A workspace for audit firms, from request list to signed report
Tiomsu runs a SOC 2 or ISO 27001 engagement end to end - requests, samples, tests, review, findings, report and binder - with every result traced to a test, a sign-off and a document.
Scope
Product discovery, UX, design, development and infrastructure of a SaaS platform for audit firms
See project
Technologies
Ruby on Rails, PostgreSQL
About Tiomsu Tiomsu is a workspace for audit firms. It runs a SOC 2 or ISO 27001 engagement end to end - requests, samples, tests, review, findings, report and binder - so firms stop assembling workpapers in spreadsheets and Word. It is the auditor-side counterpart to AuditBadger, our compliance management platform for SMBs.
The Solution Evidence lives in requests, not controls: one request links to many controls. Samples are drawn at random with a stored seed, so they stay reproducible. Every sign-off records who, when and which version it covers, and the report and ZIP binder are generated from the records rather than typed over. Clients answer from AuditBadger, another compliance platform, or a small mobile-friendly portal. Tiomsu is currently in beta, starting with SOC 2 Type 1 and Type 2, with ISO 27001:2022 to follow.

