Protecht
by Protecht · Audit Management
Australian GRC platform with an ISO 19011-aligned internal audit management module.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
- Deployment
- Cloud
- Company size
- SMB, Mid-market, Enterprise
- Pricing
- Quote-based
- Founded
- 1999
- Headquarters
- Sydney, Australia
Overview
Protecht (Protecht.ERM / Protecht ERM) is a governance, risk and compliance (GRC) software company founded in 1999 and headquartered in Sydney, Australia, that has offered its flagship platform in a SaaS model since 2002. The single platform covers enterprise risk management, vendor/third-party risk, operational resilience and business continuity, compliance management, cyber and IT risk, internal audit management, workplace health and safety, controls management, ESG management, and asset and liability management, serving industries including banking and credit unions, insurance, fintech, asset management, superannuation, aged care, education, government and healthcare.
The audit management module takes a risk-based approach to the audit universe using real-time analytic insights: targeted audit plans driven by analytics and historical data, audit profiling for comparison across audits, and scope linkage to organizational objectives and risks. Execution is supported through dynamic audit lifecycle workflows and alerts, workpaper and report generation, documented observation tracking via action management, and permission frameworks for audit security. Findings connect to dashboards showing the broader risk and control environment, with automated remedial-action assignment, workflow alerts and governance of action closure. Protecht states the module supports all stages of the internal audit function and aligns with ISO 19011, including annual audit program management, audit plan creation, and findings management.
The platform is configurable without code, offering a dynamic form builder, customizable risk assessment scales and workflow automation, plus a Cognita AI assistant described as purpose-built risk AI for identifying gaps and automating administrative tasks. A marketplace provides pre-configured templates and registers, including for audit management, findings/issues, actions and controls libraries. It is delivered as cloud-based SaaS from ISO 27001-certified, PCI/DSS-compliant data centers with regional hosting options, and Protecht states it scales from 2 to 20,000+ users, with web-services APIs and bulk CSV import/export for integration.
Screenshots & demo
Demo video from the vendor's YouTube channel.
Features & capabilities
Audit Universe & Planning
Building a risk-based audit universe and plan.
- Risk-based audit universe built from real-time analytic insights
- Targeted audit plans driven by analytics and historical data
- Audit profiling for comparison across audits
- Scope linkage of audits to organizational objectives and risks
- Annual audit program management aligned with ISO 19011
Execution & Workpapers
Running fieldwork and documenting audit evidence.
- Dynamic audit lifecycle management with multifunctional workflows and alerts
- Workpaper and report generation with completion tracking
- Documented observation tracking through action management
- Permission frameworks for audit security
- Real-time audit progress visibility
Findings, Actions & Reporting
Connecting findings to risk and tracking remediation.
- Dashboards connecting findings to the risk and control environment
- Automated remedial-action assignment and workflow alerts
- Governance of action closure through to completion
- Preconfigured reports including Gantt charts, estimated-vs-actual audit dates and findings-severity trending
- Push-button risk and audit committee reporting
Platform & Configuration
The no-code platform layer under the audit module.
- Cognita AI assistant for identifying gaps and automating administrative tasks
- No-code dynamic form builder and configurable workflow automation
- Marketplace of pre-configured templates and registers (audit management, findings/issues, actions, risk events, controls libraries)
- Bulk CSV import/export and web-services APIs for integration
- ISO 27001-certified, PCI/DSS-compliant cloud hosting with regional options
Common use cases
- Running an ISO 19011-aligned internal audit function from annual program planning through to findings closure
- Building a risk-based audit universe informed by real-time analytics
- Tracking audit findings and remedial actions on dashboards connected to the enterprise risk and control environment
- Consolidating internal audit alongside enterprise risk, compliance, vendor risk and operational resilience on one GRC platform
- Using Cognita AI to identify gaps and automate administrative audit tasks
- Deploying preconfigured audit, findings and controls registers from the Protecht Marketplace for faster rollout
- Scaling a GRC/audit program from small teams to large enterprises on a no-code configurable platform
Strengths & considerations
Strengths
- Single platform spanning enterprise risk, audit, compliance, vendor risk, resilience, cyber/IT risk and ESG rather than a standalone audit point-solution
- Audit management module explicitly aligned with ISO 19011
- Cognita AI purpose-built risk assistant embedded in the platform
- No-code configuration (dynamic form builder, workflow automation) without requiring IT involvement
- Over two decades of enterprise risk management heritage, with the platform delivered as SaaS since 2002
Pricing
Protecht does not publish list pricing; quotes are provided on request based on organization size and modules deployed. Get an independent shortlist with pricing guidance below.
Technical & security
- Hosting
- SaaS, ISO 27001-certified data centers with regional hosting options
- Compliance
- ISO 27001, PCI DSS
- Mobile app
- Yes
About the vendor
- Founded
- 1999
- Headquarters
- Sydney, Australia
- Ownership
- Private (backed by Arrowroot Capital)
- Notable customers
- Afterpay, Cigna Insurance, nib Health Funds, Transurban
Alternatives to Protecht in Audit Management
Protecht — frequently asked questions
Does Protecht audit management align with a recognized standard?
Yes. Protecht states its internal audit management module supports all stages of the internal audit function and aligns with ISO 19011, including annual audit program management, audit plan creation and findings management.
What else does the Protecht platform cover besides audit management?
It is a broader GRC platform covering enterprise risk management, vendor/third-party risk, operational resilience and business continuity, compliance management, cyber and IT risk, workplace health and safety, controls management, ESG management, and asset and liability management.
Does Protecht use AI?
Protecht includes Cognita AI, described as a purpose-built risk AI assistant for identifying gaps and automating administrative tasks within the platform.
How is Protecht priced?
Protecht does not publish list pricing. Quotes are provided on request based on organization size and the modules deployed.
Where is Protecht headquartered?
Protecht is headquartered in Sydney, Australia. It was founded in 1999 and has delivered its ERM platform as SaaS since 2002, with additional offices including Los Angeles and London.
Evaluating Audit Management?
Tell us your ERP and requirements and we'll send an independent shortlist — including Protecht and the best-fit alternatives — with honest pros and cons.