The platform is built. The question is how far to take it together.
muratov.io is a working ITGC audit-automation platform in production — not a prototype. We are open to three kinds of conversation: audit firms that want to run it themselves under subscription, firms and corporates that want to co-develop it into adjacent audit streams, and parties interested in an equity stake in the platform's operator. Every conversation starts with a technical walkthrough on your own scope.
- 37
- ITGC control templates code-bound
- 8·9
- enforced workflow steps by category
- 13
- workpaper sections per export
- 22
- tenant tables under FORCE row-level security
Subscription, co-development, or a stake
Platform subscription
Your auditors run the platform themselves — the full control library, sampling engine, AI testing under your review, and the workpaper export, inside your own isolated tenant. Sales-led: terms are set per firm, in writing, after a walkthrough on your engagement shape.
Co-development
The architecture — reproducible sampling, evidence-first AI, enforced gates, append-only audit trail — generalizes beyond ITGC. A co-development partner brings the methodology for an adjacent stream (SOC examinations, internal audit, sector compliance); we build it together on the proven chassis, with terms and IP defined by written agreement.
Equity conversation
For an audit firm or corporate that wants more than a license — a stake in the platform's operator and a seat in its roadmap. We'll open the codebase, the architecture decisions, and the operating model to serious counterparties under NDA.
Diligence-friendly by design: the same properties that make the workpaper defensible make the platform inspectable.
A shipped system with verifiable properties
Working product, not a deck
A shipped multi-tenant platform: 37 ITGC control templates across four categories, 8- and 9-step enforced workflows, AICPA AU-C 530 sampling with deterministic seeds, evidence-first AI testing under mandatory auditor review, and a 13-section workpaper export.
Auditable by construction
PostgreSQL Row-Level Security in FORCE mode across all 22 tenant tables, an append-only audit log the database itself refuses to mutate, SHA-256-hashed evidence, and sign-off gates that cannot be skipped — the same properties an acquiring firm's own risk function will test for.
A regression-tested codebase
Thousands of automated unit and integration tests run on every change, with source-locked regression guards on the load-bearing marketing and security surfaces. The platform is built to be handed over, extended, and audited.
A clear operator
muratov.io is operated end-to-end by Bonfleur s.r.o. (Czech Republic, IČO 28169166). One entity to diligence, one counterparty to contract with.
We make no revenue, compliance, or certification claims on this page. The platform carries no SOX 404 or SOC 2 certification; muratov.io is not a CPA, audit, or law firm and issues no opinion, assurance, or attestation. What we will show you is the running system, its tests, and its exhibits — and let those speak.
Start the conversation
Tell us which of the three doors you're knocking on — subscription, co-development, or equity — and what you'd want to see first. We answer with a technical walkthrough, not a pitch deck.