How Auditly works
A company posts a compliance audit, auditors with checked credentials bid, and the work runs through milestones with the money in escrow.
Auditly is a marketplace for compliance audits. On one side are companies that need an audit or a readiness assessment for a framework such as ISO 27001, SOC 2, NIS2 or DORA. On the other are independent auditors whose credentials Auditly has checked against the issuing body. The platform sits between them: it carries the posting, the bids, the contract, the milestones, the evidence and the money.
The engagement, start to finish #
- A company posts a project. Framework, scope, timeline and budget, in a short guided form. Posting is free.
- Auditors bid. Each bid is a proposal: approach, milestones, price, a declaration of independence. The company sees every bidder's rating, checked credentials and experience, but not their name.
- The company accepts a bid. The bid becomes a contract with the milestone schedule the auditor proposed.
- The company funds the first milestone into escrow. From that moment both sides see each other in full: names, photos, contact details.
- The work runs in the project workspace. Evidence requests and uploads, findings and responses, messages, sessions and files, all in one place per contract.
- Milestones are approved and released. The auditor submits a milestone, the company approves it, the money for it is released.
- Both sides review each other. Reviews are sealed until both have written, so neither is shaped by the other.
Why identities stay hidden at first #
Names are revealed only once a contract is funded. Before that, a company compares proposals on what the platform can vouch for: ratings from finished engagements, credentials checked against the issuer, years of experience, the proposal itself. Auditors compete on the same footing, and nobody is contacted outside the platform before a commitment is made. There is no public directory of auditors to browse; the posting is how a company reaches them.
What is live today #
The marketplace, the workspace, credential checks, messaging, reviews and the admin console are in place. Money movement is the part still being connected: escrow funding and payouts are recorded and shown, but no payment provider settles them yet, and every screen that involves money says so. See milestones and escrow and payouts.
The three sites #
- auditly.to is the public site: framework guides, the rules finder, the readiness check, the blog and the waitlist.
- The portal is where companies and auditors work.
- docs.auditly.to is this manual.