SOX Evidence Collection
In development · expected Q4 2026
Stop chasing control ownersfor evidence.
Pegasus collects control evidence from your systems automatically, requests what it can't collect, chases the owners, and assembles the package before fieldwork starts.
- No GRC migration
- Control owners keep sign-off
- Chain of custody on every piece of evidence
Q3 SOX evidence collection — 12 days to fieldwork
- controls in scope
- 142
- evidence complete
- 126
- outstanding
- 16
- Outstanding
ITGC-04 · Quarterly user access review
Access review sign-off is missing for the ERP.
- Outstanding
FIN-12 · Journal entry approval
3 of 40 sampled entries lack approver evidence.
- Outstanding
REV-07 · Contract review for revenue recognition
Two contracts over the threshold lack the review checklist.
Sample data. Every finding shows what was found, why it was flagged, the evidence, and what a person decides.
SOX evidence shouldn't be gathered by email three weeks before fieldwork.
Chasing control owners
The same twenty people are asked for the same screenshots every quarter.
Screenshots and spreadsheets
Evidence is captured by hand, named inconsistently and stored wherever.
Gaps found during testing
Missing or stale evidence is discovered when the auditors are already in the room.
Pegasus collects what systems can provide and chases the rest, so audit starts complete.
How Pegasus works
- 01
Connect
Pegasus connects to the systems where the work already happens.
Pegasus connects to your ERP, HRIS, ticketing and file storage, the systems where control evidence is generated.
- 02
Process
Rules and AI perform the repetitive workflow.
Evidence for each control is collected from the source on schedule, requests are raised for anything that needs a person, and owners are reminded automatically.
- 03
Review
Humans see only exceptions, risks and decisions.
Control owners and internal audit see only the outstanding items, sign off on evidence, and the package is assembled with a chain of custody.
AI does the volume. Humans keep the judgment.
Interactive sample
Here is the finding. Here is the evidence. You decide.
Click any finding. Every one answers what Pegasus found, what your rule says, why it was flagged and where the evidence is, then leaves the decision with you. This is the workflow the agent is being built to run.
Q3 SOX evidence collection — 12 days to fieldwork
- 142 controls in scope
- 126 evidence complete
- 16 outstanding
ITGC-04 · Quarterly user access review
Outstanding- Found
- Access review sign-off is missing for the ERP.
- Required
- A signed review from the application owner each quarter.
- Why it's outstanding
- The owner has been reminded twice; the review is 9 days overdue.
- Evidence
- NetSuite · access report Q3
Your decision
Pegasus proposes. You decide, and the decision is logged with your name, the time and the evidence.
Keep the systems you already use.
Pegasus operates across your workflow instead of forcing another platform migration.
- NetSuite
- Workday
- SharePoint
- Jira
- Google Drive
Evidence is collected from the systems that produce it and stored with its provenance. Your GRC tool, if you have one, stays in place.
Pilot list
Join the Audit Agent pilot list
The Audit Agent is in development, expected Q4 2026. Pilot-list members get the first pilot slots and a walkthrough of the workflow on one of their own examples as it ships.
- First access when pilots open
- A walkthrough of the workflow on your own example
- No commitment, and a say in what it handles first
Join the pilot list
First access when pilots open. Nothing to install, nothing to commit to.
FAQ
SOX Evidence Collection FAQs
Next step
Join the Audit Agent pilot list
No commitment. We email when pilots open, with a walkthrough on your own example.