Durava
Durava is AI-supported software for internal control systems, built in Cologne for banks, insurers, listed companies, public bodies and critical infrastructure. It reads policies and process documents, identifies controls, checks them against evidence and keeps a risk control matrix up to date.
Key functions
- Finds controls, owners and frequencies in policies and process descriptions
- Matches controls against existing evidence and assesses their effectiveness
- Detects document changes and updates the affected controls
Compared with FlowAuditor
- Strong in the same markets as FlowAuditor: Germany.
Check before buying: Durava works from your documents, so check that policies and process descriptions are complete and current before a pilot. Decide whether the hosted service in Germany or an installation in your own Azure environment fits your IT rules. Ask which language models are used and request the data processing agreement under Art. 28 GDPR. Agree with your auditor how AI-generated effectiveness assessments will be reviewed and documented.










