FREEDOM251

Freedom251 › Audit Management Software

OpenWorkpaper

Free plan Open source APISelf-hostedWeb

Visit OpenWorkpaper Alternatives Pricing

OpenWorkpaper's own site

What OpenWorkpaper is

OpenWorkpaper is a free, open-source web application for documenting audit programs and procedures through planning, fieldwork, and reporting. Its dashboard shows active audits, assigned procedures, and pending reviews, while a central area handles client information requests and master PBC spreadsheet uploads and downloads. Procedures can capture purpose, source, scope, methodology, results, conclusions, and reviewer comments. Teams can assign procedures, manage members, discuss work, and record preparer and reviewer sign-offs. Attachments support PDF, Word, Excel, and PowerPoint, and audit programs can be exported to Word. Automatic numbering organizes groups, procedures, and attachments hierarchically. Access controls combine system roles with audit-specific team assignments, and OpenID Connect support includes Microsoft Entra ID, Okta, and Keycloak. The project documents HTTPS deployment with an Nginx reverse proxy and SSL/TLS certificates and tracks sensitive actions in audit logs. It can be deployed locally, on a private network, or in the cloud, using a portable SQLite database. The project describes itself as built for CPA firms and internal audit departments.

Who it suits

It is aimed at CPA firms and internal audit departments that need to document procedures, collect client information, and coordinate reviewers. Teams can deploy it locally, on a private network, or in the cloud.

What it does well

  • Free and open source.
  • Tracks procedures, assigned work, and pending reviews.
  • Supports common office-document attachments.
  • Includes role-based access and audit logs.
  • Offers local, private-network, and cloud deployment.

What to know first

  • Capacity guidance specifies infrastructure for up to 200 concurrent auditors.
  • Deployment and HTTPS setup are documented as project responsibilities.

Limits

The free open-source plan is for self-hosting on your infrastructure. For up to 200 concurrent auditors, the project recommends 2 to 4 vCPUs, 4GB to 8GB RAM, and 20GB or more of SSD storage.

Plans

PlanBilled and limitsPrice
Free / open sourceself-host on your infrastructureFree

As openworkpaper.com lists them, read 15 Oct 2026. The maker's own page has the final word.

Getting started

  1. Visit the OpenWorkpaper website.
  2. Use the free open-source plan and self-host it on your infrastructure.
  3. Choose local, private-network, or cloud deployment.
  4. For up to 200 concurrent auditors, follow the project's recommendation for 2 to 4 vCPUs, 4GB to 8GB RAM, and 20GB or more of SSD storage.
  5. Configure HTTPS with an Nginx reverse proxy and SSL/TLS certificates.

OpenWorkpaper is open-source audit software for teams coordinating workpapers from planning through reporting. It is best suited to CPA firms and internal audit departments able to run their own deployment. Its zero-cost license and structured procedure workflow are compelling; the infrastructure remains the user’s responsibility.

Overview

OpenWorkpaper brings audit programs, client requests, evidence, and review into a single workflow. Its audit-specific structure makes it a stronger fit for teams managing documented procedures than for organizations seeking a broad, general-purpose work platform. Self-hosting gives firms control over where the application and its portable SQLite database run, but requires them to provide and maintain that environment.

Key features

Audit programs cover planning, fieldwork, and reporting. Teams can use templates and evidence collection, and each procedure can capture its purpose, source, scope, methodology, results, conclusions, and reviewer comments. Hierarchical numbering for groups, procedures, and attachments helps keep growing workpapers organized; exporting programs to Word provides a way to work with the audit program outside the application.

A dashboard surfaces active audits, assigned procedures, and pending reviews. Procedure assignments, team management, discussions, and preparer and reviewer sign-offs support a defined handoff from fieldwork to review. PBC tracking centralizes client information requests and supports uploading and downloading a master spreadsheet. Together, these tools suit teams coordinating both audit work and client submissions.

