFs and photographs are transcribed page by page and then go through the same redaction and suggest-then-accept path. The file itself is sent to the OCR provider, so it is off by default and the batch records who switched it on. Without OCR, scanned pages and photographs go to a person.
SecurityIdentifiers in ingested files — email addresses, phone numbers, Aadhaar numbers, PANs, card numbers, API keys and more — are redacted before any text is stored or sent to a model, and a file that still matches after redaction is held for a person. The model step is opt-in for each batch and is charged in AI credits per file.
FeatureYour own storage bucket for the document vault (Scale): Amazon S3, Cloudflare R2, MinIO, Google Cloud Storage or another S3-compatible service. The connection is tested before it is switched on, and a failing connection refuses uploads rather than storing them with us. It covers new document-vault versions only — earlier files, audit photos, attachments and database records stay with AuditFlow.
FeatureAPI keys (Scale) are limited to named scopes, must expire, can be rotated with a short overlap, are shown once and kept only as a hash, and can never do more than the member who issued them can do today. An OpenAPI 3.1 document describing the API is published at /api/v1/openapi.json.
SecurityWebhooks (Growth) carry a second signature over a timestamp and the body, and an event id that stays the same on every retry, so a receiver can refuse a replay or a duplicate. Retries are now signed too. The original body-only signature is still sent, so existing receivers keep working.
FeatureBuild your own plan: choose Starter, Growth or Scale features and the number of users, and pay per user, with sites, storage, audits and AI credits scaling with the team. The bundled plans now state the users they include.
ImprovementExtra storage is priced on the pricing page, and added only if you choose it. An upload that would go past your allowance is refused with a message saying what more room costs, rather than stored and billed afterwards.
FeatureThe app's menus and all three audit forms are available in Hindi, Spanish and French, and a supplier or contractor answering a shared form picks their own language. Your own question text, PDFs and emails stay as they are.
FeatureThe external auditor portal (Scale) now serves evidence files — nothing by default, only the files you share with that auditor's engagement, on short-lived download links, with every download logged on the engagement page.
SecurityPhoto evidence is checked for plausibility: the server records when each photograph arrived and a SHA-256 of the bytes, and the audit page and PDF flag a capture time after the upload, a photo taken before the audit began, a jump between photos no vehicle could make, or — once a site's location is entered — a photo taken away from it. These are flags for a reviewer, never refusals, and not hardware attestation: a phone's clock and location are claims the device makes.
v2.17September 2026
An audit can now be STARTED with no signal, and owners show up again
The offline queue used to finish an audit that already existed. It can now capture one from scratch — answers, photos and all — and send it when the device reconnects.
FeatureStart an audit offline. The guided form holds your answers and photo evidence on the device and sends the whole inspection when you reconnect — the photos first, so nothing arrives after the report that cites it. A submission delivered twice still lands once. Load the audit while you have signal so the questionnaire is on the device; everything after that works with none.
FixAn offline submission now reaches a route that exists. The queue had been posting a finished inspection to an endpoint that was never built, so it retried forever and the audit stayed a draft — unscored, raising no findings, invisible to every dashboard — while the screen said it had been filed.
FixThe owner and deadline on an audit are visible again. A mismatched database relationship meant the dashboard's overdue panel, the owner badges on the audits list and the assignment panel all silently dropped their data — and an audit with a real owner was displayed as unassigned. Every screen that names a person was affected, including the audit PDF and the CSV export.
FixThe audits CSV export produces a file. It asked the database to join a column that has never existed, which refused the whole read, so the download had never once worked. It reports who completed each audit, which is the thing actually recorded.
v2.16September 2026
One paid entry plan at ₹999, and no free trial
The three-day trial is withdrawn. Essentials replaces it as a real plan at ₹999 a month — the workspace is yours from the moment you pay, and it does not run out.
FeatureEssentials: 1 site, 3 team members, 3 templates from the library, 20 audits a month, offline capture with photo evidence, PDF audit reports and 80 AI credits at launch (since revised to 60 a month — see current pricing). Priced against a cost model rather than a guess — the credit allowance is what the margin supports at that price, which is why it is not a rounder number.
ImprovementThere is no free trial on any plan. A trial that ends is a deadline we impose on somebody still deciding, and a three-day window was too short to evaluate anything real. Paying ₹999 to keep a workspace is a smaller commitment than losing one.
FixSupport can now grant a plan and have it take effect. Setting a plan wrote a legacy mirror column that the entitlement check only consults in one narrow case, so a customer moved onto a paid plan by hand stayed locked out while the screen reported success.
