—Responsible AI
AI in internal audit, under the auditor's control.
VistaAssist drafts; auditors decide. This is how ControlVista governs its AI — where it runs, who owns what it writes, and how its use stays inside the IIA 2024 Standards.
—Principles
Five rules VistaAssist is built to.
Drafting, not deciding
VistaAssist drafts text — procedures, conclusions, finding narratives, reports. The auditor decides, reviews and signs. It never decides.
A named human owner
Every output is an editable draft attributed to a named person, who is accountable for it like any other work in the file.
Inside your perimeter
VistaAssist runs inside your infrastructure. Working papers and evidence never go to a vendor's cloud.
Logged and traceable
Every draft is logged and owned, so the preparer → reviewer → approver chain the Standards depend on stays unbroken.
Focused, not open-ended
A set of named assistants, each in the module where the work happens — not one open prompt box pointed at your evidence.
—IIA 2024 Standards
How it maps to the Standards.
Principle 4
Exercise due professional care
Professional judgement stays with the auditor. AI output enters the file only as a draft that a named person reviews, edits and signs.
Standard 5.2
Protection of information
Engagement information is protected by keeping the AI inside your perimeter — evidence is not sent to a vendor's cloud to be drafted.
Standard 10.3
Technological resources
The chief audit executive is responsible for the technology the function relies on — AI included. On-premise deployment keeps that technology under your own governance.
—For Procurement
Four questions to ask any audit AI vendor.
- 01
Where does the model run — and does any evidence leave our network?
- 02
Can the AI rate a finding, issue an opinion or close an action on its own?
- 03
Is every AI-drafted output attributed to a named reviewer?
- 04
Is AI-drafted work logged so a reviewer — or an external quality assessor — can see it?
—Frequently Asked
Responsible AI, answered.
Does VistaAssist send our audit data to the vendor's cloud?
No. VistaAssist runs inside your perimeter. Working papers and evidence never go to a vendor's cloud.
Can VistaAssist issue an audit opinion?
No. It drafts the engagement report and opinion text from the record. The auditor decides, reviews and signs — VistaAssist drafts, it never decides.
Who is accountable for AI-drafted content?
The named person the draft is attributed to. AI-drafted work goes through the same preparer → reviewer → approver chain as everything else in the file.
—Request a demo
See ControlVista run your audit lifecycle, end to end.
A 30-minute walkthrough with the team that built it — from the audit universe to the board-ready committee pack, in English and Arabic.
A product of Vantage Technologies.