AuditFile

Supergood | AuditFile API

Alex Klarfeld

Alex Klarfeld

— 6 min read
Supergood | AuditFile API

Programmatically access AuditFile engagement data, trial balances, adjusting entries, PBC requests, and review workflows with a stable REST API. Supergood builds and operates production-grade, unofficial AuditFile integrations so your team can automate audit processes and layer AI into your workflows without heavy custom engineering.

Plain English: AuditFile is cloud software for CPA firms to run audits and assurance engagements end-to-end. An unofficial API lets you programmatically pull engagement lists, clients, trial balances, workpaper metadata, risks and procedures, issues/review notes, and PBC requests—and push new records like trial balance imports, adjusting journal entries (AJEs), PBC requests, and status updates back into AuditFile.

For a tech company integrating with AuditFile, you can ingest real-time client and engagement data to power dashboards, sync trial balances and AJEs to accounting (e.g., QuickBooks, Xero), automate and track PBC request fulfillment from your app, or enrich your platform with workpaper and review status. You can also apply AI to classify client uploads, extract line items into the trial balance, detect anomalies, produce narratives for workpapers, and keep downstream systems (ERP, analytics, document AI, CRM) in lockstep.

What is AuditFile?

AuditFile (https://auditfile.com/) is a cloud platform for audit and assurance engagement management used by CPA firms and internal audit teams. It centralizes planning, risk assessment, audit programs and procedures, trial balance, sampling, workpapers, PBC/client collaboration, review notes, and sign-offs in a secure binder.

Core product areas include:

  • Engagement Management (Clients, Engagements, Roles/Permissions, Milestones, Sign-Offs)
  • Planning & Risk (Materiality, Risk Assessments, Assertions, Procedures/Programs)
  • Trial Balance & Analytics (Account mapping, Lead Schedules, AJEs, Tie-Outs)
  • Workpapers & Documents (Binder structure, Templates, Versioning, Checklists)
  • Client Collaboration (PBC Requests, Secure Portal, Due Dates, Messaging)
  • Review & Quality Control (Issues/Notes, Review Levels, Approvals, Archive)

Common data entities:

  • Firms, Users, Roles/Permissions (Partner, Manager, Senior, Staff, Client Contact)
  • Clients (organization record, contacts)
  • Engagements (service type, fiscal year, status, materiality)
  • Trial Balance (accounts, mapping, balances, assertions)
  • Adjusting Journal Entries (lines, type, status, sign-offs)
  • Programs/Procedures (steps, owners, completion, evidence links)
  • Workpapers (files, index, folder, references)
  • PBC Requests (items, due dates, status, portal links)
  • Issues/Review Notes (severity, assignees, resolutions)

The AuditFile Integration Challenge

AuditFile is purpose-built for audit rigor, but turning portal-first workflows into API-driven automation requires care:

  • Binder structure and permissions: Engagement binders include granular roles, review levels, and sign-off gates
  • Trial balance integrity: Account mapping, ties to lead schedules, and AJEs demand consistent, auditable changes
  • Client portal flows: PBC requests, uploads, and acknowledgements are optimized for UI-driven interactions
  • Authentication complexity: SSO/MFA and session lifecycles complicate headless automation
  • Audit trail and evidence: Every change must preserve provenance, timestamps, and reviewer context

How Supergood Creates AuditFile APIs

Supergood reverse-engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your AuditFile tenant.

  • Handles username/password, SSO/OAuth, and MFA (SMS, email, TOTP) securely
  • Maintains session continuity with automated refresh and change detection
  • Normalizes responses so you can integrate once and rely on consistent objects across modules
  • Aligns with customer entitlements and role-based permissions to ensure compliant access

Use Cases

Engagement & Client Data Sync

  • Mirror clients and engagements to your internal systems
  • Keep engagement status, milestones, and ownership current for capacity planning and reporting
  • Normalize fiscal year-end dates, service types, and materiality metrics across firms

Trial Balance & Adjusting Entries Automation

  • Import trial balances from GL exports and map accounts consistently
  • Programmatically create AJEs from anomaly detection or reconciliations
  • Reconcile and post approved AJEs back to AuditFile with reviewer sign-off metadata

