Prep scattered documents for a compliance audit
Turn a folder of scattered policy documents, contracts, and records into an organized, clearly named collection ready for regulatory review.
- AuthorAnthropic
- CategoryLegal
- ModelSonnet 4.5
- Features
- ShareCopy link
1
Describe the task
Cowork can process an entire folder of audit documents at once — hundreds of files across policies, procedures, contracts, and evidence. Because it handles larger batches than a single conversation allows, you can point it at your whole folder rather than working through files in groups. It reads each document, categorizes by control area, suggests descriptive names, and flags where coverage looks thin.
I have 100+ documents for our upcoming SOC 2 audit in this folder. Right now they're scattered with names like "policy_v2_final.docx" and "scan0042.pdf". I need to organize them before the auditors arrive:
- Rename files with clear titles showing document type, effective date, and which control area they cover
- Group by control category (Access Control, Change Management, Incident Response, etc.)
- Flag any control areas where we seem to have gaps in documentation
Our audit scope covers security, availability, and confidentiality. The audit period is January through December 2024.
2
Give Claude context
Cowork is a workspace in Claude for desktop that can access your local files. Grant it access to the folder containing your audit documents, and it reads everything in that folder — PDFs, Word docs, spreadsheets, scans.
Required context
To get started:
- Download Claude for desktop and start a Cowork session
- Grant folder access to your audit documents
- Have your audit scope or control framework ready to reference
No items found.
Optional context
- Control matrix or checklist
- Naming convention preference
- Claude in Chrome — for pulling evidence from web-based tools
No items found.
3
What Claude creates
Cowork reviews the entire document folder, produces a rename mapping organized by control area, identifies coverage, and flags potential gaps.
From Claude
I've reviewed all 156 documents in your audit folder. Here's what I found:
Document Inventory
- Policies: 24 documents
- Procedures: 31 documents
- Contracts and agreements: 18 documents
- Evidence and logs: 67 documents
- Training records: 16 documents
Coverage by Control Area
Well covered: Access Control (28), Change Management (22), Vendor Management (18)
May need attention: Incident Response (8), Data Backup & Recovery (6)
Gaps Identified
- Incident Response: No evidence of testing or tabletop exercises
- Backup & Recovery: No restoration test evidence
- Business Continuity: Not in inventory
Want me to proceed with the reorganization?
4
Follow up prompts
Continue the conversation with Claude to refine, expand, or explore further.
Create the control matrix as a spreadsheet
Cowork writes files directly to your folder. Instead of copying output from chat, have it create the matrix as an Excel file you can share with auditors.
"Create a spreadsheet in this folder mapping each SOC 2 control to the documents that support it. Include columns for control ID, description, evidence documents, and coverage status."
Pull evidence from your ticketing system
Use Claude in Chrome for web-based tools. If your change management or incident response evidence lives in Jira, ServiceNow, or another web tool, Cowork can read it directly from the browser.
"I have Jira open with our change management tickets. Pull the last 6 months of change requests and create a summary document showing we follow our change management procedure."
Generate policy summaries for the walkthrough
Create a reference doc for your audit conversations. Cowork reads each policy and writes a cheat sheet you can use when auditors ask questions.
"Read our policies folder and create a one-page reference doc. For each policy: what it covers, last updated date, and the 2-3 key requirements I should be able to explain."
5
Tricks, tips, and troubleshooting
Your documents stay on your machine
Cowork runs locally. Sensitive policies, contracts, and evidence files never leave your computer.
Point Cowork at the mess, not just the polished files
If you have a "to be organized" folder with random scans and downloads, that's exactly where to start. Cowork can make sense of poorly named files from their content.
Use your existing framework as a guide
If you have a control matrix, audit checklist, or framework mapping, include it in the folder. Cowork uses it to categorize documents more accurately.
Ready to try for yourself?
Give Cowork folder access and get organized documentation, identified gaps, and a clear picture of your audit readiness.