Encrypted end to end
Every edit, picture, comment and engagement name is encrypted with the notebook's own key. When someone leaves, the notebook moves to a new key they never get.
Audit work, from the first meeting to the final report.
Fieldwork is the workspace for GRC consultants and audit teams. Take notes that know your frameworks, collect evidence straight from your client's systems, and turn findings and risks into a report in your own brand.
Frameworks built in
- SOC 2
- ISO/IEC 27001:2022
- NIST CSF 2.0
- NIST SP 800-53 Rev. 5
- PCI DSS 4.0.1
- + your own, from its document
One engagement, start to finish
Every step feeds the next, so nothing is typed twice.
An engagement in Fieldwork is a notebook that knows what it's for: the client, the frameworks in scope, the plan. What you scope becomes the plan; what you hear becomes evidence; what fails a test becomes a finding; and the findings become the report.
Field Guide
It sits in on the call, so you can lead it.
What to ask next and the gaps as you hear them. When the client shares a system you've never used, it shows you where to click, so you lead the walkthrough like you run it every day.
An illustration of a call about access, with sound you can turn on. As the client talks, Field Guide suggests what to ask and notes the gaps; when she shares her admin console, it outlines where to click on your screen, then saves what's shown into your notes.
See it end to end
One engagement, in a minute.
Fieldwork for teams
Built for firms, not just people.
Make your firm a team. Admins decide who works on which engagement, project managers staff their own, and everyone works in the same notebook, live.
- Work together, live. See who's on which page and their cursor as they type. Comment on any paragraph, finding or request, and @mention a colleague.
- Know who changed what. Initials beside each paragraph, what's new since you last looked, and recent edits by day or by person.
- Offboard in one step. Take someone out of every engagement at once. Their copy becomes a read-only archive, or is removed from their computer: your choice.
- The firm keeps its work. Admins hold every engagement's key, so nothing leaves with the person who does.
Acme AdvisoryTeam · you're an admin
People
- ARAda Reyes (you)Admin
- PKPat KimProject manager
- MSMo SatoMember
- LCLee ChenMember
Engagements
- Northwind Health · SOC 2
- Globex · ISO 27001
Take Pat Kim out of Acme Advisory?
They leave every engagement at once, and what they own passes to you.
CancelTake them out
Security
Your clients' data, treated like it.
Fieldwork is a desktop app first. What you share is encrypted on your computer before it leaves, so our server stores and passes on data it can't read.
Keys that stay yours
Your key lives on your devices, backed up by a recovery key only you hold. Safety codes let you check a colleague's key on a call.
Local first
Notebooks you don't share never leave your computer. Password-protected sections stay on it, even in shared engagements. It all works offline.
Your server, if you'd rather
Run the sync server in your own cloud, and set a firm policy every copy of Fieldwork follows: which server, and whether AI and sharing are allowed.
Pricing
Two plans. Free during early access.
Start on your own and bring your firm when you're ready. Your engagements come with you.
Individuals
For consultants working on their own.
Freeduring early access
Download for Mac- Unlimited engagements, on your computer
- Five frameworks built in, and your own from their documents
- Field Guide, the meeting copilot
- Connected checks and a portal for your client
- Reports and decks in your brand
- Share an engagement with anyone, encrypted end to end
- AI with your own Anthropic key
Teams
For firms and audit teams that share the work.
Freeduring early access, then per person
Bring your firm- Everything in Individuals, plus:
- A team for your firm: admins, project managers and members
- See and staff every engagement in one place
- Live editing, comments, @mentions and author marks
- Offboarding in one step: archive or remove
- The firm keeps every engagement when people leave
- Your own sync server and a firm-wide policy
Questions
Good to know.
Do I need OneNote?
No. Fieldwork is a notebook in its own right: sections, pages, tables, ink and tags. If your notes are in OneNote today, Fieldwork opens your .one files and notebooks, page history included.
Does it work offline?
Yes. Everything is on your computer. In a shared engagement, what you change offline is sent when you're back online and merges with everyone else's changes.
Where is my data kept?
On your computer, in a folder you can see. Engagements you share sync through Fieldwork's server in the United States, encrypted end to end, or through your firm's own server if it runs one.
Which AI does it use, and what does it see?
Claude, with your own Anthropic key. It reads only what you ask it to work on, and everything it writes is marked as a draft until you review it. You can turn AI off entirely, or your firm can for everyone.
Do my clients need to install anything?
No. They get a link to their evidence portal, sign in with a code sent to their email, and upload what you asked for. Connected checks run from the same page.
What happens when someone leaves the firm?
An admin takes them out of the team: they leave every engagement at once, what they owned passes to the admin, and each engagement moves to a new key. Their copy stays as a read-only archive, unless the admin chooses to have it removed from their computer.
Bring your next engagement to Fieldwork.
Free during early access, for you and for your firm.