{"id":256,"date":"2026-06-30T06:42:37","date_gmt":"2026-06-30T06:42:37","guid":{"rendered":"https:\/\/www.goteams.de\/blog\/?p=256"},"modified":"2026-06-30T06:42:37","modified_gmt":"2026-06-30T06:42:37","slug":"how-trustspace-cut-isms-audit-report-drafting-from-4-hours-to-20-minutes-with-claude","status":"publish","type":"post","link":"https:\/\/www.goteams.de\/blog\/how-trustspace-cut-isms-audit-report-drafting-from-4-hours-to-20-minutes-with-claude\/","title":{"rendered":"How TrustSpace cut ISMS audit report drafting from 4 hours to 20 minutes with Claude"},"content":{"rendered":"\n

At GoTeams<\/strong>, the AI delivery practice of GoGroup GmbH, we build production AI features for our partners. TrustSpace<\/strong><\/a>, which helps companies achieve and manage compliance with ISO 27001, TISAX\u00ae, and NIS-2 by combining an ISMS platform with expert consulting, came to us with a problem that gets worse as you grow: one core part of their work refused to scale. This is how we solved it together using Claude and what it changed for their consultants and customers.<\/p>\n\n\n\n

Why audit reporting doesn\u2019t scale with headcount<\/strong><\/h2>\n\n\n\n

Every TrustSpace customer assessment needs two things: audit questions mapped to the relevant framework requirements, and a structured audit report at the end. Both were manual. A consultant would derive questions from the framework controls, work through the assessment, then spend around four hours<\/strong> drafting the report: formatting findings, referencing controls, writing up gaps and recommendations.<\/p>\n\n\n\n

The work is essential, but most of it is structured transformation of information that already exists<\/em> in the completed assessment. That is exactly the kind of task that ties a firm\u2019s most experienced people to document formatting instead of advising customers. It was the bottleneck between \u201cassessment done\u201d and \u201ccustomer has their report,\u201d and it got worse with every new customer TrustSpace added.<\/p>\n\n\n\n

What we built<\/strong><\/h2>\n\n\n\n

Working alongside the TrustSpace team, we built two new modules into the TrustSpace platform, powered by Claude via the Anthropic API.<\/p>\n\n\n\n

Question Generation<\/strong><\/h2>\n\n\n\n

Claude generates audit questions directly from compliance framework requirements, both predefined question sets and questions tailored to a customer\u2019s specific scope. Consultants review and adjust rather than drafting from scratch. The framework controls are the source of truth; the model does the first-pass structuring.<\/p>\n\n\n\n

Report Generation<\/strong><\/h2>\n\n\n\n

From the completed assessment, Claude produces a structured audit report draft: findings mapped to controls, identified gaps, and recommendations, in our report format, ready for consultant review and finalization.<\/p>\n\n\n\n

The design principle we held throughout: the consultant stays in the loop on every report. What changed is where<\/em> their time goes: review and judgment, not drafting and formatting.<\/p>\n\n\n\n

The impact<\/strong><\/h2>\n\n\n\n

Both modules have been in production since June 2026, serving TrustSpace\u2019s compliance customers. The results that mattered to them:<\/p>\n\n\n\n