WHAT WE’RE BUILDING
v1.0
REVIEW THE WORK
One assessment.
One assessment.
One assessment.
Connected from the start.
Connected from the start.
Connected from the start.
Our product direction connects the work from scope and evidence through report writing, review, and delivery. The aim: fewer disconnected files and clearer responsibility at every handoff.
>
SCOPE
SCOPE
→
→
ASSESS
ASSESS
WRITE
WRITE
→
→
DELIVER
DELIVER
<
> THE ASSESSMENT WORK
Keep the source close
to the conclusion.
Keep the source close
to the conclusion.
Keep the source close
to the conclusion.
//
001
Scope with a shared starting point
We’re building a place to define the assessment boundary, organize the client context, and record the QSA’s scope decisions.
01 · SCOPE
//
001
Scope with a shared starting point
We’re building a place to define the assessment boundary, organize the client context, and record the QSA’s scope decisions.
01 · SCOPE
//
001
Scope with a shared starting point
We’re building a place to define the assessment boundary, organize the client context, and record the QSA’s scope decisions.
01 · SCOPE
//
002
Assess with evidence in view
Our aim is to keep sources, testing, findings, and assessor determinations connected, so the team can see the basis for its work.
02 · ASSESS
//
002
Assess with evidence in view
Our aim is to keep sources, testing, findings, and assessor determinations connected, so the team can see the basis for its work.
02 · ASSESS
//
002
Assess with evidence in view
Our aim is to keep sources, testing, findings, and assessor determinations connected, so the team can see the basis for its work.
02 · ASSESS
//
003
Write from the assessment work
We’re designing report preparation around reviewed assessment work and source references, with QSA authorship and review throughout.
03 · WRITE
//
003
Write from the assessment work
We’re designing report preparation around reviewed assessment work and source references, with QSA authorship and review throughout.
03 · WRITE
//
003
Write from the assessment work
We’re designing report preparation around reviewed assessment work and source references, with QSA authorship and review throughout.
03 · WRITE
> REVIEW & DELIVERY
A clear path from draft
to final delivery.
A clear path from draft
to final delivery.
A clear path from draft
to final delivery.
// 001
// 002
// 003
// 004
Review and QA
We’re building separate responsibilities for writing, review, and quality assurance, with decisions attributed to the people who make them.
// 001
We’re building separate responsibilities for writing, review, and quality assurance, with decisions attributed to the people who make them.
Review and QA
// 002
The intended workflow keeps the draft, client feedback, and the firm’s responses together before final approval.
Client review
// 003
Our direction preserves authorized approval and a clear record of what the firm delivered.
Approval and delivery
// 004
We’re designing corrections as a new reviewed version, with the earlier delivered record kept available.
Corrections and history
> THE WORKFLOW WE’RE BUILDING
THE CONNECTED WORKFLOW WE’RE BUILDING 01 KICKOFF Agree the team and the work02 SCOPE Confirm the assessment boundary03 ASSESS Evaluate evidence and record QSA decisions04 WRITE Prepare the report and complete review05 CLIENT REVIEW Keep comments and responses together06 ATTEST Confirm authorized approvals07 DELIVER Finalize and record the handoff08 CORRECTIONS Preserve the prior delivered versionConnect the phases.
Keep each decision clear.
Connect the phases.
Keep each decision clear.
Connect the phases.
Keep each decision clear.
Set up · Scope · Assess
Start with the team and scope. Bring evidence and testing together so the QSA can evaluate the assessment.
Set up · Scope · Assess
Start with the team and scope. Bring evidence and testing together so the QSA can evaluate the assessment.
Write · Client review · Attest
Build the report from completed work, follow the sources, and keep author, review, and QA responsibilities clear.
Write · Client review · Attest
Build the report from completed work, follow the sources, and keep author, review, and QA responsibilities clear.
Deliver · Corrections
Preserve the approved version, record delivery, and treat corrections as a new reviewed version.
Deliver · Corrections
Preserve the approved version, record delivery, and treat corrections as a new reviewed version.
> AI & YOUR TEAM
Assistance for the work.
Authority with your assessors.
Assistance for the work.
Authority with your assessors.
Assistance for the work.
Authority with your assessors.
We’re building AI assistance to help organize sources and prepare drafts for human review. Assessors decide what the evidence supports. A complete manual workflow remains part of the product direction, alongside clear responsibilities for authors, reviewers, and assessment leads.
> AVAILABILITY
The product is in development.
Let’s explore fit with your firm.
The product is in development.
Let’s explore fit with your firm.
The product is in development.
Let’s explore fit with your firm.
We’ll show what we can demonstrate today, explain what remains in development, and discuss the next step for your firm.
Set up
Scope
Scope
Confirmed work
Assess
Assess
Write
Evidence in view
Review · Attest
Deliver
Deliver · Correct
Sealed version
> ASSESSMENT TYPES
Our initial product direction covers four PCI DSS assessment families, with the corresponding Attestation of Compliance. ROC is our first complete workflow target. Ask us which parts you can explore today.
//
001
Report on Compliance
A connected assessment-to-report workflow for QSA-led PCI DSS engagements.
ROC · FIRST WORKFLOW TARGET
//
001
Report on Compliance
A connected assessment-to-report workflow for QSA-led PCI DSS engagements.
ROC · FIRST WORKFLOW TARGET
//
001
Report on Compliance
A connected assessment-to-report workflow for QSA-led PCI DSS engagements.
ROC · FIRST WORKFLOW TARGET
//
002
SAQ A
An intended path for eligible merchants using the SAQ A questionnaire.
SAQ A · PLANNED PATH
//
002
SAQ A
An intended path for eligible merchants using the SAQ A questionnaire.
SAQ A · PLANNED PATH
//
002
SAQ A
An intended path for eligible merchants using the SAQ A questionnaire.
SAQ A · PLANNED PATH
//
003
SAQ D for Merchants
An intended path for merchant assessments using SAQ D.
SAQ D · MERCHANT
//
003
SAQ D for Merchants
An intended path for merchant assessments using SAQ D.
SAQ D · MERCHANT
//
003
SAQ D for Merchants
An intended path for merchant assessments using SAQ D.
SAQ D · MERCHANT
//
004
SAQ D for Service Providers
An intended path for service-provider assessments using SAQ D.
SAQ D · SERVICE PROVIDER
//
004
SAQ D for Service Providers
An intended path for service-provider assessments using SAQ D.
SAQ D · SERVICE PROVIDER
//
004
SAQ D for Service Providers
An intended path for service-provider assessments using SAQ D.
SAQ D · SERVICE PROVIDER
Let’s talk assessment work.
We’re building a connected workspace for QSA firms. Tell us how your team works and explore the product direction.
GET IN TOUCH
© Enpasse 2026
Let’s talk assessment work.
We’re building a connected workspace for QSA firms. Tell us how your team works and explore the product direction.
GET IN TOUCH
© Enpasse 2026
Let’s talk assessment work.
We’re building a connected workspace for QSA firms. Tell us how your team works and explore the product direction.
GET IN TOUCH
© Enpasse 2026