PBC Requests & Document Intelligence

  • Generate PBC checklists and due dates tied to engagement milestones
  • Ingest client uploads, classify with AI, and auto-extract tables into TB/AJE candidates
  • Drive SLA alerts for overdue items and push reminders through the client portal

Workpapers, Issues & Review Workflow

  • Link evidence to procedures and track completion across teams
  • Create and resolve review notes, escalate based on severity, and export an issues log
  • Archive binders with complete audit trails to downstream storage or VDRs

Available Endpoints

Authentication

POST /sessions: Establish a session using credentials. Supergood manages MFA (SMS, email, TOTP) and SSO/OAuth when enabled. Returns a short-lived auth token maintained by the platform.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/sessions \
  --header 'Authorization: Basic <Base64 encoded token>' \
  --header 'Content-Type: application/json' \
  --data '{
    "username": "[email protected]",
    "password": "<password>",
    "mfa": { "type": "totp", "code": "123456" }
  }'

Example response

{
  "authToken": "eyJhbGciOi...",
  "expiresIn": 3600,
  "user": {
    "id": "u_af_92cd10",
    "name": "Senior Auditor",
    "entitlements": ["engagements", "trial_balance", "journal_entries", "pbc_requests"]
  }
}

POST /sessions/refresh: Refresh an existing token to keep sessions uninterrupted.

Engagements

GET /engagements: List engagements with filters and summary details.

Query parameters

  • firmId: string
  • clientId: string
  • serviceType: audit | review | compilation | agreed_upon_procedures
  • status: planning | fieldwork | review | final | archived
  • fiscalYearEnd: YYYY-MM-DD
  • updatedFrom, updatedTo: ISO 8601 timestamps
  • page, pageSize: integers for pagination

Example response

{
  "items": [
    {
      "engagementId": "eng_7a21f3",
      "name": "2025 Financial Statement Audit",
      "clientId": "cli_445881",
      "clientName": "Acme Manufacturing, Inc.",
      "serviceType": "audit",
      "fiscalYearEnd": "2025-12-31",
      "status": "fieldwork",
      "materiality": 250000.0,
      "performanceMateriality": 187500.0,
      "percentComplete": 62,
      "leadPartnerUserId": "u_af_001",
      "managerUserId": "u_af_002",
      "assignedTeamCount": 6,
      "createdAt": "2025-01-10T14:12:11Z",
      "updatedAt": "2026-01-20T09:35:04Z"
    }
  ],
  "page": 1,
  "pageSize": 50,
  "total": 1
}

Trial Balance

GET /engagements/{engagementId}/trial-balance: Retrieve trial balance accounts, mapped to lead schedules with balances and adjustments.

Query parameters

  • includeAdjustments: boolean
  • asOf: YYYY-MM-DD
curl --request GET \
  --url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_7a21f3/trial-balance?includeAdjustments=true&asOf=2025-12-31 \
  --header 'Authorization: Bearer <authToken>'

Example response

{
  "engagementId": "eng_7a21f3",
  "asOf": "2025-12-31",
  "currency": "USD",
  "accounts": [
    {
      "accountId": "acc_1000",
      "number": "1000",
      "name": "Cash and Cash Equivalents",
      "type": "asset",
      "leadScheduleCode": "A",
      "assertions": ["existence", "rights_obligations"],
      "openingBalance": 1250000.0,
      "unadjustedBalance": 1345000.0,
      "adjustmentsTotal": -25000.0,
      "finalBalance": 1320000.0,
      "updatedAt": "2026-01-19T18:04:22Z"
    }
  ]
}

Adjusting Journal Entries

POST /engagements/{engagementId}/journal-entries: Create an adjusting journal entry (AJE) and optionally post it to the trial balance.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_7a21f3/journal-entries \
  --header 'Authorization: Bearer <authToken>' \
  --header 'Content-Type: application/json' \
  --data '{
    "type": "adjusting",
    "date": "2025-12-31",
    "memo": "Accrue bonus expense per HR schedule",
    "reference": "AJE-ACCRUALS-12-31",
    "preparedByUserId": "u_af_003",
    "requiresReview": true,
    "postNow": true,
    "lines": [
      {"accountId": "acc_6100", "debit": 180000.0, "credit": 0.0, "description": "Bonus expense", "workpaperRef": "WP B-12"},
      {"accountId": "acc_2200", "debit": 0.0, "credit": 180000.0, "description": "Accrued bonuses", "workpaperRef": "WP B-12"}
    ],
    "attachments": [
      {"fileName": "bonus_schedule.xlsx", "uploadToken": "upl_54aa91"}
    ]
  }'

