Audit process
A clear sequence so finance and risk know what evidence to prepare, what we will sample, and how findings land. Built for card processing audits — not generic consulting theatre.
Step 01 · Scope
We agree which processors, MIDs, currencies, and time windows matter. You name the decision the audit must support — month-end integrity, acquirer renewal, or dispute margin. The statement of work lists data rooms, interview roles, and delivery dates.
Step 02 · Evidence
Read-only settlement files, gateway extracts, policy packs, and dispute archives arrive in an agreed channel. We validate completeness before deep sampling so mid-audit surprises stay rare.
Step 03 · Test
Sampled transactions move through authorisation, capture, settlement, fees, and ledger posting. Breaks are typed — configuration, timing, fee map, or process handoff — with evidence references your team can reopen later.
Step 04 · Hand over
You receive a ranked register, a 90-day remediation sequence, and a closeout briefing with finance and ops. We stay available for clarification during the first remediation sprint when the statement of work includes it.
Patterns from the field
Multi-seller marketplace
Month-end deposits drifted from processor reports after a second acquirer was added. The control audit isolated MID mapping gaps and a fee line that never reached the ledger.
Reconciliation checklist adopted weekly; unexplained variance cut before the next close.
Digital subscriptions
Friendly fraud volume rose after a billing UX change. The pathway audit showed evidence packs buried delivery logs under CRM exports reviewers never opened.
Reason-code templates rewritten; first-page win facts standardised across support.
Cross-border fintech merchant
A renewal questionnaire arrived with a short deadline. Readiness mapping reused existing logs and named owners for each control question.
Binder delivered in two weeks; renewal answers submitted without weekend scrambles.
Tell us which processors you run and the control question on your desk. We reply with fit, timeline, and informational pricing.