- Home
- Internal Controls Software
- ControlHatch
ControlHatch
The terms give the company address as 681 S Logan St, Denver, Colorado 80209, United States.
What it is
ControlHatch is a web-based GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. Teams can organize control testing by round, record exceptions, and capture reviewer sign-off in an audit trail. Its AI-assisted matrix workflow drafts risks, controls, and assertions from process descriptions for users to review. Risk dashboards score risks and connect them to mitigating controls. Recurring monthly and quarterly certification campaigns can send reminders and capture timestamped attestations, while a dashboard tracks evidence requests and fieldwork status, including outstanding PBC items. Fieldwork can be exported to a team’s Excel testing templates. ControlHatch says it supports more than 50 frameworks and standards, including SOX 404, SOC 1 and SOC 2, ITGC, ISO 27001, PCI DSS, and HIPAA. Listed security measures include encryption, role-based access, audit logging, and SHA-256 hashing of uploaded evidence. The free plan is free and includes unlimited users, entities, projects, and controls, AI-assisted workflows, and full data export. It runs on the web and is presented for audit, risk, compliance, accounting, and finance teams.
For and against
For
- Free plan includes unlimited users and projects.
- AI drafts control matrices from process descriptions.
- Supports more than 50 frameworks and standards.
- Exports fieldwork to Excel testing templates.
Against
- Web platform only.
- Evidence collection is manual.
- No free trial is listed.
The verdict
ControlHatch combines control testing, risk assessment, certifications, and evidence tracking in a web platform. Its listed free plan includes full data export and unlimited users, entities, projects, and controls.
Who it suits
It suits SOX compliance teams, audit firms, risk and compliance professionals, and accounting or finance departments that need control testing and evidence workflows.
Plans and prices
Free
Unlimited users · unlimited entities · unlimited projects · unlimited controls
Read 15 Oct 2026 · controlhatch.com
On the record
- Access and trial
- The site says the product is free with full functionality for as long as needed and describes it as not a trial; signup requires no credit card or sales call.controlhatch.com · read 4 Oct 2026
- AI control matrices
- AI drafts risks, controls and assertions from a described process for users to review and refine.controlhatch.com · read 15 Oct 2026
- API and SDKs
- The opened product pages identify no public API, SDK or developer documentation.controlhatch.com · read 15 Oct 2026
- Audit workpapers
- Workpapers centralize testing documentation, evidence and sign-off while linking records to controls.controlhatch.com · read 15 Oct 2026
- Certifications
- It supports recurring monthly and quarterly certification campaigns with reminders, bulk creation and timestamped attestations.controlhatch.com · read 15 Oct 2026
- Company
- The maker is Lawson Advisory Group LLC, doing business as ControlHatch.controlhatch.com · read 15 Oct 2026
- Compliance disclaimer
- The terms say the platform supports compliance management but does not provide legal, accounting or regulatory advice or guarantee audit success.controlhatch.com · read 15 Oct 2026
- Control testing
- Control testing supports round-by-round fieldwork tracking, exception logging and reviewer sign-off with an audit trail.controlhatch.com · read 15 Oct 2026
- Data deletion
- After termination, the company may delete customer data and requires customers to export anything they want to retain beforehand.controlhatch.com · read 15 Oct 2026
- Data ownership
- Customers retain rights to data uploaded or processed through the platform, while granting Lawson Advisory Group a limited license to host and process it for service operation.controlhatch.com · read 15 Oct 2026
- Evidence integrity
- Uploaded evidence is SHA-256 hashed at upload for tamper evidence.controlhatch.com · read 15 Oct 2026
- Evidence requests
- A dashboard tracks evidence requests and fieldwork status, with scheduled reminders for outstanding PBC items.controlhatch.com · read 15 Oct 2026
- Excel export
- Users can export fieldwork into their existing Excel testing templates.controlhatch.com · read 15 Oct 2026
- Excel templates
- Users can export fieldwork to their own Excel testing templates.controlhatch.com · read 4 Oct 2026
- Framework coverage
- The site says the platform supports more than 50 frameworks and standards.controlhatch.com · read 15 Oct 2026
- Framework mapping
- The control-matrix workflow includes framework and assertion mapping.controlhatch.com · read 15 Oct 2026
- Frameworks
- The site says ControlHatch supports more than 50 frameworks and standards, including SOX 404, SOC 1 and SOC 2, ITGC, ISO 27001, PCI DSS, and HIPAA.controlhatch.com · read 4 Oct 2026
- Free access
- The homepage describes ControlHatch as completely free, with no paid tiers, credit-card requirement, hidden fees or sales calls.controlhatch.com · read 15 Oct 2026