Example response

{
  "journalEntryId": "je_29fd81",
  "number": "AJE-000127",
  "status": "pending_review",
  "totalDebit": 180000.0,
  "totalCredit": 180000.0,
  "posted": true,
  "createdAt": "2026-01-21T11:20:44Z"
}

PBC Requests

POST /engagements/{engagementId}/pbc-requests: Create a PBC (Prepared By Client) request for the client portal with due dates and notifications.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_7a21f3/pbc-requests \
  --header 'Authorization: Bearer <authToken>' \
  --header 'Content-Type: application/json' \
  --data '{
    "title": "Bank statements for all accounts (Q4)",
    "description": "Upload monthly bank statements and reconciliations for Oct-Dec.",
    "category": "Cash",
    "dueDate": "2026-02-05",
    "required": true,
    "notifyClient": true,
    "clientContactId": "cc_81822",
    "tags": ["cash", "reconciliations"],
    "attachments": [
      {"fileName": "example_format.pdf", "uploadToken": "upl_09cb73"}
    ]
  }'

Example response

{
  "requestId": "pbc_90e412",
  "status": "open",
  "portalLink": "https://client.auditfile.com/r/pbc_90e412",
  "createdAt": "2026-01-21T10:03:11Z"
}

Get full API Specs →

Technical Specifications

  • Authentication: Username/password with MFA (SMS, email, TOTP) and SSO/OAuth where enabled; supports service accounts or customer-managed credentials
  • Response format: JSON with consistent resource schemas and pagination across modules
  • Rate limits: Tuned for enterprise throughput while honoring customer entitlements and usage controls
  • Session management: Automatic reauth and cookie/session rotation with health checks
  • Data freshness: Near real-time retrieval of engagements, trial balances, AJEs, PBC items, and review objects
  • Security: Encrypted transport, scoped tokens, and audit logging; respects AuditFile role-based permissions and review levels
  • Webhooks: Optional asynchronous delivery for long-running workflows (e.g., client uploads, review approvals)

Performance Characteristics

  • Latency: Sub-second responses for list/detail queries under normal load
  • Throughput: Designed for high-volume engagement sync, TB imports, and PBC processing
  • Reliability: Retry logic, backoff, and idempotency keys minimize duplicate actions
  • Adaptation: Continuous monitoring for UI/API changes with rapid adapter updates

Getting Started

  1. Schedule Integration Assessment

Book a 30-minute session to confirm your modules, licensing, and authentication model.

  1. Supergood Builds and Validates Your API

We deliver a hardened AuditFile adapter tailored to your workflows and entitlements.

  1. Deploy with Monitoring

Go live with continuous monitoring and automatic adjustments as AuditFile evolves.

Schedule Integration Call →

Frequently Asked Questions

Q: Which AuditFile modules can this integration cover?

Supergood supports workflows across commonly used modules such as Engagements (status, sign-offs), Trial Balance (accounts, mapping, balances), Adjusting Entries (creation, status), Client Collaboration (PBC requests, uploads), and Workpapers/Issues metadata, subject to your licensing and entitlements. We scope coverage during integration assessment.

Q: How are MFA and SSO handled for automation?

We support username/password + MFA (SMS, email, TOTP) and can operate behind SSO/OAuth when enabled. Sessions are refreshed automatically with secure challenge handling.

Q: Can you import trial balances and sync AJEs with our accounting system?

Yes. We can normalize trial balances and AJEs to match your ERP/accounting schema and deliver updates via webhooks or polling while complying with rate and permission constraints. We commonly integrate with QuickBooks and Xero.

Yes. Our adapter maintains timestamps, user IDs, and reference fields (e.g., workpaper refs) so downstream systems retain provenance. Reviewer states and approval requirements are modeled explicitly where available.

Ready to automate your AuditFile workflows?

Supergood can have your AuditFile integration live in days with no ongoing engineering maintenance.

Get Started →

Read more