AuditDashboard

Supergood | AuditDashboard API

Alex Klarfeld

Alex Klarfeld

— 6 min read
Supergood | AuditDashboard API

Programmatically access AuditDashboard engagement data, PBC request lists, document exchange, approvals, and client collaboration with a stable REST API. Supergood builds and operates production-grade, unofficial AuditDashboard integrations so your team can automate audit workflows and add AI without heavy custom engineering.

Plain English: AuditDashboard is audit client collaboration software used by accounting firms and internal audit teams to manage prepared-by-client (PBC) request lists, collect evidence securely, track engagement milestones, assign work, and communicate with client stakeholders. An unofficial API lets you pull engagements, clients, request items, documents, approvals, comments, and activity logs—and push new requests, upload evidence, update statuses, assign owners, trigger reminders, and record sign-offs.

For a tech company integrating with AuditDashboard, this means you can ingest real-time engagement and client data to power dashboards, sync PBC requests with your ticketing or GRC system (e.g., Jira, ServiceNow, AuditBoard, Workiva), automate evidence collection and review, use AI to classify and extract data from uploaded documents, orchestrate reminders and SLAs, and keep document repositories (e.g., SharePoint, Box) in lockstep.

What is AuditDashboard?

AuditDashboard (https://www.auditdashboard.com/) is a secure cloud platform that streamlines audit engagements by centralizing PBC request management, document exchange, approvals, and client communication between firms and their clients. Teams use AuditDashboard to coordinate request lists, assign owners, track due dates and statuses, collect evidence with versioning and audit trails, review and approve submissions, and report progress via dashboards and analytics.

Core product areas include:

  • Engagement Management (engagement metadata, milestones, roles)
  • PBC Request Management (request lists, categories, assignments, statuses)
  • Secure Document Exchange (uploads, versioning, virus scan, retention)
  • Client Collaboration (comments, notifications, reminders)
  • Approvals & Sign-Offs (review states, approver workflows)
  • Analytics & Reporting (progress, aging, SLA adherence)

Common data entities:

  • Firms, Users, Roles/Permissions (Partner, Manager, Staff, Client Contact)
  • Clients (organizations, contacts, locations)
  • Engagements (service type, fiscal year, status, team)
  • Request Lists & Request Items (categories, tags, due dates, dependencies)
  • Documents (file metadata, versions, checksums, links to request items)
  • Comments/Activity (notes, mentions, timestamps)
  • Approvals (review status, approvers, signatures, timestamps)
  • Issues/Findings (observations, severity, remediation)

The AuditDashboard Integration Challenge

Audit teams rely on AuditDashboard every day, but turning portal-first workflows into API-driven automation requires careful handling:

  • Role-aware portals: Firm staff and client contacts see different data, statuses, and actions
  • Evidence rigor: Document versioning, virus scanning, and audit trails must be preserved
  • Front-end-first flows: Requests, comments, and approvals are optimized for UI interaction
  • Authentication complexity: SSO/MFA and session lifecycles complicate headless automation
  • Data spread: Key context lives across engagements, request lists, documents, and comments

How Supergood Creates AuditDashboard APIs

Supergood reverse-engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your AuditDashboard tenant.

  • Handles username/password, SSO/OAuth, and MFA (SMS, email, TOTP) securely
  • Maintains session continuity with automated refresh and change detection
  • Normalizes responses so you can integrate once and rely on consistent objects across modules
  • Aligns with customer entitlements and role-based permissions to ensure compliant access

Use Cases

Engagement & Client Data Sync

  • Mirror engagements, clients, and team assignments into your internal systems
  • Keep engagement metadata current for analytics, dashboards, and SLA tracking
  • Normalize service types (Audit, Review, SOC, Internal Audit), fiscal years, and statuses

PBC Request Automation

  • Generate request lists from your ERP/GL and risk/control libraries
  • Assign owners, set due dates, and trigger reminders automatically
  • Track statuses to drive escalations and push updates back to AuditDashboard

