%20(11).png)
Do your customers use your software for accounting, point-of-sale, archiving, or consolidation and expect proof that it meets regulatory requirements?
With a software audit according to IDW PS 880, you can independently document that your software product fulfills the relevant requirements, such as those from the GoB, GoBD, and IDW RS FAIT.
Certinova guides you efficiently through the entire process: from the initial readiness assessment and the definition of the audit object and requirements catalog to the final audit report and the IDW PS 880 software certificate.
Get the certification that convinces your customers and their auditors now.
Digital workflows and reusable evidence reduce manual effort – especially during re-certification.
Numerous completed audit and assessment projects form the basis of our methodology.
SaaS providers, cloud platforms, IT service providers, and regulated companies rely on Certinova
Regardless of where you are starting from, we provide the right service for your current level of maturity—without detours and without overhead.
We evaluate your software product against the requirements of IDW PS 880, identify gaps in functionality, documentation, and development processes, and prioritize necessary actions. You start with a realistic overview and an actionable roadmap.
.svg)
The initial audit assesses whether your software, in its audited version, meets the established requirements for regulatory compliance and security. The result is an audit report and a software certificate that you can provide to your customers and their auditors.
Software continues to evolve. For follow-up audits, we focus on releases, changes, and new legal requirements, leveraging existing audit results. This keeps your certification up to date with minimal effort.
IDW PS 880 can be effectively combined with supplementary certifications, such as IDW PS 951 for service provider operations, SOC 2, C5, and ISO 27001 for information security, as well as requirements from NIS2 and DORA. A unified control mapping helps avoid duplication of effort.
We combine professional assessment by experienced auditors with technology-driven processes.
The result: shorter audit cycles, less internal effort for you, and reports that meet your customers' requirements.
Evidence is collected in a structured manner and automatically validated – the professional assessment remains with our auditors.
Submit documents, answer questionnaires, track status—transparent instead of endless email chains.
A clear audit pattern from scope to report—fewer follow-up questions, predictable effort.
An experienced team supports you beyond the individual report—including follow-up audits and related frameworks.
From questions about which software can be audited and your customers' requirements to the final certificate: here you will find the most important answers regarding software audits.
Can't find your question? Please contact us directly.
IDW PS 880 audits the software product itself, assessing whether its functions, controls, and development processes meet the requirements for regulatory compliance. In contrast, IDW PS 951 and SOC 1 evaluate the control system of a service provider that performs processes for its customers. SOC 2 and C5 focus on information security, availability, and data protection. For SaaS offerings, a combination is often advisable. During the scoping phase, we clarify which type of assurance best fits your business model.
We audit software products relevant to financial accounting, such as ERP and financial accounting systems, POS systems, archiving and DMS solutions, consolidation software, e-commerce and inventory management systems, as well as payroll software. The audit object, version, and the agreed-upon catalog of requirements are the deciding factors.
The certificate applies to a specific software version. In the event of significant changes, new releases, or updated legal requirements, a follow-up audit is recommended. This focuses on the changes and is generally much more streamlined than the initial audit.
The key is to establish an appropriate audit scope, a clear catalog of requirements, and a well-defined software version. We coordinate these points with you at an early stage and, wherever possible, with your key customers and their auditors. This results in documentation that can be used effectively in your customers' audit files.
Let's get in touch to discuss your requirements.
