Overview
Atmata is an electronic platform for organising and managing internal audit work in public- and private-sector organisations in Saudi Arabia. It turns paper-based audit procedures into digital processes and helps audit departments prepare and run their annual audit plans.
3techy designed and built the platform end to end: the web application, the API and database behind it, field-work tools with GPS, reporting, and complete Arabic and English interfaces.
The challenge
An audit methodology still run on paper.
The client came to us with a detailed audit methodology written in Arabic and a clear goal: move every step of it from paper, spreadsheets and email into one secure system.
Domain-heavy requirements
Evaluation criteria, approval levels and escalation rules were described in audit language and had to be translated precisely into software rules.
Many roles, one process
Thirteen different roles, from team members to the general manager, each needed their own screens, permissions and actions.
Proof from the field
Field work had to be recorded with evidence of where and when it happened, not just a filled-in form.
Nothing slips through
Observations needed tracking until they were resolved, with overdue items escalated automatically.
Our approach
How we turned the methodology into a product.
Before writing code, we made sure we understood the audit process as well as the auditors did.
- 01
Requirements mapping
We broke the requirements into numbered items and mapped each one to a screen, component or rule, so every stakeholder could trace where it lives in the product.
- 02
Workflow modelling
We modelled plans, tasks and observations as clear status flows with multi-level approvals, so the software enforces the methodology.
- 03
Bilingual design system
We built mirrored layouts and shared components so every interface works in Arabic, right to left, and in English from the first release.
- 04
Module-by-module delivery
We shipped the platform in modules (planning, field work, review, reports, follow-up) and reviewed each against the original requirements with the client.
The solution
A complete digital audit journey.
Atmata covers the full workflow, from strategic planning to follow-up on observations.
Strategic plan
Audited entities are evaluated on six weighted criteria (size, risk, importance, complexity, complaints and duration) to calculate audit priorities automatically.
Annual plan
Annual audit tasks are scheduled with team distribution, resource allocation and timelines.
Field implementation
Digital tools for the risk matrix, worksheets and observations, with GPS location and timestamps recorded for field work.
Review and approval
A multi-level approval chain from team leader to audit manager to general manager.
Reports
Standardised audit reports that can be exported to PDF and Excel.
Follow-up and smart escalation
Observations are tracked with a colour-coded system that escalates overdue items at 0–7, 8–21, 21–30 and 30+ days.
Regulatory indicators
Interactive dashboards for monitoring and analysing regulatory performance indicators in real time.
Special and consulting audits
Dedicated tools for managing special audit and consulting engagements alongside the annual plan.
Outcomes
What the platform delivers.
- Audit work that used to live on paper now runs end to end in one secure, bilingual platform.
- Priorities, approvals and escalations follow the methodology automatically instead of being checked by hand.
- Field work is backed by GPS and timestamp evidence, and every decision leaves an audit trail.
- Decision-makers get a central database and statistics to plan with.
- Atmata is live and, according to the platform, used by more than 500 users across over 1,200 review processes.
Tech stack
- Next.js
- React
- TypeScript
- Tailwind CSS
- NestJS
- PostgreSQL
- TypeORM
- Redux Toolkit
- next-intl
