The practice OS for firms running SOC 2.
It runs the engagement: scoping, evidence, workpapers, sampling, review, and issuance. It sits alongside whatever your firm already uses, so there is nothing to migrate and nothing to replace.
Built for both sides of the work: the Certified Public Accountant (CPA) firms that sign the opinion and the readiness firms that prepare the client. Your first engagement is on us. After that it is $600 an engagement, or $750 a month for as many as you run.
Built with the firms that do the work.
Polara Enterprise was designed through discovery calls with long-running SOC 2 audit and readiness practices, and it is shaped every week by practicing auditors running real engagements inside it.
The details
They are here because auditors asked for them. Tick marks, cross reference indexes, evidence dated against the observation period, and the sign and stamp moment.
Who is on it
Auditors from Big Four firms are on the platform, as individual practitioners. That is usage, not an endorsement by any firm.
Your whole practice, one screen.
A live walkthrough of the real workflows. Every engagement shows its stage, its owner, and the last time anything moved.
Every firm, client, and date shown on this page is illustrative. Real engagements are private to the firm that runs them.
Every engagement at a glance. Stage, owner, last activity.
You decide every control. Nothing is decided for you.
Blocked clients surface in days, not the week the report is due.
Everything between scoping and the seal.
The whole engagement lives in one connected system instead of shared folders, email threads, loose Word files, and a status list in someone’s head.
Engagement workpapers
Documents that already know the control and the evidence. Tick marks, cross references, and a legend that travels with the workpaper.
Sampling
Sizes, methods, and frequencies are designed in the tool. Random draws are seeded, and the seed is recorded with the work, so a peer reviewer can re-run the selection and land on the same items.
Sign-off chains
Preparer, reviewer, partner. Each sign-off is recorded against the document version that was signed, so a later edit never inherits an earlier approval.
Issuance gates
No signed management assertion, no issuance. Where an engagement quality review is required, the report does not go out until that review is signed.
Client evidence portal
Numbered requests and a private upload link. Every file carries an in-period or out-of-period flag, and a message thread sits beside each request.
Roll-forward
Next year starts from this year: scoping, the request list, sampling design, and workpaper shells carry over. Every conclusion, sign-off, sample, and piece of evidence is cleared, because prior year judgment is never reused.
One click, and the whole engagement walks out the door.
Lock-in is not a business model. It is a bug.
Any engagement exports as a single file, and it works before and after issuance.
Before issuance every page carries the draft watermark, so a draft binder can never be mistaken for a final one.
A document that does not exist is listed as omitted, with the reason. It is never replaced with a placeholder.
Inside the file
- The report
- Planning memos
- Every workpaper
- Sign-off history
- Sampling records
- Letters
- Activity log
Nothing is held back for a paid tier and nothing needs a support ticket.
It removes the busywork. Never the judgment.
Every surface follows one rule. It surfaces what an experienced reviewer would check and assembles your own words. It never concludes for you.
It warns.
Thin evidence, inquiry-only procedures, out-of-period dates: surfaced as calm prompts. Never an auto-pass, never an auto-fail.
It assembles.
Workpapers, sampling methodology, and the Section 4 matrix are composed from your own inputs. Assembly is not generation.
You decide.
Every control, every sample size, every opinion. The instrument records your judgment. It never makes it.
The guarantees
No write path.
AI output cannot touch controls, documents, samples, or conclusions. It lands in a suggestions table and nowhere else.
A conclusion can never reach you.
The server cuts the draft stream the moment a model tries to write one, whatever the model does.
Everything is logged.
Every suggestion and your decision on it lands in the same activity record as every human action.
Partners hold the switch.
AI assist is a firm-level setting only a partner can change.
Silent after seal.
The moment a report seals, AI is disabled on the engagement. The sealed record is the record.
One model everywhere: Amazon Nova Pro, running on Amazon Web Services Bedrock inside our own account. The guarantees above are enforced in our code, so they hold whichever model runs.
Your opinion is yours alone.
Independence here is not a policy page. It is how the system is built.
Your engagements are yours.
Polara Labs never sees client names, evidence, or conclusions as anything but your firm’s private data.
No stake in the outcome.
You pay $600 an engagement, or $750 a month for as many as you run. Neither number moves with your findings, your conclusions, or whether the report is qualified. We are paid the same either way.
The judgment is never touched.
No surface in the product decides a control, accepts evidence, or writes an opinion. That is enforced in code, not policy.
The record is honest.
Every action, human or AI-suggested, is logged in one spine. Peer review reads the same record you do.
Pay per engagement, or stop counting.
Two prices, published in full. Start per engagement, and move to the flat rate when your volume makes the flat rate cheaper.
Unlimited users on both. Add every auditor in your firm and every person at your client, and the price does not move.
Pay as you go
$600per engagement
Billed once, when you create the engagement.
- Nothing recurring. You pay when you open an engagement and not before.
- The whole lifecycle: scoping, request list, workpapers, sampling, review, issuance, export.
- No expiry. An engagement you have not opened is money you have not spent.
Unlimited
$750per month
One rate for the firm, however many engagements you open.
- Unlimited engagements. Open as many as the firm can staff.
- Month to month. No annual contract and no minimum term.
- The same product. The plan changes the invoice and nothing else.
Your first engagement is on us. Every new firm gets one engagement credit at signup, on either plan. Run a real client through it, keep the binder, and decide after.
When to switch
The line is 15 engagements a year. Below it, paying per engagement costs less. Above it, the flat rate does, and a year of it is $9,000 whether you run twenty or eighty.
You are never asked to guess a volume and buy it up front. Start per engagement, and move to the flat rate in the month it becomes the cheaper one.
Create your firm’s workspace in about a minute, on either plan. The fee is identical on both and it never moves with your findings, and a working session with the founder is there if you want a guided start.
Three questions, answered here.
No demo required to get the answer.
Do I have to move my whole book?
No. Run one engagement and judge the deliverable. The first one is on us, so the only thing it costs you is the time to run a real client through it.
Do I have to leave my current tools?
No. It runs alongside whatever your firm already uses. Nothing to migrate, nothing to switch off. Start with a single engagement while everything else stays where it is.
Which plan should I be on?
Under 15 engagements a year, pay as you go. Over it, $750 a month costs less. Both plans carry every user in your firm, every user at your client, and every feature, because there is no higher plan holding one back.
Bring one engagement.
Not your book. One engagement, start to seal, and judge the binder that comes out.
Already on Polara Enterprise? Sign in