What is auditpilot?

AuditPilot is an open-source tool that helps organizations prepare for security audits under the ISO/IEC 27001 standard. It validates risk registers, analyzes supporting documentation, identifies compliance gaps, and suggests remediation actions. The goal is to turn audit preparation from a stressful annual event into a continuous process driven by evidence. The project is currently at version 0.3.0-alpha. Four of seven planned development phases are complete: backend foundation, validation engine, evidence intelligence pipeline, and compliance framework engine. Three phases remain in progress: CAPA and ticket generation, an AI compliance copilot, and dashboard reporting. The README is detailed about what is built versus what is planned, which gives a clear picture of the project's maturity. The backend, built with Python and FastAPI, accepts uploads of risk registers and supporting evidence in formats including CSV, XLSX, PDF, DOCX, and TXT. For risk registers, it checks for problems like duplicate IDs, missing owners, missing descriptions, invalid likelihood or impact values, and past-due review dates. Uploaded documents are automatically classified as policies, procedures, risk registers, asset registers, incident registers, audit reports, or training records. The system also extracts metadata such as page count, word count, author, creation date, and a checksum for file integrity. An evidence status engine evaluates whether each document is a draft, lacks approval or version information, is invalid, needs human review, or qualifies as sufficient evidence. A summary endpoint provides counts and distributions so teams can see common issues at a glance. The compliance framework engine is designed to map evidence to controls across several standards including ISO 27001, ISO 27002, NIST CSF, CIS Controls, SOC 2, and others. The project includes 49 automated tests and follows standard quality practices with type checking and linting. Getting started involves cloning the repository and running the API locally, which exposes a Swagger interface for exploring endpoints. The full README is longer than what was shown.