OpenWorkpaper

Overview

OpenWorkpaper is open-source software for organizing audit procedures and workpapers from planning through reporting. It is best for CPA firms and internal audit departments able to run their own deployment. Its strongest appeal is a structured audit workflow at no software cost.

Key features

Audit programs bring purpose, source, scope, methodology, results, conclusions, and reviewer comments together within each procedure. Automatic hierarchical numbering links groups, procedures, and attachments, helping teams keep larger programs in order. Templates and evidence collection are supported, and programs can be exported to Word.

A dashboard surfaces active audits, assigned procedures, and pending reviews. Teams can assign procedures, discuss work, and record preparer and reviewer sign-offs. PBC tracking centralizes client requests and supports uploading and downloading a master spreadsheet, a practical way to coordinate client submissions alongside fieldwork. Procedures accept PDF, Word, Excel, and PowerPoint attachments.

Role-based access control combines system roles with audit-specific team assignments. OpenID Connect works with Microsoft Entra ID, Okta, and Keycloak. Audit logs track sensitive actions including logins, deletions, procedure unlocking, and user changes. The project documents HTTPS deployment behind an Nginx reverse proxy with SSL/TLS certificates.

OpenWorkpaper can run locally, on a private network, or in the cloud, and stores data in a portable SQLite database. For up to 200 concurrent auditors, its capacity guidance recommends 2 to 4 vCPUs, 4GB to 8GB RAM, and at least 20GB of SSD storage. That makes self-hosting flexible, but the team must provide and manage the infrastructure; the guidance is also an important planning constraint for larger deployments.

Pricing

The Free / open source plan costs nothing and includes self-hosted audit software. It suits teams willing to operate the application on their own infrastructure and avoids a software charge. The trade-off is that hosting and maintenance sit with the user rather than a vendor-run service. No paid tier is part of the offering described here.

Platforms

OpenWorkpaper is available as a web application, through an API, and as self-hosted software. Local, private-network, and cloud deployments are supported. The SQLite database is portable, but teams should weigh that data architecture and their operating capacity before choosing a deployment.

Who it's for

CPA firms and internal audit departments that need documented procedures, evidence, review records, and client request tracking are the clearest fit. It is particularly relevant to teams comfortable managing their own software and infrastructure. Organizations seeking a hosted service without deployment responsibilities should consider another option.

Pros and cons

• Pros: The free, open-source plan removes software fees, while procedure-level documentation, attachments, numbering, and sign-offs support a coherent audit trail.
• Pros: PBC tracking, assignments, discussions, and pending-review visibility help coordinate auditors and client requests in one workflow.
• Pros: Role-based access, identity-provider integration, and audit logs address access management and sensitive actions.
• Cons: Self-hosting means the organization is responsible for deployment and ongoing infrastructure.
• Cons: The documented database is SQLite, and the capacity guidance specifies resources for up to 200 concurrent auditors; teams with different scale or data needs should assess fit carefully.

Alternatives

For more options, browse Audit Management Software. FlinkISO is worth considering when a free on-premise QMS with unlimited concurrent users is a better match than audit-specific workpaper software. SafetyCulture (now Mitti) may suit teams looking for mobile inspection and task tools, with a free plan capped at 10 seats and five active inspection templates. Netwrix Password Secure is a paid alternative for readers seeking password-management software. QSC QS1 is another paid option. Audrey is another paid option. Diligent Audit is a paid audit alternative with custom pricing. Performance Logic Audit and Corrective Actions is another paid option. SupplyOn may be a better fit for teams seeking supplier solutions, with some solutions free and a fee-based plan priced at $45 a month.

Verdict

Choose OpenWorkpaper if your audit team wants structured procedures, client-request tracking, and review records without a software fee—and can host and maintain the application itself. Its focused audit workflow is the main reason to choose it; the self-managed deployment and SQLite-based data setup are the main reasons to look elsewhere.