Releases, guides and visual resources that show how Audexa turns compliance into a repeatable operating system.
Featured
Audexa centres on the framework you want to meet and guides you step by step, helps you answer and prepare the audit, and manages several sites with custom roles and Aude across the whole group.
Read update Nine new frameworks, including SOC 2, the EU AI Act and the Cyber Resilience Act, the ENS following Annex II of RD 311/2022 and 37 mapping sets.
Read update AI governance under the EU AI Act, an Assets hub with the DORA register of information, Aude as an assistant you can talk to and a platform that puts what's urgent in front of you.
Read update More readable audit results, fewer clicks in daily workflows and a vRadar closure flow that requires verified remediation.
Read update Define scope before the audit, turn gaps into understandable risks and connect compliance work to the tools your team already uses.
Read update A private evidence vault, Aude inside the audit workflow and read-only integrations for checking compliance status.
Read update More context to find pending work, build plans without duplicates and schedule the next re-audit.
Read update Reuse context, make scores more representative and keep a framework-specific remediation path for every gap.
Read update New NIST framework, French and German product languages and deeper questionnaires for international teams.
Read update New Italian support, expanded help, renewed PDF reports and vRadar exports in PDF and Excel.
Read update IT inventory becomes an active source for detecting, prioritizing and remediating real vulnerabilities.
Read updateGuide
Practical resources to get more from Audexa.
A practical guide to set context, decide which controls apply and leave an audit baseline that can be reviewed and defended.
Read update How to turn a finding into a decision with context, treatment, owner, target date and residual risk.
Read updateFrequently asked questions
Audexa runs on EU infrastructure with encrypted data flows and role-based access. Activity history remains traceable for internal and external audit review.
Most teams launch their first guided audit the same day and complete the initial assessment in under 60 minutes.
All plans include product support. Expert-led recurring calls and enhanced support are available separately through the Enterprise Support plan.
Yes. The Free plan includes one ISO 27001 audit, one executive PDF report and platform access so you can validate fit before scaling.
It depends on the contract and the agreement reached in each case. Longer commitments can come with attractive discounts; we agree the terms with you before you subscribe.
No. Audexa gets you ready: with “Hand over to the auditor” you check what is missing and download a package organised by control with an index and a SHA-256 fingerprint for each file, and the “Would you pass an external audit today?” review is guidance, never a verdict. Official certificates are issued by accredited external auditors.
vRadar is Audexa's CVE intelligence module. It connects hardware and software inventory with CVSS, EPSS, KEV and public exploit signals so teams can prioritize real exposure and create remediation tasks. You set remediation deadlines by severity and vRadar alerts you to anything overdue.
Yes. Audexa helps consultancies run their clients' audits with a guided methodology, cross-framework mappings and exports ready for the auditor. If you work with several clients, tell us about your case and we'll suggest how to organise it.
They are created from 67 templates and edited on the document exactly as it will be output. Editing an active policy creates the draft of the next version, which is commented on, reviewed and approved; live variables keep your organisation's name or the owner up to date, and your team confirms which version it has read.
No. Audexa suggests answers with their source (evidence, other audits, assets, policies and tasks), flags answers that don't add up and tells you what counts as evidence for each question, but a person accepts or changes each answer and decides when to submit.
Yes, with Sites and group. A main site manages branches and subsidiaries that keep their own data and their own team, with a group overview, custom roles by site or region and shared resources. Premium includes 3 sites and Diamond 5, extendable, and Audexa activates it on request.
Yes. You can give them access with an end date, which Audexa removes automatically, or share a read-only link to the evidence package that expires and that you can revoke, with every access visible.
Audexa