Shard Labs Pty Ltd · Australia

Two products, both built around evidence.

Shard makes software for the parts of compliance and bookkeeping that run all year — not just on the day someone comes to check. Both products are in private beta.

The products

Shard Audit

Private beta

Management-system audits & certification

A platform for planning and running audits against management-system and industry standards, and for holding the evidence in between them: findings, corrective actions, risks and the certificates themselves. Standards install as content packs. A separate module applies the same method to AI systems and language models.

Its AI runs behind a provider interface, and identifying details are stripped from the context before anything is sent.

What Shard Audit does →

Shard Books

Private beta

Small-business books for Australia & NZ

Receipts, invoices, timesheets and bank exports turned into tax-ready books, with separate modes for personal, sole-trader and company use. It self-hosts, and the AI that reads a receipt can run on your own machine rather than someone else’s.

Ships with a local open-weight model by default. A hosted model is a config change, not a rebuild.

What Shard Books does →

Neither product is generally available. We are looking for people to test them.

Shard Audit

Private beta

Management-system audits & certification

Certification to a standard is a promise that has to keep being true after the auditor leaves. Shard Audit is where the evidence for that promise lives.

What we mean by “audit”. Shard Audit is built for audits against management-system and industry standards — ISO standards, industry certification schemes, and an organisation’s own internal compliance, policy and governance programmes. It is not a financial-audit or statutory-accounts product, and it does not do the work of a registered company auditor.

An organisation rarely holds one certificate. It holds several, on different clocks, each with its own surveillance visit, its own recertification date and its own open actions. Keeping that straight in a spreadsheet is where most of the pain starts.

Certification register · illustrative

ISO 9001Quality managementCertified · surveillance 12 Mar 2027

ISO 27001Information security managementCertified · recertification due 4 Jun 2027

ISO 42001AI management systemsImplementing · stage 1 booked

Industry schemeSector certification — e.g. stockfeed manufacturingCertified · 2 corrective actions open

The register every organisation ends up keeping somewhere. Shard Audit keeps it against the audits and findings that produced it, so “why is this one overdue” has an answer attached.

Built in Australia, against Australian and international standards. Both products can run on infrastructure you control, so the evidence does not have to leave the country to be managed.

Shard Audit · the cycle

One audit, end to end

01PlanScope, schedule and checklist, drawn from the pack for the standard you are audited against.
02FieldworkWork the checklist, capture what you saw, attach the evidence as you go.
03FindingsRaise non-conformities against the clause, with an owner and a date.
04Corrective actionTrack each one to closure. Overdue is visible, not buried.
05ReportThe report assembles from the record rather than being written over the top of it.
06Follow‑upSurveillance, management review and the risk register, through to the next cycle.

Shard Audit · who it is for

Four sides of the same record

An audit almost always has more than one party with a stake in it. Shard Audit is built so each of them is working from the same record rather than emailing versions of it.

Holds its own certification

Organisations maintaining a standard

Businesses, schools, universities, councils and not-for-profits running an internal audit programme against the standards they are certified to — plus their own policy, compliance and governance audits.

One place for the internal audit schedule, the findings, the management review and the certificates.

Audits for others

Independent auditors and consultants

Sole traders and contractors carrying an audit method between many clients, often across several schemes, usually on someone else’s system each time.

A workspace per client, kept separate, with a record you can hand over at the end of the engagement.

Audits at scale

Consultancies and audit firms

Small and mid-size firms contracting audits for companies and government departments, with several auditors who need to produce consistent work.

A shared checklist library, so two auditors on two sites produce reports that look like they came from the same firm.

Owns the scheme

Industry bodies and scheme owners

The bodies that define a certification scheme and certify member organisations against it — and who need to see every audit across the membership, not one at a time.

A view across every member, every audit and every open action, and the record a regulator asks for.

What all four want from the software is the same short list: know what is open, know who owns it, know when it is due, and be able to show the working. That is the non-conformities, the corrective actions, and the surveillance and renewal dates — tracked to closure rather than remembered.

