Auditing Firm Management System Web App

Most small audit practices do not lose money on the audit. They lose it in the gaps between spreadsheets – the job that quietly went 40 hours over budget, the working paper that sat three weeks waiting on review, the filing nobody owned until it was late, the fee note that went out and was never chased. The Auditing Firm Management System Web App is a Google Apps Script web app built to close those gaps: one shared database, six roles, twenty pages, and an engagement lifecycle the server actually enforces.

It ships seeded with a complete demo practice – 19 sheets and 13,109 rows: 46 clients, 125 engagements across two financial years, 2,180 audit programme steps, 1,497 working papers, 298 findings, 1,129 provided-by-client document requests, 6,176 timesheet lines, 365 independence declarations, 368 statutory filings and 187 fee notes. That matters, because a management system with three demo rows tells you nothing about how it behaves under a real season’s workload.

One thing up front, because the topic invites confusion. This is a practice-management and job-tracking tool. It is not an audit working-paper system, it does not make a firm compliant with ISA, ISQM, ISQC, SQC, PCAOB, GAAS or SOX, and nothing in it has been reviewed or approved by any regulator or professional institute. There is a fuller version of that list further down, and it is worth reading before you decide.

Key Features of the Auditing Firm Management System Web App

The design decision that shapes everything else is that the important rules live in Code.gs, on the server, rather than in the browser. A determined user with the developer console open still cannot get round them.

Five rules the server enforces

1. Fieldwork cannot begin until the signed engagement letter is recorded.
2. Fieldwork cannot begin until the engagement partner and the audit manager both hold a current independence declaration for that client and financial year.
3. An engagement cannot reach Partner Sign-off while any programme step is still open or any working paper is still unreviewed.
4. A report cannot be issued before partner sign-off has been recorded.
5. Actual hours come from the timesheet and invoice balances come from the receipts. Neither is ever typed, so budget-versus-actual and receivables always reconcile.

Two of the five – the engagement-letter rule and the independence rule – can be switched off in Settings if your firm sequences work differently. The other three are structural.

Six roles, each with a real reason to exist

Admin, Engagement Partner, Audit Manager, Senior Associate, Associate and Practice Administrator. The differences are meaningful rather than cosmetic: the manager has the partner’s modules without the right to delete; the associate sees engagements, programme, papers, documents and timesheets and nothing financial at all; the practice administrator runs billing, collections and the compliance calendar but cannot open working papers or findings. The permission matrix is editable, and the Admin role is deliberately locked so a practice cannot accidentally lock itself out.

Everything else

• An eight-stage lifecycle: Planning, Risk Assessment, Fieldwork, Review, Draft Report, Partner Sign-off, Report Issued, Archived – with a board view for the whole season.
• 229 dropdown values across more than twenty lists, all editable and reorderable, including the eight financial-statement assertions used to tag programme steps.
• 57 settings over nine tabs: Business, Finance, Numbering, Operations, Print, Email, Theme, Security and Archive.
• Excel and CSV export on every table, and a print size of 3 inch, 4 inch or A4 that every printed document obeys.
• An optional daily email digest covering the statutory filing position and outstanding client documents.
• Database tools: a backup copy, an integrity check, and a rebuild routine for hours, balances and filing status.

Pages and Modules Explained

Practice Dashboard

Twelve KPI cards behind a month picker – Live Engagements, On Site or In Review, Budget vs Actual, Statutory Filings Late, Open Findings, Client Documents Due, Fees Billed This Year, Receivables, Realisation Rate, Chargeable Utilisation, Unbilled Work in Progress and Reports Issued – over seven panels: Fees billed against cash collected, Engagements by lifecycle stage, Hours booked by month, Open findings by severity, Live work by engagement type, Live work by client risk rating and Where the hours went.

Clients and Engagements

The client register carries entity type, industry, financial year end, risk rating and relationship partner, with fees billed and outstanding alongside and an import route for your own list. Engagements shows every assignment with budget hours against actual, agreed fees against billed, an over-budget count, and the engagement type mix across statutory audit, tax audit, internal audit, limited review and agreed-upon procedures.

The engagement file: Programme, Papers, Findings and Documents

The Audit Programme is the procedure checklist behind each engagement, generated with due dates spread across the planned window and broken down by status, section and risk level. Working Papers is the indexed file, with a review status that moves Awaiting Review to Review Notes Raised to Reviewed to Partner Reviewed – and raising a review note bumps the version, returns the paper to draft and emails the preparer. Findings records each observation with severity, category, management response and whether the action was implemented, and cannot be closed until management has responded. Client Documents is the provided-by-client request list, tracking what was asked for, what arrived, what is late and how many times it has been chased.

