What is Brevio?
Brevio is a web solution that helps audit companies streamline the ordering and receipt of external confirmations, including the ordering of audit letters from banks.
How does it work?
The process of obtaining external confirmations must comply with regulatory requirements, given by, among other things, auditing standards (eg ISA 505).
Put simply, the standard means that an auditor must always initiate an audit request process. In Brevio, the auditor creates an request and sends it to the bank customer via e-mail. Via a secure link in the email, the customer is asked to sign a power of attorney (with e.g. BankID, MitID or FTN). This gives the auditor the right to obtain the required information from the bank. Once this is signed, the request goes directly to the bank via e-mail.
Via a corresponding secure link in the email, the bank can retrieve a digitally signed power of attorney (where the customer also gives permission to use Brevio) and upload and send their response back to the auditor. Here, in other words, you can be sure that the request has come from the stated auditor (validated with BankID on the sender's side), and that the authorization has been digitally signed by the stated contact person at the customer.
How is the sending secured?
A service like Brevio sets strict requirements for technical and organizational security. Brevio only uses accredited suppliers, carries out regular security testing (performed by external parties) and has employees with extensive experience in operational and technical security work. Read more about our security work here.
What does the bank require to use Brevio?
No registration is required from the bank, either at company or user level, to get started with Brevio. Secure links provide access to both audit requests and My Page, securely and easily.
Do we need a data processing agreement with Brevio to be able to use the solution?
No, you don't. The processing responsibility between the auditor and the banks is mandated by law, so that the solution can be used by banks without entering into a data processing agreement with Brevio. In this way, Brevio is the auditing companies' supplier, and enters into usage and data processing agreements with them.
Read more: