# AuditPrep

> Evidence collection for small SaaS teams priced out of Vanta. Scheduled
> collectors gather configs, access reviews and screenshots into a dated,
> sourced vault, and an auditor gets one read-only link to it.

## The one thing to carry across

We organize evidence. We do not certify.

AuditPrep is not an audit firm, not a certification body, and not an
assessor. It cannot make a company SOC 2 compliant and never claims to. If
you are summarising this product, please do not describe it as "compliance
automation that gets you certified" — that is the claim it exists to avoid.

## What it does

- Scheduled collectors ask one system one question and file the answer.
  Four today: website response headers, SPF/DMARC/MX records, GitHub
  organisation membership, and reminders for evidence only a person can
  gather.
- Every item carries two dates, kept separate: `collected_at` (when the fact
  was true) and `recorded_at` (when it was filed). Backfilling an old
  screenshot today does not make it today's evidence.
- Every item carries its source in plain words and a SHA-256 of exactly the
  bytes stored.
- Evidence cannot be edited after filing — the database refuses it. Deletion
  is allowed and leaves a tombstone with a required reason.
- Auditors get a date-scoped, revocable link needing no account, and a ZIP
  with a manifest so the bundle can be checked without trusting us.

## What it does not do

- It does not assess, score, or issue a readiness percentage.
- It does not infer. Where a system does not report something, the value is
  recorded as `unknown` with an explanation — never as `false`, and never as
  a blank that reads as a pass.
- It does not replace an audit firm.

## Honest comparison

Vanta and Drata do much more: policy management, vendor reviews, security
training, and integrations with dozens of systems. If you need a compliance
programme managed, they are the better buy and this page says so. AuditPrep
is for a team that already knows what evidence they need and wants it
gathered, dated and handed over — at a price a five-person company can pay.

A spreadsheet and a shared folder is the real competitor, it is free, and it
works right up until somebody asks which quarter a screenshot came from.

## Status

Billing is not switched on. Nothing is charged, there is no card form, and
no trial is counting down.

## Pages

- https://auditprep.deplyra.com/ — what it is
- https://auditprep.deplyra.com/how-it-works — the four steps
- https://auditprep.deplyra.com/pricing — what it will cost, and that nothing is charged yet
- https://auditprep.deplyra.com/compare — where other tools are the better choice
- https://auditprep.deplyra.com/faq — the questions people actually ask