Backed by Y Combinator
The AI platform for internal audit

The entire audit, accelerated.

Oxus manages and executes the entire audit lifecycle using AI, so your team can start with review instead of manual work.

Trusted by internal audit teams across industries, at both pre-IPO and public companies
Technology·Fintech·Business Services·Enterprise Software·Biotechnology·Digital Media·HR Tech
01 / THE PLATFORM

One platform that does it all.

Oxus uses AI to execute every stage of the audit. Everything is linked, so one change updates the rest and next year starts from this year’s record.

BUILT FORSOXOperationalITACsITGCsBusiness process controls
1
System
of record
Evidence · RCM
Audit trail · Prior years
2
System
of execution
Scoping · Walkthroughs
Testing · Reporting
Oxus
02 / BEYOND GRC

Where your audit lives, and where it gets done.

Oxus replaces both your GRC tool and your manual workload. It is your complete system of record, with AI that executes the work at every stage such that your team can start at the review.

GRC
SOX AI
OXUS
THE SYSTEM OF RECORD
What you expect from GRC. Oxus has all of it.
Evidence and workpaper storage
Included
Included
Included
Risk and control matrices
Included
Partial
Included
Review workflows, sign-offs, and audit trail
Included
Partial
Included
Issues tracked through retest
Included
Partial
Included
Reporting and dashboards
Included
Partial
Included
Certifications
Included
Manual
Included
One linked record, from planning to reporting
Included
Manual
Included
THE WORK ITSELF
What GRC leaves to your team. Oxus does it.
Risk scoring and scoping, with the rationale shown
Manual
Manual
Included
Annual and engagement audit plans
Manual
Manual
Included
Narratives and flowcharts from walkthrough recordings
Manual
Manual
Included
Control design gaps flagged
Manual
Manual
Included
Every sample tested against every attribute
Manual
Included
Included
Evidence redboxed and exceptions logged
Manual
Included
Included
Vendor SOC reports reviewed and CUECs mapped
Manual
Manual
Included
Findings, reports, and committee materials drafted
Manual
Manual
Included

AI SOX testing: point tools that automate control testing and sit on top of a separate GRC platform.

04 / HOW WE WORK

Your team leads. Oxus does the work in between.

Your team keeps judgment and sign-off at every stage. Oxus handles the repetitive execution from planning to the final report.

01 · ONBOARDING
Start on day one, not in months.

Oxus works with the documentation you already have. A dedicated point of contact gets your team running from day one.

02 · DURING THE AUDIT
Oxus executes every stage.

Risk ratings, plans, narratives, RCMs, testing, issues, and draft reports - produced in Oxus, not assembled by hand.

03 · REVIEW & CLOSE
Your senior team reviews and signs off.

Managers review outputs, investigate exceptions, and make final decisions. Every conclusion is linked to its evidence.

04 · YEAR OVER YEAR
Build institutional knowledge.

The full lifecycle lives in one place, so turnover doesn't reset your program.

05 / WHY OXUS

More than automation. A system built for audit.

Defensibility
i.

Humans sign the opinion.

An agent's work is never final. Every conclusion is reviewed and signed off by a person on your team. Oxus accelerates the work, it doesn't replace the reviewer.

ii.

Every claim is cited.

Each result links to the exact document, page, and value it relied on. Where the evidence is thin, the uncertainty is surfaced and never hidden.

iii.

Complete audit logs.

Every action, query, and document access is logged and exportable, so the trail behind any conclusion is always reviewable.

Security
iv.

SOC 2 Type II.

SOC 2 Type II Certified

Independently audited security controls, with reports and our latest pen test available under NDA.

v.

Your data is yours.

Engagement data stays isolated in your environment. We never commingle tenants or train our models on your data.

vi.

Flexible deployment.

Run Oxus in our cloud, inside your own VPC, or on-prem. SSO, MFA, and role-based access are in place from day one.

06 / FAQ

Questions audit teams ask.

Still deciding? Reach us at founders@oxus-ai.com and we'll walk through your specific environment.

Your data is encrypted in transit and at rest, and every customer is logically isolated. We never commingle data across tenants or use your documents to train our models. All access is logged and exportable for review.

A 30-minute conversation

Run your next audit, start to finish, in Oxus.