Guide · updated 2026-10-28T00:00:00.000Z
How to Assemble an Audit Evidence Pack
An audit file is a stack of PDFs that a reviewer has to walk through without guessing. Planning memos, sample sheets, confirmations, and findings each live in their own file until someone staples them. InHousePDF does that stapling on the computer that already holds the papers. The built-in audit template sets sections for planning, work performed, evidence, and findings. Change the titles if your methodology uses different names. The template is settings only. It does not contain a client’s file names or any PDF.
What usually goes in
Keep the list short enough that a reviewer can finish it. A practical set is the scoping note, the risk and control matrix, the samples, the third-party confirmations, and the draft findings. Leave out duplicate exports of the same ledger. If a spreadsheet must be included, print or save it to PDF on your device first. InHousePDF adds PDFs. It does not convert a workbook, and it does not read the numbers.
Assign each file to a section with the menu on that file. Divider pages, if you leave them on, appear when the section changes. Bookmarks follow the same structure, so a reviewer can jump to Evidence without scrolling a 200-page file. The contents page lists each document, the section, the start label, and the page count. Those lines are links inside the PDF. The CSV is the same table for a workpaper log.
Numbering that a review can cite
Continuous numbering with a prefix such as AUD- and four digits gives labels like AUD-0001. That is Bates-style prefix numbering: a fixed stem plus a padded counter. Start at 1 unless the file continues an earlier volume. Skip numbering on the cover, contents, and dividers if you want the first evidence page to be AUD-0001. Per-section numbering restarts the counter when the section changes. Use that only if the review plan says so. Otherwise one sequence is easier to say aloud.
Headers can repeat the engagement name. Footers can carry a short confidentiality line. Both are text you type. They are drawn in the margin. Check a landscape page as well as a portrait page, because a wide sheet still receives the stamp in the page’s own coordinate system, then the viewer rotates the page if you turned it.
Privacy for client papers
Working papers often include payroll samples, account numbers, and names. Do not send that folder to a website to merge it. Add the files here, watch the proof panel, and download. Nothing in the assembly step is a form post. The Content Security Policy allows connections only to this site while ads are off, and the tool pages do not load a third-party script. The public site is free for an individual. An IT team that wants the same pages on an internal host can use the self-host package. That licence is not priced yet.
After the download
Store the PDF and the CSV with the engagement, not in a personal chat. If a portal rejects the size, split a section with the split tool and keep the numbering honest: either stamp again after the split, or agree a volume label. Re-scanning photographs of paper at a modest resolution, on your own device, shrinks a file more honestly than a compress website.
This page is a method for assembling PDFs. It is not an audit standard and it does not tell you what evidence is sufficient.
Check the file before you send it
Download the pack and open it on the same device. Read the cover, the contents page, and the first page of each section. Confirm the stamped numbers match the contents. Open the CSV beside it if a colleague needs the index in a spreadsheet. Only then send the pack by the route your process already uses: the company portal, the client’s secure room, or the email address in the instructions. Sending it there is a choice. Assembling it did not require a copy on someone else’s server.
If the proof panel lists a network request while the pack is built, stop and treat that as a fault. The expected count is zero. You can also switch the network off after the page has loaded and run the same steps. The worker does not need a connection to stamp numbers or write bookmarks.
InHousePDF is not a professional adviser and is not affiliated with a regulator or a professional body. The same buttons can prepare documents for a review, an audit, a submission, or a handover. The product does not decide which papers a process requires. You still follow the instructions you were given.