Evidence Collection, Review & Approvals

  • Upload evidence from your product or DMS and link to request items
  • Use AI to classify documents, extract figures (e.g., trial balance totals), and flag mismatches
  • Record review outcomes, approvals, and sign-offs with audit logs

Issues & Findings Workflow

  • Capture findings during fieldwork and route remediation tasks
  • Sync observations into GRC tools (e.g., AuditBoard, Workiva) with metadata
  • Report closure status and link final evidence back to the engagement

Notifications & SLA Management

  • Orchestrate reminders based on due dates, inactivity, or missing evidence
  • Push notifications to Teams/Slack or email and track delivery
  • Maintain SLA dashboards for partners, managers, and client stakeholders

Available Endpoints

Authentication

POST /sessions: Establish a session using credentials. Supergood manages MFA (SMS, email, TOTP) and SSO/OAuth when enabled. Returns a short-lived auth token maintained by the platform.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/sessions \
  --header 'Authorization: Basic <Base64 encoded token>' \
  --header 'Content-Type: application/json' \
  --data '{
    "username": "[email protected]",
    "password": "<password>",
    "mfa": { "type": "totp", "code": "123456" }
  }'

Example response

{
  "authToken": "eyJhbGciOi...",
  "expiresIn": 3600,
  "user": {
    "id": "u_firm_7a21c3",
    "name": "Audit Manager",
    "entitlements": ["engagements", "requests", "documents", "approvals"]
  }
}

POST /sessions/refresh: Refresh an existing token to keep sessions uninterrupted.

Engagements

GET /engagements: List engagements with filters and summary details.

Query parameters

  • firmId: string
  • clientId: string
  • fiscalYear: integer (e.g., 2025)
  • serviceType: audit | review | soc | internal
  • status: planning | fieldwork | wrap_up | complete
  • updatedFrom, updatedTo: ISO 8601 timestamps
  • page, pageSize: integers for pagination

Example response

{
  "items": [
    {
      "engagementId": "eng_21f903",
      "name": "ACME Corp FY2025 Audit",
      "clientId": "cl_88b32e",
      "clientName": "ACME Corporation",
      "serviceType": "audit",
      "fiscalYear": 2025,
      "status": "fieldwork",
      "startDate": "2026-01-10",
      "endDate": null,
      "leadPartner": {"id": "u_firm_01", "name": "Jordan Smith"},
      "manager": {"id": "u_firm_02", "name": "Casey Lee"},
      "teamSize": 6,
      "requestCounts": {"total": 284, "open": 97, "received": 162, "approved": 25},
      "updatedAt": "2026-01-20T13:45:00Z"
    }
  ],
  "page": 1,
  "pageSize": 50,
  "total": 1
}

PBC Requests

POST /engagements/{engagementId}/requests: Create a PBC request item with category, due date, assignments, and client-facing options.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_21f903/requests \
  --header 'Authorization: Bearer <authToken>' \
  --header 'Content-Type: application/json' \
  --data '{
    "title": "Accounts Receivable Aging",
    "category": "Receivables",
    "description": "Provide month-end AR aging as of 12/31/2025 and reconciliation to GL.",
    "requestType": "document",
    "dueDate": "2026-02-05",
    "required": true,
    "tags": ["financial_statement", "substantive"],
    "assignees": [{"userId": "u_client_14", "email": "[email protected]"}],
    "allowMultipleDocuments": true,
    "checklist": [
      {"item": "Export AR aging by customer", "required": true},
      {"item": "Provide reconciliation to GL", "required": true}
    ],
    "notifyClient": true
  }'

Example response

{
  "requestId": "req_90e412",
  "status": "open",
  "category": "Receivables",
  "createdAt": "2026-01-21T10:03:11Z"
}

Request Updates

PATCH /engagements/{engagementId}/requests/{requestId}: Update request status, due dates, assignments, and review notes.