Shard Audit · the year in between

The register is the product

Between audits, the thing that matters is whether anyone can still answer a question about an open item. Shard Audit keeps that list, with owners and dates on it, in a state an auditor can read.

Corrective actions · illustrative

NC‑2026‑0114Calibration records incomplete — QC laboratoryOverdue · 11 days

NC‑2026‑0121Supplier approval evidence not retained for two vendorsOpen · due 30 Sep

OFI‑2026‑0032Induction training records held in two placesOpen · due 14 Oct

NC‑2025‑0498Document control — superseded work instruction in circulationClosed · verified

Shard Audit · coverage

One engine. Standards install as packs.

The audit method is the same whatever you are being assessed against, so the standard is content rather than a separate product. These are the packs we are testing first.

ISO 9001Quality management
ISO 27001Information security management
ISO 42001AI management systems
FeedSafeAustralian stockfeed manufacturing
Risk registerRisks, treatments and review, carried across the packs above

Others are in progress. None of the packs has been validated end to end yet — that is part of what we want testers for.

Shard Audit · module

Auditing AI, on the same footing

An optional module extends the audit method to AI systems: frontier models reached over an API, open-weight models you host yourself, and the systems built on top of them. It produces the same artefacts as any other audit — a scope, a record of what was tested, findings against a clause, and evidence attached to each one.

It is a module on Shard Audit, not a separate product, because the obligation it answers to is the same one: show your working.

Shard Books

Private beta

Small-business books for Australia & NZ

Books for a small Australian business or an individual, kept close to home.

Built for startups, sole traders, contractors and small operators — the people who are doing the books at night because there is nobody else to do them. And built to be workable by neurodivergent people, because that is who built it.

Receipts, invoices, timesheets and bank CSV exports become tax‑ready books.
Separate modes for personal, sole‑trader and company use, so the categories match how you actually file.
Self‑hosted. The model that reads a receipt can run on your own machine, so the receipt does not have to leave it.
Invoicing, quotes, projects and time, mileage, and a share‑with‑your‑accountant view.

Shard Books gives general information only. It is not tax advice, and it is not a registered tax agent — every tax-facing screen says so.

Across both products

Choose the engine. Keep the data.

Both products use AI where it earns its place — reading a receipt, drafting a finding, answering a question about your own records. Neither is built to decide for you which model does that work, or to make you send your files somewhere to get the benefit.

Your hardware

Run an open-weight model yourself

Shard Books ships this way. It reads a receipt with an open-weight model running on your own machine or your own server — Llama, Mistral, whatever you prefer — through Ollama. The document is read where it already sits, so nothing has to be trusted to anyone.

In Shard Audit the AI sits behind the same kind of provider interface, so a local model is a configuration rather than a different edition. That provider is not written yet.

Over an API

Or reach a frontier model

When the task wants the strongest reasoning available, the same features call a hosted model over an API instead. Shard Audit runs this way today; in Shard Books it is a setting, not a rebuild.

Shard Audit strips identifying details out of the context before a request leaves the building.

We think that choice ought to be the customer’s, not the vendor’s. Plenty of the organisations we build for cannot send a client file to a third party — and for them, being able to run the model in-house is the difference between using AI on this work and not using it at all.

How we work

Software that has to be able to show its working.

Accessibility is built in, not retrofitted. This site is tested against WCAG 2.2 AA, and ships a reading‑and‑display panel with eleven independent controls.
Where a product uses AI, it cites what it drew on, and it is built to say “not found” rather than produce a plausible number.
Your data stays where you put it. Both products can run on infrastructure you control.
We say what is finished and what is not. Everything here is in private beta.

Built and run in Australia by Shard Labs Pty Ltd.

We are looking for auditors and testers

If you run audits, hold a certification, or keep the books for a small business, we would like you in the beta. Early testers get access free while we build, and a direct line to the person building it.

Tell us which product, and what you would want it to do.