Why was I asked to sign in again in September 2026?
Release 22 changed how sign-in sessions are stored (only a fingerprint of each session is kept). Every session was cleared when it was installed, so everyone signed in once more. Nothing else changed: your password and your authenticator app are the same.
Can I sign in with my Microsoft 365 or Google account?
Yes, if your firm has switched the provider on for your email domain in Settings → Sign-in providers. You still need an AuditTrove login with the same email address; signing in with Microsoft or Google does not create one.
I lost my phone with the authenticator app. What now?
Sign in with one of your recovery codes, then move two-factor to your new phone on your Two-factor page (step 1.13). If you have lost the recovery codes as well, ask the firm administrator to reset your two-factor.
A confirmation email to a bank bounced or was never answered. What do I do?
Check the address and its source on the confirmation. AuditTrove sends one second request after 10 days and then prompts for alternative procedures (ISA 505.12). Record what you did in the alternative procedures box before you close the request.
The client gave me a customer's Gmail address for a confirmation. Can I use it?
AuditTrove flags free-mail addresses and addresses on the client's own domain because the reply could come from the client (ISA 505.A7). Verify the address independently where you can; if you still use it, acknowledge the flag and note why, and consider other evidence.
Why is an uploaded file in quarantine?
It contains macros, embedded objects, encrypted content or PDF actions. It cannot be downloaded until the firm administrator checks it and releases it in Settings → File scanning. Programs and scripts are refused outright.
Our trial balance is in an old .xls file. Can I import it?
Save it as .xlsx (Excel Workbook) or CSV and upload that. AuditTrove reads .xlsx files in your browser and lets you choose the sheet and the header row.
The general ledger has 1.2 million lines. Can AuditTrove test it?
Yes. Populations above 250,000 rows (up to 5 million) are stored in segments and tested in the background; the results are the same as for smaller populations. Select items for testing from the Data analytics tab.
Our client uses Xero. How do we pull the trial balance?
The firm registers its own Xero app once in Settings → Accounting systems. The client then connects its Xero company from the portal (Connections), or the engagement partner connects it with the client's recorded consent. Then choose Trial balance → Accounting system.
When can we use the ISA for LCE?
For audits of less complex entities that are not listed or otherwise public interest entities, for periods beginning on or after 15 December 2025, where the ISA for LCE is adopted locally. AuditTrove refuses it for public interest entities and asks the other questions in AC-4L. Confirm the FRC's conditions before relying on it.
The client became more complex during the audit. Can we move to the ISAs?
Yes. The engagement partner switches the audit to the ISAs at any time before the report, with a reason. Every working paper stays; the programme and the report follow the ISAs from then on, and the terms of engagement should be amended.
Why can the partner not sign the report?
A completion gate is still open. Open Readiness on the engagement: it lists each gate with the reason. With the SQMTrove link on, the engagement quality review must be completed in SQMTrove before the report can be dated or signed.
What does partner review monitoring record?
When the engagement partner opens and reviews each working paper, from the time the page is visible, together with sign-offs and review notes. It shows whether the partner reviewed the significant risks, the significant judgements and the key stages before the report was dated (ISA 220.30–.34).
Can a client see our working papers?
No. A client user sees only the client portal: the requests addressed to them, comments, uploads, signatures and the accounting-system connection. Nothing else in the file is visible to them.
How does the component auditor in another country get access?
The group engagement team invites them from the component's page. They get guest access to that component only: the instructions, deliverables, reporting form and clearance, with their own two-factor sign-in.
We deleted an engagement by mistake. Can we get it back?
Yes, from the recycle bin (step 14.13). Archived files, and clients that still have engagements, cannot be deleted at all.
How do we prove the audit trail has not been changed?
Audit trail → Verify checks the seal chain of every entry. The export in Settings → Security & compliance checks the chain first and stores the file's fingerprint with the export.
Who should record the quarterly access review?
The firm administrator (or the owner). Settings → Security & compliance lists every login with role, privileges, two-factor and last sign-in, with flags; record the review and any actions every 90 days.
Why could we not add another person?
The firm has used all the seats in its subscription. The owner can buy more seats on troveuniverse.com, or remove a person who has left (step 2.16). Client users and component auditors do not use seats.
Does AuditTrove need the internet?
Yes for most work. An engagement can be made available offline on a laptop before a site visit; changes made offline wait on the device and synchronise when the connection returns, and any conflicts are shown for you to resolve (chapter 21).
Can the AI assistant sign off or change figures?
No. It suggests and drafts; a person must review what it produces and sign off. Its use is logged in AI usage, and the firm chooses which providers and data it may use.
Not answered here? Contact us or chat with us on WhatsApp.