Audit, Risk & Internal Control: Follow each risk, control and audit finding through to the end.
The risk register is updated once a year.
The last audit’s recommendations sit in a PDF, and segregation of duties depends on people remembering who may approve what.
Relief One, Safety, risk & compliance
How it works
Controls your auditor can read.
- Map your risks. Organisation and project risk registers, probability × impact, owners and mitigations.
- Enforce controls in the system. Segregation of duties, approval limits, delegations; a blocked action says which rule and why.
- Follow audit findings. Recommendations from audits and donor reviews become owned actions with deadlines.
- For the auditors. Evidence per control, a refusals log and the audit pack.
What it does.
- Risk registers
- Probability × impact, owners, mitigations, a heat map and trends.
- Segregation of duties
- A refused action names the rule it broke.
- Limits and delegations
- Approval limits and delegations with their periods.
- Audit recommendations
- From audits and donor reviews, owned and dated until closed.
- Anti-fraud controls
- Bank-detail change verification and duplicate detection.
- Control testing
- With evidence per control.
- Refusals and overrides log
- What the system refused, and who overrode what.
- Audit pack
- One export for external auditors.
The full list
Risk registers with heat map and trends, segregation-of- duties rules that refuse in plain words, approval limits and delegations with periods, audit and donor-review recommendations tracker, anti-fraud and anti-corruption controls (bank-detail change verification, duplicate detection), conflict-of-interest declarations, control testing with evidence, refusals and overrides log, internal audit plan, audit pack export for external auditors, board risk reporting.
What makes the difference
- The system enforces segregation of duties.
- Each audit recommendation has an owner and a deadline.
- The audit pack in one export.
With your AI agent
One question can cross several modules.
Each request your AI makes is logged and can be reverted.
- A question
- “Prepare the November board pack.”
- Reads
- Audit, Risk & Internal Control, Finance & Fund Accounting, MEAL, Membership & Governance, Workspace: Home, Drive, Calendar & Office
- Comes back
- A draft pack, with the open findings linked (To validate)
Connected to
It shares its records with these modules.
- Finance & Fund Accounting: Does each project cover its costs?
- Procurement & Supply Chain: Purchase orders that match their invoices.
- HR & Payroll: Staff and consultants, managed together.
- Policies, Documents & Data Protection: Policies and due-diligence documents, ready when asked.
- Grant Management & Donor Reporting: What each grant still needs from you.
- MEAL: Show what changed, and how you know.
- Membership & Governance: For associations, federations and their boards.
- Workspace: Home, Drive, Calendar & Office: Where the team works, wherever it sits.
Before you book a demo.
Is an override of a blocked action recorded?
Yes. The refusals and overrides log keeps what the system refused and who overrode what. It goes to your external auditors in the audit pack, beside the evidence for each control.
Are approval delegations limited to a period?
Approval limits and delegations are kept with their periods. Conflict-of-interest declarations and the internal audit plan are in this module too.
Can we start with Audit, Risk & Internal Control alone?
Yes. Each organisation starts with the base, then picks its modules. You can start with one and add others later.
Can we switch a module off later?
You can, and its data is kept. A module switched off disappears from menus and search, and switching it back on restores it.
Can you import from our spreadsheets and current tools?
Yes: people, projects, budgets, policies, files (including a one-time import or a live two-way sync with Google Drive), and the content of your existing workbooks. Connectors to your other systems are built as part of the project.
Next module
- Staff & Partner Portals: The ERP as staff and partners see it.
Safety, risk & compliance
- Security & Safety: Report incidents from the field, offline.
- Safeguarding & Complaints: Where concerns are reported and cases handled.
- Policies, Documents & Data Protection: Policies and due-diligence documents, ready when asked.
- Add to your Relief One
- The base: The part every organisation gets.
- Relief One
Book a demo of Relief One.
Tell us how your organisation works and which modules you are looking at. We show you Relief One on the parts that matter to you.