StowbillAudit management software for external audit firms
An external audit is a sequence of decisions that must be evidenced: acceptance, planning, fieldwork, review and release. Stowbill records each step against the engagement, keeps working papers under version control, and holds an activity trail that nobody can edit or delete.
The audit, stage by stage
| Stage | What Stowbill records |
|---|---|
| Acceptance | Gate checklist completed and the move approved by a partner |
| Planning | Work plan tasks, planned hours and the team assigned |
| Fieldwork | Working papers with versions, change notes and sign-offs |
| Review | Quality review of the file before release |
| Release | Independent partner release, recorded with date and user |
Working papers under version control
- Organise papers in folders within each engagement.
- Check a paper out to edit it, then check it in with a change note.
- Sign-offs are tied to the exact version signed. Upload a new version and the sign-off resets.
- Restore an earlier version if a change was wrong.
Getting documents from the client
Clients upload through a secure link, without creating an account. Uploads land in the engagement, not in someone's inbox. Use our free PBC request list as a starting point.
Quality management
Stowbill includes an ISQM 1 module for the firm's system of quality management, alongside a quality review step and independent partner release on each engagement.
Evidence you can show an inspector
Every view, download and share of a file is written to an append-only activity log. The database refuses edits and deletions to that log, and each entry carries a hash of the one before, so a change made directly in the database would show up when the chain is re-checked. Export it to Excel when an inspector or a partner asks.
Security
- Files encrypted at rest with AES-256 on Amazon S3.
- Uploaded files checked on arrival, with programs and scripts blocked. Antivirus scanning can be added on the Firm plan.
- Multi-factor authentication, and a list of signed-in devices with remote sign-out.
- Each firm's data isolated from other firms in the database.
- Need-to-know access and a read-only team role.
Questions
Does Stowbill replace our audit methodology?
No. It manages the engagement, the file and the evidence around your methodology. You keep your own programmes and templates.
What happens to a sign-off when a paper changes?
The sign-off belongs to the version that was signed. A new version needs a new sign-off.
Can a partner release a file they reviewed as engagement partner?
Release is a separate, independent partner step, recorded on its own.
Can the activity trail be edited?
No. It is append-only, and the database itself rejects edits and deletions.
Do clients need a login?
No. Clients upload through a secure link.
Is there a regional version?
See our pages for Pakistan, the UAE and Saudi Arabia, which cover local requirements.
Last reviewed 10 November 2026. General information, not professional or legal advice.
Related
An audit trail that cannot be edited or deleted
An append-only, hash-chained log of every file view, download and share. The database blocks edits, and the ch…
FeaturesVersion control for working papers and deal documents
Check documents out and in with change notes, keep every version, restore old ones, and tie each sign-off to t…
SolutionsISQM 1 software for small and mid-size audit firms
ISQM 1 software for small and mid-size audit firms: quality objectives, risk register, monitoring, deficiencie…
TemplatesFree PBC request list template for statutory audits
Free prepared-by-client (PBC) request list for a statutory audit: 40+ documents by area, from bank statements …
SolutionsPractice management for accounting and advisory firms
Run engagements, files, timesheets and invoices in one place. Partner-approved stages, planned vs actual hours…
Run your next audit in Stowbill
Start a 30-day trial, or let us walk your partners through a live engagement.