The record yoursupervisor asks to see.
Certificates, an audit trail of every action, client documents and an inspection bundle. For accountancy firms, the firm-wide risk assessment and policies too.
Larkspur Trading Ltd
- Number
- ST-2026-10-23-0141
- Checks
- 6, all complete
- Signed
- 23 Oct 2026, 06:30
- Fingerprint
- 3f9a 81c0 … 0c21e
Records, in six parts.
In every plan.
Certificates
Every run signed and listed in one place, each with a public page that shows it is genuine without your client’s details.
Audit trail
Every check, decision, risk change, alert and note, with who and when. Download it as a spreadsheet, firm-wide or per client.
Inspection bundle
One printable page for an inspection, with what is missing listed first.
Client documents
Engagement letters, ID copies and evidence kept on each client: private, encrypted, and with no delete button.
Firm-wide risk assessmentSoon
A short questionnaire becomes a written assessment from the CCAB guidance and the 2025 National Risk Assessment, approved by a named senior manager. Policies are written from it; every version is kept.
Not running yet: for industries other than accountancy.
Training log
Who was trained, on what, when and with what result, and who is due.
Three steps.
- 1
Work as normal
Every check, decision and change is recorded as you go.
- 2
Write the assessment once
About five minutes; review it each year.
- 3
Print the bundle
When your supervisor asks.
Asked about records.
How long are records kept?
Due diligence records must be kept for five years after a client relationship ends (regulation 40). Archived clients stay in your register with their checks, documents and history.
Can someone check a certificate is genuine?
Yes. Each has a reference and a link to stratumapis.com/verify, which shows it is genuine and what was checked, without your client’s details.
Can a document be deleted?
Not from the app. Records you rely on for an inspection stay put.