GOOD FIT
- Teams that require a self-deployment path and S3-compatible storage
- Reviewers who want inspectable rules and evidence-linked decisions
- Buyers separating product claims from source-license claims
OPEN SOURCE INTERNAL AUDIT SOFTWARE
Source access can support trust. It cannot replace a completed audit workflow.
OpenWorkpapers is designed around inspectable rules, source-linked judgments, export hashes, and self-deployment boundaries. The public repository is not yet released, so this page states that limit directly.
CURRENT CAPABILITY · UPDATED 2026-07-13
NOT A FIT
- Teams that require a public repository immediately
- Buyers treating open source as proof of audit methodology
- Programs needing a supported enterprise connector catalogue
THE JOB
What the product helps the audit team complete
- 01Verify which business workflow is implemented before evaluating the license
- 02Inspect the boundary between deterministic rules and human decisions
- 03Choose hosted R2 or deployment-supplied S3/OSS-compatible storage
- 04Validate formal package integrity independently once the verifier ships
REAL PRODUCT PATH
Trust claims split into things you can verify
Each row names both the current proof and the boundary that proof does not cross.
Registered evaluator identity and rationale are persisted
Only ITGC-03 is currently automated
Formal package bytes have a recorded SHA-256
A hash is not a digital identity signature
Frontend and backend have separate production builds
The public repository and remote release are not live
CURRENTLY RUNS
- Deployment-isolated BYOK judgment provider support
- Cloudflare Pages frontend and separately deployable backend architecture
- Content hashes, artifact SHA-256, and an inspectable audit trail
KNOWN LIMITS
- The public source repository is not available yet
- Current package hashes verify integrity, not signer identity
- Remote deployment and hosted commercial terms are outside this release
PRODUCT EVIDENCE
Inspect the current behavior
CAPABILITY REVIEWED 2026-07-13 · NO ANONYMOUS TRACKING COOKIE