Agent library / Compliance and risk / Exam and audit response package
Exam and audit response package
When an exam or audit request list arrives, PitCrew maps each request to your records and PitCrew run history, assembles the package item by item and flags what needs a person.
When it runsWhen a request list arrives
Who approvesCompliance
Works withDocument storage, run history
How it works
5 steps. A person decides at the end.
- Reads the request listEvery item
- Finds the recordsFor each item
- Assembles the packageItem by item
- Flags gapsItems needing a person
- A person approvesCompliance reviewsBefore it goes out
What it reads and what it produces
Reads
- The request list
- Your records
- PitCrew run history
Produces
- A response package
- Gaps to fill
Rules it follows
- Never sendsCompliance sends.
- Links the sourceFor every document.
Questions firms ask
Last updated: October 2026
How long does it take to set up?
5 working days from data access to the first production run. PitCrew experts connect your systems and enter your firm's rules.
More in Compliance and risk
See all of Compliance and risk →
Document review, ADV consistencyChecks Form ADV Part 1, Part 2 and your actual practice against each other before you file.Communication reviewReviews flagged emails and messages and routes the real issues to compliance.Policy change impact reviewWhen a policy or rule changes, finds the documents and processes that now need updating.Branch auditPrepares and works through branch office inspections and drafts the findings.Policy and regulation Q&AAnswers routine staff questions from your firm's policies, with the section cited.Compliance calendarKeeps every filing and recurring task on the calendar, and reminds owners ahead of each deadline.Supervision and escalationLogs issues that need supervision and routes each one to the right person with a deadline.SEC exam readiness checkChecks your records against what examiners commonly request and lists the gaps.Compliance evidence reportsTurns your agents' run history into reports organized by policy area.Annual compliance reviewAssembles the year's testing and findings into a draft annual review report.Vendor security reviewTracks vendors with client data, reads their security reports and flags exceptions and expiries.Disaster recovery test recordsKeeps the records of your disaster recovery and backup tests, and flags tests that are overdue.Breach notification (Reg S-P)Keeps your incident playbook ready and drafts notices and deadlines if an incident happens.Cybersecurity policy auditChecks your written cybersecurity policies against the rules and your own procedures.
Don't see your work?
Tell us the taskWe build it with you, from data access to the first production run in 5 working days.