curl --request PATCH \
  --url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_21f903/requests/req_90e412 \
  --header 'Authorization: Bearer <authToken>' \
  --header 'Content-Type: application/json' \
  --data '{
    "status": "in_review",
    "dueDate": "2026-02-07",
    "assignedToUserId": "u_firm_02",
    "reviewNotes": "Reconcile aging to GL account 1200; verify total ties to TB.",
    "checklistUpdates": [
      {"item": "Export AR aging by customer", "completed": true},
      {"item": "Provide reconciliation to GL", "completed": false}
    ]
  }'

Example response

{
  "requestId": "req_90e412",
  "status": "in_review",
  "dueDate": "2026-02-07",
  "assignedToUserId": "u_firm_02",
  "updatedAt": "2026-01-22T08:15:12Z"
}

Documents

POST /engagements/{engagementId}/documents: Upload evidence and optionally link it to a specific request item.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_21f903/documents \
  --header 'Authorization: Bearer <authToken>' \
  --header 'Content-Type: application/json' \
  --data '{
    "requestId": "req_90e412",
    "fileName": "AR_aging_2025_12_31.xlsx",
    "mimeType": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
    "size": 184320,
    "checksumSha256": "6a1b...f0c",
    "uploadToken": "upl_08ab73",
    "versionComment": "Initial upload from client",
    "clientVisible": true,
    "sourceSystem": "sharepoint"
  }'

Example response

{
  "documentId": "doc_51af80",
  "requestId": "req_90e412",
  "version": 1,
  "virusScanStatus": "clean",
  "createdAt": "2026-01-21T11:20:44Z"
}

Get full API Specs →

Technical Specifications

  • Authentication: Username/password with MFA (SMS, email, TOTP) and SSO/OAuth where enabled; supports service accounts or customer-managed credentials
  • Response format: JSON with consistent resource schemas and pagination across modules
  • Rate limits: Tuned for enterprise throughput while honoring customer entitlements and usage controls
  • Session management: Automatic reauth and cookie/session rotation with health checks
  • Data freshness: Near real-time retrieval of engagements, requests, documents, approvals, and activity
  • Security: Encrypted transport, scoped tokens, and audit logging; respects AuditDashboard role-based permissions
  • Webhooks: Optional asynchronous delivery for long-running workflows (e.g., client approvals, document uploads)

Performance Characteristics

  • Latency: Sub-second responses for list/detail queries under normal load
  • Throughput: Designed for high-volume request list sync and document processing
  • Reliability: Retry logic, backoff, and idempotency keys minimize duplicate actions
  • Adaptation: Continuous monitoring for UI/API changes with rapid adapter updates

Getting Started

  1. Schedule Integration Assessment

Book a 30-minute session to confirm your modules, licensing, and authentication model.

  1. Supergood Builds and Validates Your API

We deliver a hardened AuditDashboard adapter tailored to your workflows and entitlements.

  1. Deploy with Monitoring

Go live with continuous monitoring and automatic adjustments as AuditDashboard evolves.

Schedule Integration Call →

Frequently Asked Questions

Q: Which AuditDashboard modules can this integration cover?

Supergood supports workflows across commonly used modules such as Engagements, PBC Request Lists, Secure Document Exchange, Approvals/Sign-Offs, and Client Collaboration, subject to your licensing and entitlements. We scope coverage during integration assessment.

Q: How are MFA and SSO handled for automation?

We support username/password + MFA (SMS, email, TOTP) and can operate behind SSO/OAuth when enabled. Sessions are refreshed automatically with secure challenge handling.

Q: Can you sync requests and documents to our GRC or document management system?

Yes. We normalize PBC requests, approvals, and evidence to match your schema and deliver updates via webhooks or polling while complying with rate and permission constraints. We commonly integrate with AuditBoard, Workiva, SharePoint, Box, Jira, and ServiceNow.

Q: Are approvals and signatures supported?

Yes. We support downloading approval artifacts and uploading attachments via signed uploads, with checksum validation and time-limited URLs. Approval states and signature requirements are modeled explicitly in our normalized responses.

Ready to automate your AuditDashboard workflows?

Supergood can have your AuditDashboard integration live in days with no ongoing engineering maintenance.

Get Started →

Read more