Procedures accept PDF, Word, Excel, and PowerPoint attachments. Role-based access combines system roles with audit-specific team assignments, while OpenID Connect supports Microsoft Entra ID, Okta, and Keycloak. Audit logs track sensitive actions including logins, deletions, procedure unlocking, and user changes. The project documents HTTPS deployment with an Nginx reverse proxy and SSL/TLS certificates, giving self-hosting teams a documented security setup to follow.

Deployment can be local, on a private network, or in the cloud. For up to 200 concurrent auditors, the project recommends 2 to 4 vCPUs, 4GB to 8GB RAM, and at least 20GB of SSD storage. That guidance helps firms size an installation, but the need to provision and operate it favors organizations with infrastructure capacity.

Pricing

The Free / open source plan costs nothing. It includes free open-source audit software that teams self-host on their own infrastructure. There are no paid tiers or seat quotas in the stated plan, making it a straightforward fit for firms that can absorb deployment and upkeep. Teams seeking a vendor-operated service should consider another product.

Platforms

OpenWorkpaper is available as a web application and API, and can be self-hosted. Its support for local, private-network, and cloud deployment gives organizations flexibility over where it runs, while still leaving operation of the environment to them.

Who it's for

CPA firms and internal audit departments are the intended users. It is especially suitable for teams that need procedure-level documentation, evidence, PBC coordination, and reviewer sign-offs, and that can manage a self-hosted application. Organizations looking for a hosted service or broader platform should compare alternatives against those priorities.

Pros and cons

  • Free and open source: the software has no stated charge, which makes it attractive to teams able to run their own infrastructure.
  • Purpose-built workpapers: procedures capture the core stages of audit work, with hierarchical numbering and Word export helping teams manage and share structured programs.
  • Coordinated review and client requests: assignments, discussions, sign-offs, and PBC spreadsheet handling bring common audit handoffs together.
  • Self-hosting takes operational capacity: teams must provide the deployment environment and maintain it, so the zero software price does not remove infrastructure work.
  • Focused on internal audit: its stated supported audit type is internal audit, which may not suit buyers seeking a broader set of audit types.

Alternatives

Audit Management Software is a useful place to compare more options across the category.

  • FlinkISO may suit organizations looking for a broader quality management system: its free on-premise plan includes all QMS modules and unlimited concurrent users, alongside Linux and Windows support.
  • SafetyCulture (now Mitti) is a better fit for teams centered on inspections and mobile use. Its free plan supports Android and iOS, with up to 10 seats, 5 active inspection templates, and 300 AI credits per seat per month.
  • Diligent Audit is a paid alternative with Android, iOS, web, and API platforms; its pricing is custom.
  • Performance Logic Audit and Corrective Actions is a paid option for buyers considering iOS, web, or Windows platforms.
  • QSC QS1 is a paid alternative available on Android, iOS, and web.
  • Workiva Audit Management may fit organizations seeking customized packaging and unlimited seats or users; it is paid with custom pricing.
  • Audrey is another paid option, available on Android and iOS.
  • Quantivate Internal Audit is a paid alternative available on web and API.

Verdict

Choose OpenWorkpaper if your firm needs structured internal audit workpapers, PBC tracking, and review sign-offs without a software fee, and can host and maintain the application. Its chief advantage is bringing those audit workflows into open-source software; its chief limitation is the operational responsibility that comes with self-hosting.

Verdict

OpenWorkpaper brings audit documentation, PBC requests, collaboration, and review sign-offs into one application. Its free, self-hostable model may suit firms prepared to manage deployment and infrastructure.

Questions

Is OpenWorkpaper free and open source?

Yes. The Free / open source plan costs nothing and is self-hosted on your infrastructure.

What types of audits does it support?

The listed supported audit type is internal audit.

Which platforms are available?

OpenWorkpaper lists API, self-hosted, and web platforms.

Can procedures include documents?

