AI for Auditors: If It Is Not Documented, It Did Not Happen

Artificial intelligence can transform auditing.

It can analyze complete transaction populations, identify anomalies, compare contracts, review control evidence, recognize patterns across engagements, and reduce time spent on repetitive documentation.

But an AI-generated conclusion is not automatically audit evidence.

Auditors must understand the source data, the procedure performed, the logic or model applied, the exceptions identified, and the human judgment used to reach the final conclusion.

The PCAOB has emphasized that clearer expectations are needed for acceptable AI-based audit procedures, documentation, and the evaluation of AI-generated evidence. It has also described how AI could review workpapers, identify inconsistencies, and support more risk-focused audit work.

The IAASB similarly states that the use of automated tools does not remove audit-documentation obligations under applicable standards.

This creates a practical challenge.

Traditional workpapers document what the auditor selected, examined, and concluded. An AI system may process thousands of records through a complex sequence of classification, extraction, and analysis. The auditor must preserve enough information to make that procedure understandable and reproducible.

That may include the model and version, prompts or configurations, data sources, inclusion criteria, validation procedures, exceptions, changes to the output, and evidence of human review.

Data governance is equally important. If the input data are incomplete, altered, or poorly controlled, the model may produce a precise but unreliable conclusion.

Auditors must also guard against automation bias. A model that appears objective may cause professionals to overlook contradictory evidence or accept an incorrect classification.

AI should increase the depth and coverage of assurance, not reduce professional skepticism.