Skip to main content
    Professional engagement · assessment approach · supporting technology

    RiskAssist-Powered Assurance, Delivered by AuditPartners

    AuditPartners delivers the professional engagement. AI General Controls (AIGC™) provides the assessment approach for AI-enabled workflows. RiskAssist™ is the supporting technology layer, with human judgment and responsibility remaining with the engagement team.

    Three distinct roles

    Who delivers, how we assess, what supports the work

    These roles are complementary, not interchangeable. You engage AuditPartners for a scoped professional review. AIGC™ structures the assessment of AI-enabled workflows. RiskAssist™ supports the engagement team's work; it does not provide its own assurance opinion.

    Professional delivery

    AuditPartners

    Delivers the engagement and remains accountable for the scope, evidence review, procedures, findings and final conclusions.

    • Agree the question, criteria, boundaries and deliverables.
    • Evaluate evidence sufficiency and perform agreed control testing.
    • Challenge exceptions and document limitations.
    • Approve the report and explain recommendations to the client.
    Explore assessment services

    Assessment approach

    AI General Controls (AIGC™)

    Structures the review of governance decisions and technical controls in AI-enabled workflows. Technical scope can follow a change from authorization through operation and recovery:

    • Authorized work ticket and agent authorization
    • The exact change and its review
    • Test integrity and supporting records
    • Release approval
    • Human and agent permissions
    • Skills, plugins, connectors and MCP
    • Secrets and data handling
    • Runtime evidence
    • Intervention and recovery
    Explore AI & Agentic AI Assurance

    Supporting technology

    RiskAssist™

    Supports preparation, evidence organization and analysis within the professional engagement. Its outputs are working material for human review.

    • Structured evidence intake to organize requests, sources and status.
    • Control-mapping support to relate evidence to agreed criteria.
    • Consistency checks to flag potential gaps or contradictions for review.
    • Drafting support for procedures, observations and report preparation.

    Supporting analysis is not autonomous auditing, certification or a benchmarked performance promise.

    Human review and accountability

    The responsible AuditPartners engagement professional reviews and approves final findings and conclusions. AI-assisted material is checked against source evidence and the agreed criteria. Exceptions are challenged, not automatically explained away.

    A policy describes design; an inspected configuration may demonstrate implementation; tested records may support operating effectiveness for a defined period and sample. Missing or insufficient evidence remains unknown. Neither a generated draft nor a methodology checklist proves that a customer's controls worked.

    Management retains responsibility for its systems and decisions. The separately agreed engagement letter governs scope, evidence handling and deliverables; conclusions do not extend to unreviewed systems or untested periods.

    See the method and fictional sample deliverables

    What RiskAssist is not

    • Not a certification, an authorization or proof of compliance.
    • Not a SaaS compliance platform you log into on this website.
    • Not an automated attestation service or a substitute for a CPA examination.
    • Not a human professional, autonomous auditor or final decision-maker.
    • Not a guarantee of external acceptance, control effectiveness or risk elimination.

    A separately hosted website

    RiskAssist.ai is a separately hosted site. This page explains its supporting role in AuditPartners engagements; it does not provide a product login or establish separate product terms.

    Visit the separate RiskAssist.ai website

    Start with a proportionate scope

    Smaller teams and larger organizations can use a defined assessment. Start with the workflow, evidence and decision you need to understand. The technology supports that work; it does not determine the scope or replace the professionals accountable for it.

    Discuss the assessment, not just the tooling

    Define the question, evidence and professional deliverables for your organization.