Yes. Procedures support PDF, Word, Excel, and PowerPoint attachments, and audit programs can be exported to Word.

Which identity providers does it support?

It supports OpenID Connect providers including Microsoft Entra ID, Okta, and Keycloak.

What infrastructure is recommended for larger teams?

For up to 200 concurrent auditors, the project recommends 2 to 4 vCPUs, 4GB to 8GB RAM, and 20GB or more of SSD storage.

Facts from OpenWorkpaper's own pages

Access control
Role-based access combines system roles with audit-specific team assignments. · github.com, 15 Oct 2026
Access controls
OpenWorkpaper supports role-based access control, with system roles and audit-specific team assignments. · github.com, 8 Oct 2026
Attachments
Procedures accept PDF, Word, Excel and PowerPoint files. · github.com, 15 Oct 2026
Audit documentation
Each procedure records purpose, source, scope, methodology, results, conclusions and reviewer comments. · github.com, 15 Oct 2026
Audit logging
Logins, deletions, procedure unlocking and user changes are recorded in audit logs. · github.com, 15 Oct 2026
Audit logs
The system tracks sensitive actions such as logins, deletions, procedure unlocking, and user changes in audit logs. · github.com, 8 Oct 2026
Capacity guidance
For up to 200 concurrent auditors, the project recommends 2 to 4 vCPUs, 4GB to 8GB RAM, and 20GB or more of SSD storage. · github.com, 8 Oct 2026
Collaboration
Teams can assign procedures, manage engagement members, discuss work and record preparer and reviewer sign-offs. · github.com, 15 Oct 2026
Database portability
The database is a portable SQLite file and uploaded documents are stored in a separate persistent volume. · github.com, 15 Oct 2026
Deployment
Docker or Podman Compose deployment is recommended, with a manual Node.js installation also documented. · github.com, 15 Oct 2026
Deployment and data
The project supports local, private-network, and cloud deployment, and uses a portable SQLite database. · github.com, 8 Oct 2026
Document support
Procedures support PDF, Word, Excel, and PowerPoint attachments, and audit programs can be exported to Word format. · github.com, 8 Oct 2026
HTTPS deployment
A supplied Nginx configuration can terminate TLS on port 443 using certificates placed in the certs directory. · github.com, 15 Oct 2026
Identity integrations
OpenID Connect support includes Microsoft Entra ID, Okta and Keycloak. · github.com, 15 Oct 2026
Intended users
The project describes itself as built for CPA firms and internal audit departments. · github.com, 8 Oct 2026
Licence
The repository is distributed under the MIT License, with copyright attributed to Robert Sandidge in 2026. · github.com, 15 Oct 2026
Limit: community code
The project does not guarantee the accuracy, safety or effectiveness of community-contributed code. · github.com, 15 Oct 2026
Limit: deployment burden
The project requires users to provide and maintain the hosting environment, certificates, secrets, backups and network security. · github.com, 15 Oct 2026
Limit: maintainer capacity
The disclaimer says the project was developed personally and future issues or pull requests are handled using personal time and resources. · github.com, 15 Oct 2026
Limit: warranty
The disclaimer provides the software as-is and disclaims responsibility for security incidents, data loss, system failures and audit failures. · github.com, 15 Oct 2026
Maker identity
The repository license names Robert Sandidge as copyright holder; no separate corporate legal entity is identified on the official site or repository. · github.com, 15 Oct 2026
Management insights
The management view tracks review lag, procedures older than 30 days and auditor workload. · github.com, 15 Oct 2026
Numbering
Automatic numbering formats groups, procedures, and attachments hierarchically, such as 1.1, 1.1.a, and 1.1.a.1. · github.com, 8 Oct 2026
PBC tracking
The system centralizes client information requests and supports master PBC spreadsheet upload and download. · github.com, 15 Oct 2026

Where OpenWorkpaper stands on Freedom251

Look at these too