The audit pipeline a 10–100 person law office actually needs.

Bar dues, filing fees, expert-witness retainers, client-reimbursable costs — anything that ever debits or credits a client trust account must never co-mingle with an operating disbursement line. PODetect reads the invoice-side marker on every line (trust vs. operating), routes trust-side postings through a separate code-path with its own confidence thresholds, and refuses to post a trust-side line against an operating cost centre or vice-versa. The monthly three-way reconciliation — trust ledger, operating ledger, and the bank statement that backs each — runs clean from the audit by default, without a manual pass across two ledgers.

Every disbursement line — clean or flagged — carries four things into the ledger with it: the vendor record, the matched engagement letter, the matter code, and the rule that fired (DUPLICATE-PAY, VENDOR-DRIFT, TAX-ANOM, SPLIT-ALLOC, or a clean pass). A future reviewer can replay a clean disbursement without dialling a former controller; every flagged disbursement ships as a labelled evidence record with the rule, the canonical baseline, and the suggested next action. There is no separate audit pass to schedule at quarter-end — the trail is what the audit writes by default, on every line, every day.

Per-matter SaaS, an e-discovery platform licensed to one litigation, a court reporter retained across several matters, a doc-review platform that auto-renews against the firm-wide cost centre — each one is a different vendor surface and each one drifts differently. A duplicate matter split, a remit-to address that no longer matches the engagement letter, a near-duplicate vendor record for the same firm: PODetect watches every matter-specific tool against a canonical counterparty dictionary, pauses any new vendor record or banking change that does not match, and surfaces drift on the morning digest the same day — not sixty days later when the audit trail is already cold.

The same five-rule audit — PO / engagement match, vendor drift, duplicate pay, split-allocation, sales-tax anomalies — fires per line at ingest. The morning digest is itself the trust reconciliation: what posted clean, what flagged, and the suggested next action for each flagged line. There is no separate month-end trust rec to schedule and no spreadsheet to hand to a junior at quarter-end — the cadence runs daily, the trail writes itself, and the controller spends three minutes on the digest, not three afternoons on a manual close.