Deloitte announced the launch of ControlCatalyst.AI, a broad suite of AI-powered solutions that transform delivery and drive value for internal audit, Sarbanes-Oxley (SOX), risk and controls, and compliance functions. Deloitte delivers human-led, AI-powered solutions that combine deep domain knowledge with flexible engagement models to meet organizations wherever they are on their AI journey.

By unifying Generative AI and agentic AI throughout the end-to-end risk and controls lifecycle, ControlCatalyst.AI enables smarter risk identification, deeper insights and enhanced quality, resulting in greater value and strategic resource allocation for clients and their stakeholders. It has been developed leveraging Deloitte's Trustworthy AI™ framework and is a cornerstone of Deloitte's AI-powered enablement and transformation capabilities. ControlCatalyst.AI will also soon be available as a solution through Deloitte's Zora AI suite of products.

"In today's rapidly evolving risk landscape, AI has enhanced the need for sophisticated risk solutions," said Frank Milano, U.S. Assurance leader, Deloitte. "With the introduction of these new AI-enabled solutions and our broader risk management domain acumen, Deloitte is combining human judgement with AI-powered capabilities to bring greater trust and resilience to organizations."

"Deloitte's ControlCatalyst.AI represents a significant step in risk management technology, shaped by the hands-on experience of our controls specialists," said Geoffrey Kovesdy, Digital Controls, AI, and Automation leader, U.S. Audit & Assurance, Deloitte. "By harnessing the power of AI, we are enabling our clients to achieve smarter, faster and more scalable solutions."

Transforming the risk and controls landscape
ControlCatalyst.AI reimagines the risk and controls processes for organizations of all sizes and across industries, shifting from manual processes to AI-enabled actions that can improve the effectiveness of risk management, controls and assurance. Led by human intelligence and enhanced through AI, key capabilities include:

• Dynamic Internal Audit & SOX Risk Assessment – Identifies the most critical risks faster, enabling smarter resource allocation and alignment, greater efficiency, and improved enterprise-wide risk coverage.
• Control Inventory Uplift/Rationalization/Modernization – Accelerates the identification of opportunities to enhance controls verbiage and descriptions as well as control rationalization, modernization and automation opportunities. Streamlined risk and controls frameworks drive better risk management, both in the execution and evaluation of controls.
• Regulatory Researcher – Delivers a single, citation-backed experience that accelerates onboarding, preparation and insights for new and emerging regulations.
• Automated Audit Documentation and Artifacts – Leverages walkthrough notes and other artifacts, generate process flows, risk and control matrices, and test steps, resulting in efficiencies and enhanced quality.
• Automated Operating Effectiveness Testing – Automates significant portions of the operating effectiveness testing of a control, including attribute identification, evaluation of supporting documentation, evaluation of information produced by the entity (IPE), and initial identification of potential exceptions. This capability results in enhanced efficiency and quality allowing the control tester to focus on potential exceptions and conclusions.
• Internal Audit Quality Assurance – Automates components of the quality assurance requirements aligned with internal audit standards, as well as additional quality assurance procedures across the risk and controls lifecycle.

Deloitte's Audit & Assurance AI leadership
Deloitte delivers responsible, tested, human-led, AI-powered innovations, addressing complex challenges with practical, trusted solutions. Deloitte's AI-enabled offerings, combined with extensive industry, domain and regulatory experience, can transform financial complexity into strategic clarity. Deloitte's approach is grounded in quality, integrity and transparency.