Every audit cycle, your auditor asks for the same 20–25 ITGC controls, each with five or six evidence items: a screenshot of the selection screen, screenshots of the results, and the underlying data as a download. Four hundred to six hundred artefacts a year, captured by hand. The Audit Agent captures them for you.
The agent doesn't replace your auditor. Nothing changes in the evidence format they already accept — they still receive screenshots and data exports. What changes is who spends the month producing them.
How it works
-
Run
Launch from the desktop app, or schedule it for the first morning of your audit cycle. The agent attaches to your own SAP GUI session, so it inherits your authorizations — no service account, no stored SAP password.
-
Capture
Transaction by transaction, it enters the selection criteria, screenshots it, executes, screenshots every page of results, and exports the data as real .xlsx. Read and display only — no write access to production, ever.
-
Package
A folder per control, a Word document with every screenshot inline, a combined workbook, and a SHA-256 hash recorded at capture time. It lands in your SharePoint and your manager gets the link.
What's in the pack
One zip, per control, hashed and timestamped at capture — verifiable by the auditor.
Guardrail by design
The Audit Agent finds, captures and assembles evidence. It has no write access to production and never changes anything in SAP. Any resulting cleanup is proposed for a human to approve and your SAP team to apply through your standard change process — human approval gates every action.
Where it runs
On your Windows machine, driving your own SAP GUI session against S/4HANA, ECC or RISE. Evidence lands in your SharePoint, never on our servers — your SAP data never leaves your network.
The engine is your choice
The Audit Agent's reasoning runs on whichever engine your policies allow — Claude in the cloud, Claude inside your AWS account via Bedrock, an on-premise open model, or a rule-based engine with no LLM at all. Read more about our AI-native SAP security approach, or explore the wider Syntasec platform and the User Admin Agent.
See the Audit Agent run against your SAP.
Send us your control list, and we'll show you the evidence pack it produces — live on your infrastructure in 2–4 weeks.