Hand the auditor a read-only desk for two weeks

A small company's annual audit begins. The checklist: the general ledger, twelve months of invoices, bank reconciliations, the contracts folder. The usual method is a data-room subscription and a week of uploading.

Instead, the finance lead builds a workspace. A display panel with the ledger open in LibreOffice Calc, ?readonly=true. A files panel on the invoices and contracts. A SQLite panel where the reconciliation tables are queryable. One proxy permission group named auditor-2026 with a password, allowing exactly those three programs and nothing else.

The auditor works from their own office for two weeks. They query, read, take notes. They can't modify the ledger and they can't reach a terminal.

On the last day, the finance lead deletes the auditor-2026 group. The audit happens in your environment, on your terms, and ends when you delete a group.

The audit happens in your environment, on your terms, and ends when you delete a group.