AuditHub

The Problem

Collecting compliance evidence shouldn't be a nightmare. IT auditors spend 40% of their time chasing emails, scattered files, and incorrect documents. Each audit burns around €6,000 in inefficiency — 80 hours of wasted effort per project. And here's the real gap: existing tools archive documents, but none of them actually validate the content. When the compliance officer leaves, the entire process collapses. With new regulations like NIS2 (12,000+ Italian companies now required to comply) and DORA (mandatory for the entire financial sector since January 2025), the pressure on auditors has never been higher.

The Solution

AuditHub is a digital clean room that replaces the chaos of email-based auditing with an AI-powered workspace. Three core pillars: Digital Clean Room — A secure, centralized space where clients upload evidence and auditors review it. No more email threads. AI Co-Pilot — The AI validates documents against specific compliance requirements, suggests fixes, and generates draft policies. It supports the auditor — it doesn't replace them. Automated Reports — One-click audit report generation. The flow: Client uploads → AI validates → Auditor approves → Report generated.

Key Decisions

• Why contextual AI instead of a generic chatbot: Each ISO 27001 control has specific requirements. A generic chatbot gives generic answers. We built an AI that understands the exact control being reviewed and validates against specific rules.
• Why we switched from Claude Sonnet to DeepSeek: Cost optimization. Same validation quality at a fraction of the API cost — critical for a startup with limited runway.
• Why a single-project architecture: After building scattered features, I made the decision to consolidate everything into one project-focused interface. Less flexible, but far more usable.

Validation

• ·611 LinkedIn outreach messages sent to GRC partners and Big 4 firms
• ·48.4% acceptance rate (industry benchmark: 25%)
• ·11.7% response rate (benchmark: 5-10%)
• ·13 registered early adopters ready for beta
• ·Positive feedback from managers at EY, Deloitte, and Mermec

My Role

Everything. From market research and user interviews to product architecture, AI integration, frontend development (React), pitch deck creation, and investor presentations. Selected for the Startup Geeks Booster acceleration program.

Result

A working MVP that reduces auditor time from 40-60 hours to 5-10 hours per client — with validated market demand and a clear path to first paying customers.