01
Automated evidence collection
Collect evidence for each control on schedule from the ERP, HRIS, ticketing and file systems that produce it.
Audit Agent
pegasus · Audit Agent
governed by CIP
Q3 SOX evidence collection — 12 days to fieldwork
- Connected to NetSuite, Workday, SharePointMerge
- 142 controls in scopePegasus
- 126 evidence complete, no action neededPegasus
- policySOX control mapping.CIP
- for reviewITGC-04 · Quarterly user access review: The owner has been reminded twice; the review is 9 days overdue.Outstanding
- for reviewFIN-12 · Journal entry approval: The entries were posted by a user with self-approval rights.Outstanding
done16 of 142 sent to a person to decide
Illustrative sampleThe Pegasus impact
The Pegasus Audit Agent is being built to help control owners and internal audit teams take the manual work out of SOX compliance by automating evidence collection, control testing and audit package assembly across all connected systems.
Quarterly SOX compliance requires weeks of manual evidence gathering across accounting, HR, and file systems.
- Expected availability
- Q4 2026
- Platforms on the same integration layer as the live agents
- 200+
- Capabilities in development
- 3
Capabilities
AI does the volume. Humans keep the judgment.
In development. These are the capabilities the agent is being built to deliver.
02
Control testing with owner sign-off
Test evidence against the control, and raise anything that needs a person with its owner.
03
Audit package assembly
Assemble the audit package with a chain of custody on every piece of evidence.
Systems connected
Connected to the systems you already run.
Accounting + HRIS + File Storage via Merge.
- NetSuite
- Workday
- SharePoint
- Jira
- Google Drive
Governance built in
Human-in-the-loop control, with every action audited.
- SOX control mapping
- Evidence chain of custody
- CIP audit trail
FAQ
Audit Agent FAQs
It is in development, expected Q4 2026. Pilot-list members are contacted first, and the first pilots run on your own example before any commitment.
NetSuite, Workday, SharePoint, Jira, Google Drive and other systems through the same integration layer as the live Pegasus agents. Evidence is collected from the systems that produce it and stored with its provenance. Your GRC tool, if you have one, stays in place.
Control owners and internal audit. Pegasus collects and organizes evidence; people review, sign off and decide how exceptions are handled.
First access when pilots open, a walkthrough of the workflow on one of your own examples, and a say in which parts of the process it handles first. No commitment.
Related agents
Other agents built for risk & audit teams.
Additional resources
The workflow it is being built to run
A worked sample of the Audit Agent, and the pilot list for first access when pilots open.
200+ platforms through Merge
HRIS, ATS, accounting, CRM, ticketing and file storage, connected during onboarding with no custom integration build.
CIP, the control plane under every agent
Open-source governance: every action audited, every deployment versioned, every decision explainable. MIT-licensed.
Next step
Join the Audit Agent pilot list
No commitment. We email when pilots open, with a walkthrough on your own example.