FixFailure heatmaps are gated to the plan that sells them; bulk import from CSV or Excel is gated on every import path rather than one; and the plan name shown in your own workspace is the plan you bought rather than the legacy database value beneath it.
v2.15August 2026
Real PDFs, and scheduled reports that carry the report
Every document AuditFlow produces is now generated on the server as an actual PDF, and a scheduled report arrives with its figures and the file attached instead of a link.
FeatureAudit reports, board packs, committee packs, compliance certificates, scorecards and blank field checklists download as real PDFs. Until now every one of these opened a print-styled page and asked your browser to save it; the routes returned HTML.
FeatureAudit reports carry the working papers and the sampling basis — population, method, confidence, tolerable rate, sample size, the seed, the selected items and both signatures. A sample an assessor can re-run is the point of storing the seed.
FeatureIssued audit-committee packs can be exported. They render from the figures frozen at issue and are never recomputed, so the file is what the committee was shown rather than where things stand today.
FeatureThe evidence pack now has a working-papers section, so it can say how a control's evidence was tested and not only that it exists.
ImprovementScheduled reports contain the compliance score, audit activity, issue ageing, accountability by owner, movement over the period and the risk register — in the email body — with the matching PDF attached. The body used to read "Log in to AuditFlow to view the full details".
FixThe board report averaged the most recent 100 audits and 200 action items. Its compliance score and closure rate now cover every audit and every issue, and it refuses to generate rather than report a figure drawn from part of the register.
FixThe audit page offered two "Print / PDF" buttons pointing at two different documents for the same audit. There is one report now.
ImprovementA blank printable checklist for any template, linked from the template page. The endpoint existed and nothing linked to it.
v2.14July 2026
Compliance Maturity Model, Regulatory Intelligence & Org Scorecard
Three major new modules to give your compliance program depth, foresight, and a single shareable snapshot.
FeatureCompliance Maturity Model — 5-domain radar chart with level scoring, roadmap actions per domain, and Print / PDF.
FeatureRegulatory Intelligence — a curated briefing of ten significant regulatory changes (EU AI Act, PCI DSS v4.0.1, NIS2, DORA, the proposed HIPAA Security Rule update) with urgency triage, jurisdiction filter, and mark-as-reviewed. Updated by us when we revise it, not automatically.
FeatureOrg Compliance Scorecard — shareable arc-gauge scorecard with 90-day trend, per-framework bars, health checklist, and Print / PDF.
FeatureAI Policy Generator — pick a framework + industry, get a full 8-section policy document in seconds with copy & download.
FeaturePlan status banner — what the workspace is entitled to today, with a link to choose a plan.
ImprovementBilling & Plans page — in-app upgrade flow with monthly/annual toggle and WhatsApp CTA for all tiers.
v2.13July 2026
Strategic Pricing Redesign + Enterprise WhatsApp Inquiry
AuditFlow now has four clearly positioned plans. Enterprise inquiries go straight to a WhatsApp flow.
FeaturePricing with an annual/monthly toggle and region-aware currency.
FeatureEnterprise WhatsApp modal collects name, email, and phone, then fires a pre-built message to the sales team.
ImprovementTrial length was read from one constant everywhere it appeared, so the landing page, FAQ, signup and comparison table could not disagree. (The trial itself has since been withdrawn — see the entry above.)
ImprovementSupport tier labels updated to match new plan names.
v2.12July 2026
Admin User Management Panel + Industry Benchmarking
Super-admins get a full user control panel. Orgs can now see how they stack up against industry benchmarks.
FeatureSuper-admin Users Table — search, filter, CSV export, and a slide-over with 6 action tabs (plan, credits, role, status, access).
FeatureIndustry Benchmarking page — compare your audit scores against reference targets for all 15 industries, with percentile ranking and improvement tips. The targets are set editorially by AuditFlow, not measured from other customers.
FeatureAI credits system — adjustable via the super-admin panel, tracked per org.
ImprovementSuper-admin dashboard quick-nav now includes User Management tile.
v2.11June 2026
Landing Page v5 — Live Activity, Roles, Integrations, Timeline, Resources
Six new landing page sections dramatically increase conversion context and social proof.
Historical note: None of these sections are on the site today — the landing page was rewritten and all five were dropped. Kept here because it was announced, not because it exists.
FeatureLive Activity Feed — rotating real org audit events to show platform vitality.
FeatureRole-Based Use Cases — 6-tab switcher with per-role value props, metrics, and frameworks.
FeatureIntegration Ecosystem — 20-card grid with category filters (Comms, Dev, Cloud, Identity, etc.).
FeatureCompany Journey Timeline — horizontal scrubber through 6 milestones from 2022–2026.
FeatureResources Hub — 6 content cards (guides, case studies, webinars).
v2.10June 2026
Supplier Portal, Geo-fencing, AI Report Generator, Inspector Certifications
Batch 37 delivered enterprise-grade supplier management and field compliance tools.
