- Home
- Audit Management Software
- OpenWorkpaper
OpenWorkpaper
What it is
OpenWorkpaper is an open-source web application for audit teams to document procedures from planning through fieldwork and reporting. Its dashboard brings together active audits, assigned work, and pending reviews, while a central tracker organizes client information requests and supports importing and exporting a master PBC spreadsheet. Each procedure can record its purpose, source, scope, methodology, results, conclusions, and reviewer comments. Groups, procedures, and attachments receive hierarchical numbering, and teams can assign work, discuss it, manage members, and record preparer and reviewer sign-offs. Procedures accept PDF, Word, Excel, and PowerPoint attachments; audit programs can be exported to Word. Access combines system roles with audit-specific team assignments, and OpenID Connect support includes Microsoft Entra ID, Okta, and Keycloak. The project documents HTTPS deployment with an Nginx reverse proxy and SSL/TLS certificates, plus logs for sensitive actions. It can run locally, on a private network, or in the cloud, using a portable SQLite database. The free, open-source software is self-hosted on your infrastructure.
For and against
For
- Free, open-source software for self-hosting.
- Dashboard shows active audits and pending reviews.
- Supports procedure assignments and reviewer sign-offs.
- Accepts PDF, Word, Excel, and PowerPoint attachments.
- Works with OpenID Connect identity providers.
Against
- Requires deployment on your own infrastructure.
- Supported audit type listed is internal audit only.
The verdict
OpenWorkpaper combines procedure documentation, request tracking, and team review in one self-hosted audit application. Its free model may suit audit departments comfortable managing their own deployment.
Who it suits
OpenWorkpaper is intended for CPA firms and internal audit departments that need to organize audit documentation and team workflows. It suits teams able to deploy and maintain software on their own infrastructure.
Plans and prices
Free / open source
self-host on your infrastructure
Read 15 Oct 2026 · openworkpaper.com
On the record
- Access control
- Role-based access combines system roles with audit-specific team assignments.github.com · read 15 Oct 2026
- Access controls
- OpenWorkpaper supports role-based access control, with system roles and audit-specific team assignments.github.com · read 8 Oct 2026
- Attachments
- Procedures accept PDF, Word, Excel and PowerPoint files.github.com · read 15 Oct 2026
- Audit documentation
- Each procedure records purpose, source, scope, methodology, results, conclusions and reviewer comments.github.com · read 15 Oct 2026
- Audit logging
- Logins, deletions, procedure unlocking and user changes are recorded in audit logs.github.com · read 15 Oct 2026
- Audit logs
- The system tracks sensitive actions such as logins, deletions, procedure unlocking, and user changes in audit logs.github.com · read 8 Oct 2026
- Capacity guidance
- For up to 200 concurrent auditors, the project recommends 2 to 4 vCPUs, 4GB to 8GB RAM, and 20GB or more of SSD storage.github.com · read 8 Oct 2026
- Collaboration
- Teams can assign procedures, manage engagement members, discuss work and record preparer and reviewer sign-offs.github.com · read 15 Oct 2026
- Database portability
- The database is a portable SQLite file and uploaded documents are stored in a separate persistent volume.github.com · read 15 Oct 2026
- Deployment
- Docker or Podman Compose deployment is recommended, with a manual Node.js installation also documented.github.com · read 15 Oct 2026
- Deployment and data
- The project supports local, private-network, and cloud deployment, and uses a portable SQLite database.github.com · read 8 Oct 2026
- Document support
- Procedures support PDF, Word, Excel, and PowerPoint attachments, and audit programs can be exported to Word format.github.com · read 8 Oct 2026
- HTTPS deployment
- A supplied Nginx configuration can terminate TLS on port 443 using certificates placed in the certs directory.github.com · read 15 Oct 2026
- Identity integrations
- OpenID Connect support includes Microsoft Entra ID, Okta and Keycloak.github.com · read 15 Oct 2026
- Intended users
- The project describes itself as built for CPA firms and internal audit departments.github.com · read 8 Oct 2026
- Licence
- The repository is distributed under the MIT License, with copyright attributed to Robert Sandidge in 2026.github.com · read 15 Oct 2026
- Limit: community code
- The project does not guarantee the accuracy, safety or effectiveness of community-contributed code.github.com · read 15 Oct 2026
- Limit: deployment burden
- The project requires users to provide and maintain the hosting environment, certificates, secrets, backups and network security.github.com · read 15 Oct 2026
