Secure PBC platform — built for South African audit firms
The secure bridge between your firm and every client file.
Bifröst replaces email-chain PBC chaos with one encrypted, POPIA-compliant workspace — so your team spends audit season auditing, not chasing attachments.
POPIA · AES-256 · TLS 1.3
01/The problem
Audit season shouldn’t run on inbox archaeology.
Requests buried in reply-alls. Evidence in seventeen versions of the same spreadsheet. Deadlines tracked in someone’s head. The PBC process hasn’t changed in twenty years — the risk has.
↓ BECOMES
- lost to follow-ups per engagement
- 11hrs
- lost to follow-ups per engagement
- email threads per PBC list
- 63
- email threads per PBC list
- place it should all live
- 1
- place it should all live
02/The platform
One platform for the entire engagement.
01CLIENT SETUP
Every client. One structured workspace.
Start by creating an entity for each client and attaching the right contacts. Every engagement you run for that client lives against it — codes, contacts, and history included.
- Entities and groups that mirror how your firm organises clients.
- Contacts attached once, reused on every engagement.
- Bulk import of existing client lists — no retyping to get started.
02ENGAGEMENT BUILD
Sections with strictly scoped access.
Structure the engagement into sections and items, then assign each contact to the sections they own. A contact never sees a section that isn't theirs.
- Templates roll your standard PBC structure onto any new engagement.
- Per-section contact assignment — visibility is scoped, never shared.
- Rollover recurring engagements year after year.
03PUBLISH & NOTIFY
One click. Every contact notified.
Publish the engagement and Bifröst takes over the chasing — request emails go out, reminders follow automatically, and your team hears the moment files arrive.
- Request and reminder emails sent automatically on publish.
- Overdue-item reminders without a single manual follow-up.
- A per-engagement email history of exactly what was sent, and when.
04COLLECT & REVIEW
Pending → In Review → accepted.
Files land against the right item and statuses update in real time. Your team reviews each submission and accepts or declines it — no inbox forwarding, no version guessing.
- Clients upload straight to the item; statuses move from Pending to In Review automatically.
- Accept or decline per item, with discussion threads where questions come up.
- Download evidence by item, by section, or as one engagement zip.
05AUDIT TRAIL
Proof you can hand over.
Every upload, status change, and comment is logged per engagement, per client. Export the Audit Summary PDF whenever review or IRBA readiness demands it.
- A timestamped history of every action and actor on the engagement.
- Audit Summary PDF and Excel export, one click from the engagement.
- POPIA-aligned handling with AES-256 encryption at rest.
03/Security
Watch what happens to a file the moment it leaves your client.
Bank-grade security protocols — built for South African compliance.
The Secure Tunnel
TLS 1.3 — ENCRYPTED IN TRANSIT
Your data travels through an encrypted tunnel (TLS 1.3), protecting it from public Wi-Fi snoopers and internet providers the moment it leaves your device.
The Safety Scan
SCANNED · CLEAN
Our automated security system inspects every file. If a virus is found, the file is immediately rejected and destroyed — it never reaches our storage.
The Vault
AES-256 — ENCRYPTED AT REST
Once cleared, your file is compressed, encrypted with AES-256, and stored in a data centre compliant with strict international privacy regulations.
The Four Pillars of Trust
Bank-Grade Encryption
Every file you upload is encrypted with its own unique digital key (AES-256). It's like having a separate safe deposit box for every single document.
Active Malware Protection
We don't just store files — we clean them. Every upload is scanned for viruses and malware in a secure isolation chamber before it's accepted.
Strictly Confidential Access
Uploading a file places it directly into the hands of your assigned auditor. Strict isolation ensures files are never visible to unauthorised teams.
Complete Accountability
Our system maintains a permanent, unchangeable audit trail. We verify exactly who accessed a document and when, ensuring total transparency.
04/Get started
Give your team back audit season.
Book a 20-minute demo and see your own PBC list running on Bifröst — secure, tracked, and chased automatically.
Or reach out directly:
info@thebifrost.co.za