--- title: IT audit for EU-funded projects — DESI | GRIDSEARCH description: Independent IT audit reports for EU-funded projects — DESI criteria, initial and final. The report is our only deliverable, and that is the point. --- [![](https://gridsearch.ai/hs-fs/hubfs/Blue_Abstract_Circle_Global_Tech_Logo-removebg-preview-3.png?width=28&height=28&name=Blue_Abstract_Circle_Global_Tech_Logo-removebg-preview-3.png) GRIDSEARCH](https://gridsearch.ai/?hsLang=en) Services [**IT consulting**What to build, buy, or leave alone](https://gridsearch.ai/it-consulting?hsLang=en) [**Integrations and automation**Data entered once, moving between systems](https://gridsearch.ai/integrations-and-automation?hsLang=en) [**AI and process automation**Work that stops arriving on a desk](https://gridsearch.ai/ai?hsLang=en) [**Cloud and infrastructure**Migration, and what should stay put](https://gridsearch.ai/cloud?hsLang=en) [**CRM**The system your sales actually runs on](https://gridsearch.ai/crm?hsLang=en) [**Websites and online stores**Connected to what runs behind them](https://gridsearch.ai/web-development?hsLang=en) [**ERP**Choosing it, and getting it delivered](https://gridsearch.ai/erp?hsLang=en) [**IT audits for funded projects**The independent report your funder requires](https://gridsearch.ai/audit-it?hsLang=en) [Contact](https://gridsearch.ai/contact?hsLang=en) Menu [**IT consulting**What to build, buy, or leave alone](https://gridsearch.ai/it-consulting?hsLang=en) [**AI and process automation**Work that stops arriving on a desk](https://gridsearch.ai/ai?hsLang=en) [**CRM**The system your sales actually runs on](https://gridsearch.ai/crm?hsLang=en) [**ERP**Choosing it, and getting it delivered](https://gridsearch.ai/erp?hsLang=en) [**Integrations and automation**Data entered once, moving between systems](https://gridsearch.ai/integrations-and-automation?hsLang=en) [**Cloud and infrastructure**Migration, and what should stay put](https://gridsearch.ai/cloud?hsLang=en) [**Websites and online stores**Connected to what runs behind them](https://gridsearch.ai/web-development?hsLang=en) [**IT audits for funded projects**The independent report your funder requires](https://gridsearch.ai/audit-it?hsLang=en) [**Contact**We reply within one business day](https://gridsearch.ai/contact?hsLang=en) [HUB](https://gridsearch.ai/gridhub?hsLang=en) [Home](https://gridsearch.ai/?hsLang=en)/IT audit for funded projects Service # IT audit for EU-funded projects The independent technical report your funding authority requires, written to be read by someone looking for problems. [Book a call](https://gridsearch.ai/contact?hsLang=en) [What the report covers](https://gridsearch.ai/audit-it#coverage) 01 ACCESS02 ANALYSIS03 ASSESSMENT04 DECISIONERPCRMEMAILBACKUPVM HOSTHOSTINGNASFIREWALLSWITCHSERVERLICENCE ALICENCE BCONTRACTSUPPLIERSPOFSPOFUNUSEDFULL-YEAR COST12 MONTHSWRITTEN ASSESSMENT01 CURRENT STATE02 RECOMMENDATION03 ROADMAP04 SUPPLIER EVALUATIONINTERNALWITH USSUPPLIERUNDOCUMENTED ESTATESYSTEMS MAPPED AND DEPENDENCIES TRACEDSINGLE POINTS OF FAILURE AND UNUSED LICENCESWRITTEN ASSESSMENT AND RECOMMENDATIONDECISION Why this exists ## A report written to be checked If your project procured IT equipment, software or digital services with EU funding, at some point you need an independent technical opinion confirming that what was specified in the application is what was delivered, and that it does what the application said it would. The report is not a formality. It is read by people whose job is to find the gap between the funding application and reality. A report that asserts conformity without showing how each finding was established does not close that gap — it postpones it, and the questions come back later, usually with less time to answer them. So the work is documentary before it is physical. The application, the acquisition contract and its annexes, the delivery documentation and the invoices are read against each other, item by item, and only then against what is actually installed. Where the documents and the delivery do not agree, you hear about it while there may still be time to address it. Discovering it in the final report helps nobody. We do not sell or resell the equipment and software we audit. That separation is what makes the report worth having. Coverage ## What the report covers ### Specification against delivery Correspondence between the technical specifications in the funding application and the equipment or services actually delivered. ### Contract and annexes Verification against the acquisition contract and its annexes, item by item rather than in aggregate. ### Physical and functional check Verification of what was installed and that it operates as described, with the evidence recorded and dated. ### Programme criteria Assessment against the digitalisation criteria applicable to the programme, where the call requires it. ### Findings and method Each finding stated in neutral terms, together with the method by which it was established, so a reviewer can follow the reasoning. ### Scope stated explicitly What was examined and what was not. A claim a reviewer cannot verify weakens the rest of the document rather than strengthening it. ## Programmes These are the programmes and calls we have delivered against. Each has its own guide, its own reporting format and its own definition of what counts as evidence. ### PNRR · C9, I3, Measure 1 — Digitalisation of SMEs Both halves of the work. Before submission: advice and analysis to establish the technical specification needed to meet the DESI criteria the project commits to. After delivery: the Final IT Audit report, written to the MIPE specific guide, covering a minimum of six DESI criteria and certifying that the investment contributes 100 per cent to the digital transition under