Resourcing: Timesheets and Staff

Every hour is priced at the charge-out rate and costed at the internal rate, which yields value at standard rates, cost of delivery and gross margin without anyone maintaining a second spreadsheet. A Budget vs actual board turns those bookings into consumption against budget. Staff holds the roster with grade, rate and chargeable target against what each person actually delivered over twelve months.

Compliance: Independence and the Filing Calendar

Independence and Conflicts is a declaration register plus an exceptions panel that lists live engagements whose named partner, manager or in-charge has no valid declaration on file – the same list the server consults before letting a file enter fieldwork. The Filing Calendar tracks statutory filings by client, type and authority, deriving overdue and due-soon flags from the dates rather than asking anyone to maintain a status column, and carries a penalty-risk field.

Money and Insights

Invoices and Fees covers fee notes with professional fee, expenses and tax, receipts against them, and the receivables ageing profile, split by interim, final, advance and additional-scope billing. An invoice that has been part paid can no longer be edited – you raise a credit instead. Reports offers twelve exportable views grouped as Practice, People, Quality, Compliance and Commercial.

Administration and Support

User Management (accounts and the role matrix), List Management (every dropdown), Settings (nine tabs plus the database tools), Activity Log (the software’s own security trail of who did what), Help (every module documented inside the app) and Get More Templates.

A small but welcome piece of discipline: because the word “audit” is overloaded in this product, the system keeps the three meanings apart. An audit engagement is the assignment, the audit programme is the procedure checklist, and the software’s own security trail is called the Activity Log – never an audit log – with its sheet named to match.

Auditing Firm Management System vs. Spreadsheets vs. Paid Practice-Management SaaS – Feature Comparison

Who Should Use This Template

It suits small and mid-size audit and accountancy practices of roughly 5 to 60 people currently running engagements out of spreadsheets, shared drives and email; practice administrators who need a single answer to “what is late?”; managing partners who want recovery, utilisation and receivables without a month-end scramble; and internal audit teams tracking a programme, findings and follow-up.

It is not for you if you need any of these. This list is deliberately blunt:

• An audit working-paper or documentation system. This records that a paper exists and who reviewed it. It is not audit documentation, does not hold audit evidence, and meets no working-paper or file-assembly standard.
• Compliance with a professional standard. No claim is made of conformity with ISA, ISQM 1 or ISQM 2, ISQC 1 or SQC 1, PCAOB standards, GAAS, SOX, or any national auditing, ethics or quality-management framework. No regulator, oversight body or professional institute has reviewed, accredited or approved it or its records.
• Independence assessment. The module stores declarations your people record and flags engagements with none on file. It does not evaluate independence, identify threats or judge whether a safeguard is adequate.
• Evidence of audit quality. Passing a sign-off gate is not evidence that a procedure was properly performed.
• A statutory record-retention archive. The Archive feature moves rows between sheets for housekeeping; it makes no claim about retention periods or evidential weight.
• Audit, accounting, tax or legal advice. The seeded filing types, authorities and assertion lists are editable sample values, not guidance about what your firm must file or test.

Real-World Use Cases

The practice administrator at an 18-person firm. Monday used to mean opening four spreadsheets to answer one question. Now the Filing Calendar shows overdue and due-soon filings with an owner against each, and one reminder email covers everything still outstanding on an engagement.

An audit manager running eleven concurrent files. She used to discover a job was over budget when the invoice was drafted. The Budget vs actual board now shows consumption as hours are booked, and the Working Papers queue surfaces which papers have waited longest and which have breached the firm’s review turnaround target.

A managing partner assembling the month-end pack. Client Profitability and Fee Billing and Collections export in seconds; realisation and utilisation already sit on the dashboard; and because hours and receipts are derived rather than typed, the tie-out is not a task.

Advantages of the Auditing Firm Management System Web App

• No per-seat pricing. One payment, then as many staff accounts as you like. At five users, a mid-range SaaS alternative costs more in its first quarter.
• Your data stays in your Google Drive. The database spreadsheet is created in your own account on first run. Nothing is sent to us.
• Genuinely editable. Plain, commented JavaScript – one Code.gs and one Index.html, nothing minified or licence-locked. Add a lifecycle stage, extend the standard programme, recolour it from Settings.
• Deterministic seed data. Build the database twice and you get exactly the same practice, so a screenshot, a support answer and the manual always describe the same numbers.
• Idempotent setup. Re-running setup adds missing sheets and columns and re-applies formatting without overwriting entered data – which makes upgrading painless.

