The audit application of the GVB


Expertise
Tech Stack
Duration
Challenge
The legal audit of small cooperatives takes place at least every second financial year. This is usually carried out in person on site. The digitalisation of the audit process, which is complex in terms of both content and technology, is intended to save time and costs for various user groups and make the digital transformation a positive experience.
Solution
The audit application enables the smooth step-by-step execution of audits of small cooperatives. It ensures secure data exchange and increases efficiency in audit planning, document submission and audit execution. Contact options via comment and message functions ensure that the audit remains close and accessible for cooperatives.
Strategic approach
How can an application simplify the audit process, support GVB auditors in their daily work and make the audit more time and cost-effective for their members?
The main challenge was to standardise the audit process as far as possible while at the same time ensuring good member support. In joint workshops with our client, we divided the process into three phases and analysed the requirements of the users in the respective process steps: submission of the documents to be audited, audit and preparation of the audit report. The subdivision helps us to guide the users of the audit application through the process in such a way that it is clear at all times what action is required, what input is needed and what the current status of the audit is. Step-by-step instructions and the option to contact the auditor make the new audit application the digital face of the GVB - modern and approachable.

First drafts from the key sprint

FigJam as the tool of choice for our workshops & key sprint
UX concept & design
The design of the application takes into account the requirements of the two main user groups: Cooperatives and auditors.
Cooperatives are guided step-by-step through the document submission process with a guided query. Information, comment and message functions help with orientation and facilitate communication with the respective auditor.
The examiners can plan their examinations, which sustainably optimizes their work processes and creates transparency. The submitted documents are checked in a structured manner using a questionnaire. Finally, the audit report is created using standardized modules from the questionnaire.
The user interface is consistently based on the GVB design system, which ensures a consistent appearance.

UI elements from the design system

Wireframes for initial user testing

Content analysis of the audit report
High performance, scalability and user-friendliness with the help of GraphQL and Nuxt.js (Vue.js)
The development of modern web applications requires flexible, performant and maintainable technologies that meet the requirements for user-friendliness and speed. The combination of GraphQL and Nuxt (Vue) has proven to be a powerful solution for developing complex applications efficiently. The combination of GraphQL, Nuxt and Vue provides developers with an extremely flexible and powerful environment for creating modern web applications. Vue provides the foundation for a modular and reactive user interface, Nuxt optimizes application structure and routing, and GraphQL ensures efficient and flexible data queries. Together they form a symbiosis that guarantees high performance, scalability and ease of use, while simplifying development and facilitating maintenance.
Vue is a progressive JavaScript framework that is ideal for the development of user interfaces. It offers a simple yet powerful structure that is suitable for both small projects and complex, scalable applications.
Nuxt is based on Vue and extends it into a powerful full-stack framework.
It comes with important features that enable the rapid development of server-side rendered or static applications.
GraphQL is an API query language that provides a more flexible and efficient way to exchange data between client and server. Unlike REST, where the client requests fixed endpoints with fixed structures, GraphQL allows the client to request exactly the data that is needed.
Protection and security of all sensitive data
In the checking application, all files undergo a security check before they are uploaded. They are then stored securely in external storage, where they are encrypted and protected by role-based access authorizations.

Enriching the internal GVB interface with data from the audit application
In order to record the audit-relevant data in the audit application, the GVB's existing internal interface was used and integrated into the system. To optimize the GVB's audit planning, this interface is expanded with additional data and enriched by the application. This new data is used for internal processing and supports more efficient planning and execution of audits.

Legally compliant digital signature
An external service was integrated into the system to implement digital signatures in the audit application. This integration enables auditors to electronically sign reports directly within the audit application in a legally valid and audit-proof manner without having to leave the application or print documents in paper form. Seamless embedding makes the signature process efficient and user-friendly.