FeatureSupplier self-assessment portal — suppliers complete a questionnaire on an expiring link with no account; what they submit is scored against the template's own rubric and lands in your audits as a completed assessment. It does not create risk-register entries.
FeatureGPS capture on submission — every audit records where it was submitted, and the coordinates appear on the audit and in its PDF. Individual photos carry a location too on questions whose template sets one of the GPS capture options.
FeatureAI formal report generator — one click to produce a board-ready narrative from any audit, printable to PDF from your browser.
FeatureInspector certification tracker — track qualifications, expiry dates, and CPD hours per auditor.
FeatureAI question bank by standard — a model drafts audit questions for any framework, grouped by section for you to review before adding; if the model is unavailable, a fixed default set is shown instead and labelled as defaults.
ImprovementCompliance score webhooks — push real-time score changes to any endpoint.
v2.9May 2026
Guided Inspection Wizard, Anomaly Detection, Risk Matrix, Heatmaps
Batch 36 brought intelligent audit assistance and advanced analytics.
FeatureGuided inspection wizard — step-by-step audit completion with photo evidence per question, and the running verdict beside it. Voice dictation is on the full audit form rather than this screen.
FeatureAI anomaly detection — flags statistical outliers in audit scores and finding patterns.
FeatureRisk heat map — likelihood against impact, each risk placed from its own scores.
FeatureMost-failed questions heatmap — identify your organization's persistent weak spots.
FeatureDashboard customiser — tick which panels your dashboard shows, per person.
FeatureRegulatory change briefing — a curated list of amendments to major frameworks, reviewed and revised by us.
v2.8May 2026
Voice Dictation, Evidence Photo AI, Canvas Signature, QR Codes
Batch 34 + 35 focused on mobile and field audit capabilities.
FeatureVoice dictation — use your microphone to fill audit responses hands-free via Web Speech API.
FeatureEvidence photo AI analysis — upload a photo and get AI commentary on what compliance issues it shows.
FeatureCanvas signature pad — digital sign-off on audit completion with touchscreen support.
FeatureQR code generator + scanner — generate QR codes for audit locations; scan to open the right audit instantly.
FeatureOffline audit queue with IndexedDB — finish an audit that already exists with no connectivity; answers and photos are held on the device and sent when the app is next open and online. At this release, starting a new audit was the one part that still needed a connection; 2.17 removed that.
FeatureGPS location tagging — coordinates recorded with the submission and with each photo, and printed on the audit and in its PDF. There is no map view.
v2.7April 2026
PWA, AI Document Intelligence, Daily Briefing, Policy Drafter
AuditFlow became a full Progressive Web App and gained major AI document features.
FeaturePWA — install to the home screen on iOS and Android. Pages you have already opened keep working without a connection, and an audit in progress keeps saving to the device.
FeatureAI Document Intelligence — paste text or upload a .txt, .md or .csv file and get compliance gap analysis.
FeatureDaily Compliance Briefing — AI-generated morning digest: open items, overdue audits, risk highlights.
FeaturePolicy Drafter — AI produces a first-draft policy aligned to your chosen framework.
InfrastructureClaude Sonnet via the Anthropic SDK for chat, document analysis, photo analysis and the daily briefing. Other AI features run on Zen AI with a Google Gemini fallback.
v2.6March 2026
Dark Mode, Webhook Builder, Multi-Org, SSO, Kanban CAPs
Batch 20–22 brought UI polish, enterprise auth, and workflow tooling.
FeatureFull dark mode — every page, sidebar, and modal respects system preference or manual toggle.
FeatureWebhook builder — event picker, custom headers, retries and delivery logs.
FeatureMulti-org switcher — move between workspaces without signing out.
FeatureSSO / SAML intake form — record your Okta, Azure AD or Google Workspace IdP details so we can scope the work. It is an intake sheet, not a switch: SSO is not implemented, and every account signs in with a password.
FeatureKanban board for action items — Open, In Progress, Resolved and Closed, with a button on each card to advance it. Corrective action plans have their own screens.
v2.0January 2026
Public Launch — Core Audit Platform
AuditFlow launched publicly with full audit lifecycle management, templates, action items, and analytics.
FeatureAudit lifecycle: create, assign, complete, score, sign off.
FeatureFramework-mapped starter templates across the full framework library.
FeatureAction items with owners, due dates, SLA tracking.
FeatureRisk register with heat map and trend analysis.
FeatureRole-based access: viewer, auditor, org admin, super admin.
FeatureREST API v1 with bearer token auth, and written endpoint documentation inside the product, under Developers → API docs.