Questions about IRAME

IRAME is agentic AI for audit, SOX and finance controls. Its AI, IRA, tests controls on every transaction, so your team reviews results instead of sampling. Internal audit tests the full population and tracks findings to closure. Controllers run SOX and ICOFR testing. Finance teams get IRA inside AP, AR, the close and reconciliation, plus AI-led dashboards for the MIS. A person approves every action.

IRAME is agentic, not a chatbot. ChatGPT and Copilot answer a question about your data once. In IRAME, you describe a control in plain English, GenAI builds the test and IRAME saves it. IRA then re-runs it on the full population on schedule, routes each exception to an owner and tracks it to closure. Same data, same control, same result, with evidence your auditor can re-perform.

IRAME runs the control tests itself. Most GRC tools record risks, controls and workflows; the testing happens elsewhere. IRA, IRAME's AI auditor, tests every transaction against each control, logs and routes each exception, and produces the report. IRAME can also sit beside your GRC tool, with results and reports exported to it with their audit trail.

IRAME is used by internal audit, GRC, controllership, CFO and shared services teams. Chief audit executives test the full population. GRC leaders monitor key controls all year. Controllers run SOX and ICOFR testing. CFO teams use IRA for AP, AR and reconciliation. IRAME was built for internal audit first; the same controls then serve the other teams.

IRAME runs AI-led SOX and ICOFR testing, mapped to COSO 2013. IRA, IRAME's AI auditor, runs the test of design, defines the population and tests operating effectiveness on the full population where the data allows. Where the auditor needs a sample, IRA proposes one and documents the method. Your team signs off, and the evidence lets your external auditor re-perform the test under PCAOB AS 2201.

IRAME's Medhara is the decision layer above IRA's finance work. Medhara by IRAME reads the results and tells the CFO what to act on first. It brings investigations onto one case board, assigns work with evidence requests and tracks each case to resolution, recording every human review. Medhara is in early access; the audit, SOX and monitoring products are live today.

IRAME tests every transaction in the period against each control. That is full-population testing. Sampling picks a few items and infers the rest, so a duplicate payment or split invoice can sit unseen between the picks. Full-population testing finds every exception in the data. IRAME then sorts each one as a true exception, business as usual or a false positive, so auditors focus on what matters.

IRAME results are deterministic: the same data and control give the same result every run. Every step is on record, from how the request was read to the data used and each processing step. Ready checks run as tested code. A new custom control is reviewed with your team on its first runs and goes live only after that review.

IRAME builds a control from a plain-English description. You describe it to IRA, IRAME's AI auditor, in your own words. IRA asks when something is unclear, such as the date field, threshold or entities in scope, runs the control and checks the result with you. A person approves the control before it is saved, and every later run replays the same logic.

IRAME comes with ready checks across P2P, payroll, T&E, user access and journals, such as duplicate payments, vendor risk flags, segregation of duties and journal-entry patterns. Your own controls are built from your risk register, SOPs and RACM. IRAME proposes a starting set from past deployments, tunes each control on your data, and every client ends with its own control library.

IRAME runs AI-led continuous controls monitoring on every transaction as it posts, or daily, weekly, monthly or on demand. Each exception reaches its owner in Action Hub the same day and is tracked to closure. At one of India's largest steel makers, IRAME checks 100,000 transactions every day. Internal audit can rely on the same results later.

IRAME sorts each exception as a true exception, business as usual or a false positive, and separates a design deficiency from procedural non-compliance. True exceptions go to an owner in Action Hub, who records the action taken and adds evidence. A reviewer signs it off. Closed items roll into the action taken report (ATR).

IRAME keeps evidence an external auditor can re-perform. Each result records the control, the data used and every processing step, and the same control on the same data gives the same result. Each exception carries its documents and the owner's response. Reports follow Finding, Impact, Risk and Recommendation and export to PDF, Excel or CSV with the full audit trail.

IRAME lets your team edit the columns, filters and rules behind any control, and the finding, impact, risk and recommendation text before a report goes out. Results drop into report templates; annexures download as CSV or Excel. Every change is saved, and the next run uses the updated control.

IRAME tests structured ERP and Excel data in full, and Document Forensics reads PDFs, scans and images and matches them to the transaction. Physical work such as stock counts and site visits stays with people. Its result is uploaded against the exception in Action Hub, so all the evidence for the test sits in one place.

IRAME works with SAP, Oracle and NetSuite, and reads Excel and CSV files, PDFs and scans, and email archives (PST). Structured ERP and Excel data is tested in full. Document Forensics reads PDFs, scans and images, extracts their fields, matches each document to its transaction and flags signs of editing.