Opportunities for Improvement

Three honest notes from working through the build:

• A character-encoding defect in the interface strings. The shipped Index.html contains a handful of double-encoded characters, so a few pieces of UI chrome render as mojibake: search boxes read “Search…” instead of “Search…”, the pagination line reads “Showing 1–6 of 6 records”, and the middle dot separator in list subtitles shows as “·”. It is cosmetic and confined to that one file – about 50 occurrences, none in Code.gs – so a find-and-replace in the HTML fixes it in a minute. We would rather point it out than let you find it after buying.
• The seeded practice is Indian. Amounts appear in rupees and use crore and lakh abbreviations, and the filing types and authorities are Indian ones. All of that is configurable – currency in Settings > Finance, the authority and filing-type lists in List Management – but a firm elsewhere has a little setup to do before the numbers read naturally.
• Reports are exports, not a report builder. The twelve reports are fixed views with date and filter parameters. If you want a report the set does not cover, that means editing the source – very doable, but it is a code change rather than a drag-and-drop.

Best Practices

1. Change all six seeded passwords before anyone else signs in. They are published in the manual and on this page, so treat a fresh deployment as public until you have.
2. Decide the two optional gates deliberately. RequireLetterBeforeField and RequireIndependence are on by default. Turn them off only if you have a considered reason, and record what that reason is.
3. Set the charge-out and internal cost rates properly before booking time. Every margin, recovery and realisation figure derives from them, so wrong rates quietly poison the commercial reports.
4. Use Reseed Practice Data once, early. Clear the demo engagements before your own work starts, so you are never reconciling against invented rows.
5. Deploy a new version after every code change. Apps Script serves only the version you published – saving the editor does not update the live app. See the Google Apps Script web apps documentation for how deployments and versions work.
6. Run the integrity check monthly from Settings > Maintenance, and take a backup copy before any bulk import.

Explore Relevant Templates

• Auditing Firm Management System Web App – the template covered in this article.
• Accounting Firm Client Management System Web App – the closest sibling, aimed at accountancy client work rather than the engagement file.
• Consulting Project and Billing Management System Web App – the same time-to-fee model for consulting work.
• Audit and Internal Controls Dashboard in Google Sheets – reporting rather than an operational system.
• HR Employee Management System Web App and Payroll and Salary Management System Web App – for the people side of the practice.
• Also new in the Web Apps line: Amusement Park Ticketing, Backpacker Hostel and Bakery Production Planning.

Frequently Asked Questions

Does this make my firm compliant, and is it an audit working-paper system?

No – to both. It is a practice-management and job-tracking tool. It does not make your firm compliant with ISA, ISQM, ISQC, SQC, PCAOB, GAAS, SOX or any other auditing, ethics or quality-management standard; it is not an audit working-paper, documentation or file-assembly system; and no regulator, oversight body or professional institute has reviewed, accredited or approved it or the records it keeps. Nothing it stores is evidence that an audit procedure was properly performed. Your methodology, quality-management system and professional judgement remain your own responsibility.

Can I try it before buying?

Yes – the live demo above is fully seeded with all six roles enabled. Sign in as any of them, click through all twenty pages, and try to break the sign-off gates. No signup, no email, no card.

What do the five enforced rules actually enforce?

Your firm’s chosen workflow, and nothing more. They are server-side checks that stop a file skipping a step you said it should not skip. They are not a compliance control and do not represent any external standard, and two of the five can be switched off in Settings > Operations.

Where is the data stored?

In a Google Sheets spreadsheet in your own Google Drive, created on first run. You control who the web app is shared with and who holds an account.

Do I need to know how to code?

No, to deploy it – the manual is a copy-paste sequence. Yes, if you want to add modules or reports beyond what Settings and List Management already expose.

Does it work on phones?

Yes. It is a responsive browser app, so field staff can book time and update programme steps from a phone.

Can I change the currency and the filing types?

Yes. Currency symbol and code live in Settings > Finance; filing types, authorities, entity types, engagement types and every other dropdown live in List Management.

About the Author

Built by PK – Microsoft Certified Professional with 15+ years of Excel, Google Sheets, and Power BI experience. Founder of NextGenTemplates, reaching 300K+ subscribers across YouTube channels. Every template is hand-built and tested before release.

Conclusion

What separates this from a well-organised set of spreadsheets is not the charts. It is that five rules live on the server, that actual hours and receivables are derived rather than typed, and that a junior signing in genuinely cannot see the fee ledger. Those three things are what a spreadsheet stack cannot do at any level of effort – and they are exactly what starts to matter once a practice passes about a dozen concurrent files.

It is not an audit working-paper system and it will not make anyone compliant with anything. Within those limits it is a capable, editable, one-payment alternative to per-seat practice-management software. The fastest way to judge it is to open the demo above, sign in as associate, then as admin, and see how differently the same practice looks. Then take a look at the Auditing Firm Management System Web App on NextGenTemplates.

For more Google Sheets and Apps Script walkthroughs, subscribe at youtube.com/@NeoTechNavigators.