BranchCheck runs your controls, audits, quality plans and network campaigns on one engine, from offline fieldwork to the file your regulator asks for. Every finding becomes an action tracked to closure.
The control plan lives in a spreadsheet, findings in emails, evidence on phones. When audit or the regulator asks what was checked, by whom, and what was fixed, everything has to be rebuilt by hand — and what cannot be rebuilt, as far as they are concerned, never happened.
Five domains ship end to end; two are partly covered. Each page says, requirement by requirement, what is covered.
Versioned requirements, score and cartography by scope, findings and remediation.
Versioned control plan, L1 and L2 controls, reproducible sampling, three-tier escalation.
Register of non-conformities and complaints, root causes, before/after effectiveness.
Risk-based plan, missions, five kinds of findings, sealed report.
Campaigns with scope and objective, instructions with read receipts, challenges, four impact measures.
Objectives cascaded down to the individual, results imported by CSV, coaching on gaps.
Microlearning assigned after repeated failures or a new procedure, acknowledged offline.
What your teams do with BranchCheck, from the field record to verified closure.
Inspectors work offline; sync resumes on its own. Geotagged, timestamped photos, signatures, branch check-in by signed QR code: being on site is no longer self-declared.
Form builder and template library; settings versioned with an effective date and approved by a second person before they apply.
Dashboards that drill down to the source data, period comparison and branch ranking; each branch is placed by percentile against the rest of the network.
Every AI suggestion carries a human-validation state. Bring your own key (BYOK), an offline evaluation bench measures its quality, and a kill-switch turns it off at any time.
A non-compliant item becomes an action: owner, due date, proof of resolution, validation separate from completion. Late or critical controls escalate in three tiers; alerts fall back to email when push does not arrive.
What your CISO will ask for, shipped in the product.
Sign in through your identity provider, with domain verification.
OpenAPI specification, scoped API keys, HMAC-signed webhooks (Standard Webhooks).
Every action recorded in a tamper-proof log, exportable with a signature.
A ZIP archive sealed with a SHA-256 fingerprint, verifiable by whoever receives it.
Two-factor authentication is not optional.
Encrypted backups, with restores tested automatically.
Hosted in the EU, dedicated hosting in Morocco (Enterprise plan), or self-hosted on your infrastructure.
A perpetual internal-use licence: you hold the source code, with no resale rights.
A multidomain engine, sealed evidence, offline work and three languages including Arabic: that is what your team would have to build first. With the source-code licence, your IT starts from what already runs and keeps control of the code.
From €29/month per network — not per user.See pricing
A trial with no credit card on a Moroccan demo whose inspections are already recorded — or a demo with our team.