IRAME needs one process to start, such as the AP ledger or a user-access log. Your team shares an export or a read-only connection; a CSV or Excel export is enough for the first run. IRAME cleans and describes the data before testing it. The ERP connection and more processes can follow the first results.

IRAME reads PDFs, scans and images through Document Forensics. GenAI extracts fields from invoices, contracts and agreements, finds specific clauses and flags missing ones. IRAME matches an invoice PDF to its payment record and flags signs of editing. IRA, IRAME's AI auditor, can also draft a RACM from your SOPs.

IRAME prepares messy ERP data before testing it. It cleans blank rows and mixed date formats, and describes cryptic SAP fields in plain words: BELNR becomes the document number. Your team can see sample rows and edit each field definition. The definitions are saved and reused on every later run.

IRAME's AI, IRA, reads column headers and a few sample rows to understand each field. It then writes code, and that code runs against the full dataset. Every transaction is tested without the model reading every record. This keeps results deterministic and limits how much of your data the model sees.

IRAME is SOC 2 Type II audited and certified to ISO/IEC 27001:2022. Access is set by role: client admin, auditor, process owner and reviewer. Every control, prompt and business rule is saved, and each result traces back to them. IRAME runs in its own cloud, your cloud tenancy or on-premise. Customer data never trains a model.

IRAME deploys three ways: in IRAME's cloud, privately in your own cloud tenancy, or on-premise with on-premise AI models. When IRAME runs in your environment, your data stays there. Controls, reports and Action Hub work the same in each option, and customer data never trains a model in any of them.

IRAME setup starts with one process and one export or read-only connection. IRAME proposes a starting set of controls from past deployments and your own RACM. IRA runs them on your data and your team reviews the results. Most teams see their first exceptions within weeks, not quarters. More processes follow once the first results are agreed.

IRAME is priced by scope: the processes and controls covered and how many people use IRAME. There is no public price list, because audit scopes differ too much. US customers are quoted in US dollars. Tell us the process you want to start with, and IRAME will share a proposal for that scope.

IRAME works beside your existing GRC and collaboration tools. Results and reports export, so your team can attach them where it already works. Each result keeps the data used, the steps taken and the reason it was flagged. IRAME also has its own ControlDesk for engagements, risks, controls and attestations if you need one.

IRAME never uses customer data to train models. It calls enterprise model endpoints, such as Azure OpenAI, deployed in your region under terms that exclude customer data from training. On-premise deployments use on-premise models. Prompts, data and results never improve anyone's model. IRAME is SOC 2 Type II audited and ISO/IEC 27001:2022 certified.

IRAME's AI, IRA, never acts without a human. It cannot start a workflow, send a message, post an entry, approve or release a payment on its own. A person approves each control before it is saved and reviews each finding before it is reported. Controls run as saved, deterministic logic, so the same data and control give the same result every time.

IRAME runs in IRAME's cloud, as a dedicated private instance in your own Azure, AWS or other cloud tenancy, or on-premise with on-premise AI models. In the cloud, the application, data and model endpoint are pinned to the region you choose, such as the US, the EU, the UAE, Saudi Arabia, Qatar or India, in line with local data residency rules.

IRAME is SOC 2 Type II audited against all five trust services criteria and certified to ISO/IEC 27001:2022. Independent penetration tests (VAPT) run against OWASP Top 10 and NIST guidance. Reports are shared under NDA on request. Customer data never trains a model, in any deployment option.

IRAME's agentic dashboards are AI-led dashboards on live ERP data. Ask a question in plain English: IRA plans the analysis, writes and runs the query, shows the code and source tables, and saves the answer as a dashboard that refreshes on schedule. Teams use it for the monthly MIS, spend, order-to-cash, payroll and control-health views.

IRAME can sit alongside TeamMate+ or AuditBoard (now Optro), or serve as your audit management system. Teams with a system keep it: IRA does the testing and results export into it today, and a direct API connection is in development. Teams without one run engagements, workpapers and issues in IRAME's audit management today; risk assessment and annual planning are in early access.

IRAME's agentic CFO suite puts IRA, IRAME's agentic AI, inside each finance process. AP control, AR and revenue assurance, reconciliation and AI-led dashboards are live. Record to Report, the Vendor Query Assistant and Treasury are in early access. Medhara by IRAME, also in early access, sits above them and tells the CFO which cases need a decision.

IRAME gives global capability centers and finance shared services IRA, its agentic AI, for AP, AR, record to report and SOX testing. IRA checks every transaction across entities and people handle the exceptions, so the center takes on more scope without adding seats.

IRAME serves enterprises in the United States, the Middle East and India. US customers are quoted in US dollars, and US data residency is available. In the US, IRAME works with partners including Leah AI. A first engagement starts with one process on your own data.