The Baseline
A business process audit documents how your company actually works: volumes, time, systems touched, friction, regulatory constraints. The deliverable is yours — usable without Prox-IA.
We observe processes as they actually run, not the ones in the quality manual. Four angles, systematically.
Invoicing, orders, contracts, HR: the paper-email-spreadsheet circuits where time gets lost and errors creep in.
Production, logistics, customer service: volumes handled, cycle time, friction points, dependencies between teams and systems.
Where your data is born, where it sits idle, who uses it. It’s the raw material for any future automation or forecast.
GDPR and AI Act for everyone, NIS2 and DORA for regulated entities — applied process by process, not as a generic annex.
No throwaway slideware: process documentation you can use without us — and it is verifiable by contract.
A typical process sheet: volumes handled, time spent, systems touched, friction points, data produced and consumed, applicable regulatory constraints. A notation a human can read, not consulting-firm formalism.
Illustrative excerpt — not a client document
Interviews and observation on the ground. We look at what your teams actually do, not what the procedure says they do.
Priority processes, notated legibly, linked to the systems and data they touch. We prioritise with you, not for you.
A sheet per process: volumes, time, friction, data, regulatory constraints. This is the foundation for any later build.
The opportunity register, with an honest effort/gain order of magnitude. "Do nothing here" is a conclusion we deliver regularly.
Since 2 February 2025, Article 4 of the AI Act requires AI literacy for any organisation using AI systems. The Baseline identifies who uses what — the first piece of your file.
Every identified opportunity is classified under the AI Act from the outset. High-risk system obligations apply from 2 August 2026: better to classify before you build.
The data processing activities identified process by process feed directly into your record of processing activities (Article 30). Nothing is lost between the audit and compliance.
For finance, insurance and essential entities: a compliance workstream by default, the ICT subcontracting angle addressed, documentation your auditor can hold you to.
90 minutes with a co-founder engineer, a one-pager summary. You’ll know whether a full business process audit is worth it for your company.