Auditor & Advisory
Every other module here assumes one company assessing itself. This one is for firms that assess other companies — auditors, advisors, and the deal teams who diligence a target before buying it. Many clients, one engagement at a time, a deliverable at the end, and a boundary between what your firm knows and what each client sees.
Add-on module · Early access — attaches to GRC Professional or Enterprise Governance
The Engagement Is a Real Record
Nine lifecycle states from proposed to delivered, the client it is for, the scope agreed, and a case file holding everything the job produced. Backwards transitions are allowed, because evidence arriving after analysis has begun is normal rather than an anomaly.
Evidence Requests and Interviews
What you asked the client for, how they responded, and what each interview established — held against the engagement rather than in a mailbox, with the notes and attendee list staying on your side of the boundary.
Costed Recommendations
Every recommendation carries a low/high investment range and both ends are optional. A set with nothing priced totals to a blank rather than to zero, and every total ships with a count of how many items it actually covers.
Technology Due Diligence
Seven due-diligence domains scored against written maturity anchors and gated on supporting artifacts, producing a per-domain profile and a findings list a buyer can act on before close.
Hand-off With the Client's Consent
Converting a recommendation raises a request in the client's organisation rather than writing into it. When they accept, the remediation plan and its milestones are built inside their tenant and the plan is written back to you.
Benchmarking That Identifies Nobody
Compare a client against your own book of work, and against the pool of other consenting engagements. The pool carries no organisation or engagement identifier, and a cohort below the anonymity floor is suppressed entirely — including its size.
Spreadsheets do not have a client boundary.
Firms running client work in the compliance product built for self-assessment end up with the engagement in a spreadsheet beside it. That works until someone asks what you told which client, what evidence supported a rating, or who was in the room. This module makes the engagement the record: requests, interviews, key questions and their sponsors, costed recommendations, and the readouts issued — with client contacts free of charge, because a firm cannot control how many people its client puts forward, and charging per contact prices you out of inviting the people the engagement depends on.
The full Talarity platform.
Every capability shares the same data, controls, and evidence. Nothing here is a separate product bolted on — each area gets smarter because it can see what the others see.
Every other module here assumes one company assessing itself. This one is for firms that assess other companies — auditors, advisors, and the deal teams who diligence a target before buying it. Many clients, one engagement at a time, a deliverable at the end, and a boundary between what your firm knows and what each client sees.
Client engagements draw on the same framework library and evidence model your own compliance program uses, so a finding is traceable to a control rather than to a note.
Recommendations accepted by a client become remediation plans and milestones in their own risk program, not a PDF they retype.
Engagement deliverables are built from the same reporting engine and control library as internal board reporting.
The diligence you run on a target reuses the third-party assessment machinery rather than a parallel questionnaire.
See Auditor & Advisory in action.
Start a 7-day trial and run it on your own program — then buy online in-app when you're ready.
No credit card required.