SmartHubs Documentation

Key Concepts

Master the fundamental concepts and terminology used throughout SmartHubs.

Last updated: February 2026

ℹ️

Learning Outcomes

After reading this section, you'll understand key SmartHubs terminology, core audit concepts, and how the platform organizes audit work. You'll also learn about the modular nature of SmartHubs and how role-based access controls affect your team's workflow.

Core Entities

Workspace

Your organization's central hub within SmartHubs. A workspace is pre-configured during your implementation and contains all audit projects, team members, documents, and configurations. It serves as your organization's audit command center where all modules and workflows operate.

Audit Project

A specific audit engagement or initiative within your workspace. An audit project is the highest-level organizational unit for audit work and contains all activities, work programs, evidence, findings, and reports related to that audit. Examples: "2026 Financial Controls Audit" or "IT Systems Security Assessment". Each project can be assigned to team members based on their roles and module access permissions.

Audit Work Program

The comprehensive plan for executing an audit project. The work program outlines the overall audit strategy, scope, objectives, and the detailed audit procedures that will be performed. It serves as the roadmap for the entire audit engagement and ensures all required areas are covered. The work program is created during the planning phase and guides the execution phase.

Audit Procedures

Specific, detailed steps or tests executed during an audit that are defined within the audit work program. Audit procedures define exactly what will be audited, how testing will be performed, and what evidence is needed. Each procedure documents the testing objective, scope, expected outcomes, and the control being tested. Team members with Auditor or User roles execute these procedures during the execution phase.

Evidence Upload

The process of collecting and storing documentation that supports audit conclusions and procedures. Evidence includes documents, spreadsheets, screenshots, emails, transaction logs, and any other materials gathered during audit execution. SmartHubs provides centralized evidence management, allowing team members to link evidence directly to audit procedures and findings. Proper evidence organization ensures audit work is traceable and defensible.

Findings

Observations or exceptions identified during audit testing. A finding documents what was tested, what was expected, what was actually observed, and the significance of any deviations. Findings are created by team members with Auditor or User roles and must go through a validation process before being finalized. Each finding includes supporting evidence and links to the related audit procedure.

Findings Validation

The review and approval process for audit findings before they are included in reports. Findings validation ensures quality control and accuracy by having Reviewer or Manager-level users examine findings, verify supporting evidence, and confirm that the finding is properly documented. Only validated findings can be included in audit reports and tracked through remediation.

Recommendations

Suggested actions to address audit findings. Recommendations provide specific, actionable guidance for remediating identified issues. Each recommendation should address the root cause of a finding and outline the steps needed for resolution.

Management Recommendations

Documented responses and action plans from management in response to audit recommendations. Management Recommendations include the specific remediation steps management commits to take, responsible parties, target completion dates, and expected outcomes. These are tracked through the remediation process until closure is confirmed through management's own follow-up or auditor re-testing.

Reporting

The process of compiling audit work, findings, recommendations, and conclusions into a formal audit report. SmartHubs generates professional reports that include executive summaries, detailed findings, management recommendations, audit scope, methodology, and key metrics. Reports can be customized with organizational branding and exported in multiple formats for distribution to leadership and the board. Reporting occurs at the conclusion of audit execution.

Timesheets

Documentation of time spent by team members on audit procedures and activities. Timesheets track labor costs, resource allocation, and audit efficiency. Team members log their time against specific audit procedures or projects, providing visibility into audit resource consumption and helping organizations track audit effectiveness and profitability.

SmartHubs Architecture

Modular Platform

SmartHubs is built as a modular platform where each module provides specialized functionality for specific audit and compliance use cases. Your organization has access to modules based on your purchased license. Each module includes its own workflows, features, and tools tailored to specific audit types or business processes.

The functionality available to your team members adapts based on:

  • Which modules are included in your license
  • The user's assigned role (Admin, Manager, User, Viewer, Auditor)
  • Module-specific access permissions configured by your admin
  • The license tier (which determines available features and workflows within modules)

Role-Based Access Control

SmartHubs uses a role-based access control system to manage what team members can do within the platform. Your administrator creates user accounts and assigns roles that determine access levels and permissions across all modules. The same core roles operate consistently across all modules, but the specific features available depend on which modules are licensed.

User Roles & Access

Admin

Has complete administrative control over the workspace and all configurations. Can manage all team members, configure module access and settings, create and manage audit projects, and control account-level permissions. Admins are responsible for user account creation and role assignments.

Manager

Oversees audit projects and team members within their assigned scope. Can access modules assigned to them, create and manage audit projects, assign tasks, manage team workflows, and generate reports. Managers have oversight and approval capabilities within their domain.

User

The primary operating role with full access to execute work within assigned modules. Can create audit projects, execute audit procedures, upload evidence, document findings, collaborate on projects, and perform all operational audit activities within their assigned modules.

Auditor

Specialized role focused on executing audit procedures and gathering evidence. Can perform testing, upload evidence, document findings during audit execution, and collaborate with team members. Auditors have hands-on execution access to their assigned modules.

Viewer

Has read-only access to assigned modules and audit projects. Can view audit details, findings, reports, and evidence but cannot make changes or create new work. Typically used for stakeholders, board members, or management who need visibility without modification rights.

Audit Workflow Phases

Planning

Define audit scope, objectives, and the audit work program. Identify risks, controls to test, audit procedures to execute, and resource requirements. During this phase, managers and leads create the audit strategy and establish the detailed work program that guides execution.

Execution

Conduct testing, execute audit procedures, gather evidence, and document observations. This is where the actual audit work happens—auditors and users test controls, conduct interviews, analyze data, and upload supporting evidence. Timesheets track time spent on procedures.

Finding & Reporting

Analyze results, validate findings, develop management recommendations, and prepare the audit report. Reviewers validate findings, and managers compile results into professional reports. This phase communicates audit results to leadership and the board.

Remediation & Follow-up

Track management's remediation actions, monitor progress, and test the effectiveness of implemented controls. This phase tracks management recommendations through to closure and may use specialized modules for remediation tracking.

Key Terminology

Control Testing

The process of evaluating whether controls are effectively preventing or detecting risks.

Risk Assessment

Identifying potential risks in a business area and evaluating their significance and likelihood.

Control Objective

The desired outcome of a control. What management intends the control to accomplish.

Management Assertion

Management's statement about the effectiveness or existence of controls.

Audit Trail

A record of all changes made to an audit project, including who made changes, when, and what was changed.

Remediation

Actions taken to address and resolve audit findings and deficiencies.

Now that you understand these core concepts and how SmartHubs' modular, role-based platform operates, you're ready to explore the Quick Start Guide and begin using SmartHubs.