01
Your data stays private
Firm and client data stays private. It is never used to train models or shared for model learning across firms.
Trust at Clark
Built for work that has to hold up
Security, AI governance, and compliance for audit and accounting firms that cannot compromise on evidence, control, or trust.
How trust works
What your team can rely on
Privacy, evidence traceability, and human review stay visible throughout audit and accounting engagements.
02
The evidence stays attached
AI-drafted work stays linked to source documents, so reviewers can trace figures and conclusions back to the evidence.
03
Your team stays in control
Your team sets Ava’s scope and boundaries. Exceptions and completed work follow your firm’s review and sign-off process.
Trust controls
Review the controls behind every engagement
Security and AI governance stay visible from deployment through final review. Explore the operating areas firms evaluate before rollout.
01 · Trust controls
Security
Review access controls, data handling, retention, deletion, and exit.
Explore security01
SSO
Authentication requirements, identity-provider support, account lifecycle, and deployment-specific configuration are confirmed before rollout.
02
Permissions
The review covers firm-user roles, approval authority, access boundaries, personnel access, and how access is removed.
03
Data handling
Hosting, encryption, data residency, subprocessors, and support access are documented for the proposed deployment.
02 · Trust controls
AI governance
See how Ava explains its work, cites evidence, and records human review.
Explore AI governance01
Explainability
Before work begins, Ava shows the task, planned actions, systems involved, and operating boundaries. Completed work remains connected to supporting evidence.
02
Human review
The engagement team can approve, adjust, or cancel the task and its boundaries. Ava can execute within that scope, while exceptions and finished work follow the firm's preparer-to-partner sign-off process.
03
Audit trail
Approvals and sign-off are recorded in the engagement workflow. Current event, retention, and export details are supplied during review.
04
Model data use
Firm and client data is not used to train models or shared for model learning across firms.
Trust and compliance
Security that holds up under audit
You hold your clients to a standard. We hold ourselves to the same one. Clark has completed SOC 1® Type 2 and SOC 2® Type 2 examinations, is certified to ISO/IEC 27001, and supports HIPAA and GDPR requirements. Your data never trains a model.
Explore complianceSOC 1 Type 2
Controls relevant to customers’ internal control over financial reporting, covered by an independent SOC 1® examination.
SOC 2 Type 2
Security, availability, processing integrity, and confidentiality controls independently examined against the AICPA Trust Services Criteria.
ISO 27001
Certified to ISO/IEC 27001 for information security management.
HIPAA
Security and data-handling controls that support firms working with protected health information.
GDPR
Privacy, access, and data-handling controls that support GDPR-aligned processing.
See Clark in action
The peer review guarantee, in practice
Watch Ava prepare a workpaper, then trace every figure back to the source document, the change, and the approval.