Regulation (EU) 2021/241. ### PNRR · C7, I9 — Digitalisation of the NGO sector Final IT Audit reports to the MIPE specific guide, assessed against the DESI 2021 digital intensity criteria committed to in the application — five, seven or nine, depending on the funding tier — with the same certification under Regulation (EU) 2021/241. ### PRNV/2023/121/1 — North-West region Call 121, Digitalisation of SMEs in the North-West Development Region. Both audits on the same projects: the initial technical audit at submission, establishing that the configuration set out in the application supports the digital intensity criteria the project commits to, and the final IT audit at the close of implementation, confirming that what was procured matches what was specified and that the investment delivers the criteria it was approved against. ### PRSM/473/PRSM\_P1/OP1/RSO1.2/PRSM\_A38 — South-Muntenia region Specific objective RSO1.2, on taking advantage of digitalisation for citizens, companies, research organisations and public authorities. Initial technical audit at submission: the independent opinion on the configuration being procured and on the criteria the application commits to. ### PRV/1.2/1 and PRV/646/PRV\_P1/OP1/RSO1.2/PRV\_A11 — West region Regional intervention 1.2, Digitalisation of SMEs in the West Development Region, under the same specific objective RSO1.2. The call requires two documents at submission: the initial IT technical audit and the digital feasibility study. We produced both. Process ## How the audit runs ### Documentation You send the funding application, the acquisition contract with annexes, the delivery documentation and the invoices. ### Review on paper The documents are read against each other first. If a discrepancy appears at this stage, you are told immediately rather than at the end. ### Verification On site or remotely, depending on what is being audited, with each check recorded as evidence attached to the finding it supports. ### Report Draft report, a review round with you on matters of fact, then the signed final version. ## What is coming next Calls we are preparing for. On each of these the audit is part of the application file, which means the work on it starts before the application does. ### Regional Programme Centru 2021–2027 · Action 2.2 — Digital enterprises for an advanced economy, call 2 Digital maturity audit for SMEs in Alba, Brașov, Covasna, Harghita, Mureș and Sibiu, for projects of EUR 15,000 to 200,000. The guide provides for a single auditor role and two reports (Annex 13). GRIDSEARCH delivers both. **Initial digital maturity audit — before submission.** We establish which of the DESI criteria the company already meets, document the IT infrastructure and the cyber security measures in place, and set out the technical specification the company needs. That specification becomes the investment list of the project, which is why the audit is produced before the budget is fixed rather than after. The report is mandatory at submission, and the current level of digitalisation it records is scored. **Final digital maturity audit — at the close of implementation.** We certify the DESI progress achieved against the initial report, confirm that the assets are at the implementation site and operating, and verify the data protection measures. The report is submitted with the final reimbursement request. ### Regional Programme Bucharest-Ilfov 2021–2027 · Action 2.1 — Digitalisation of public administration and smart city applications For local and central public authorities in Bucharest and Ilfov, and their partnerships. Projects from EUR 200,000 upward. **What we deliver: the technical documentation, before submission.** This call requires no separate initial audit report. What it requires is the analysis of the existing situation, as mandatory content of the ICT feasibility study: catalogue of the public services in scope and the current sophistication level of each, request volumes and response times, inventory of applications and infrastructure, existing interconnections, cyber security and accessibility position. Close to half the evaluation score is built on figures only this analysis can supply, and two eligibility conditions depend on it. We deliver the analysis and the feasibility study under one contract, with the technical design as an option. **The final technical audit is not ours to do on these projects.** The guide requires it to be produced by an entity independent of the applicant, the consultant and the designer. Having written your documentation, we are none of those things. We will put you in touch with auditors we work with, so that the requirement is covered by someone whose independence holds up. ### Regional Programme Bucharest-Ilfov 2021–2027 · Action 1.7 — Support for the advanced digital transformation of SMEs For micro, small and medium enterprises in Bucharest and Ilfov. **Initial digital maturity audit and digitalisation plan — at submission.** The audit records the company’s current level of digitalisation and describes what is proposed. The digitalisation plan built on it sets out the need, what will be implemented, the efficiency gained, a delivery schedule tied to the procurement plan, and the risks with their mitigation. The eligible costs of the project are the ones that follow from the audit, which is why the audit comes before the investment list is fixed. Two decisions taken at this stage carry most of the evaluation weight: whether the system covers all of the company’s processes or only some of them, and whether cyber security covers every network, device, application and system the investment touches. Both are settled in the plan, not during implementation. ### Regional Programme South-East 2021–2027 · Action 1.3 — Increasing the level of digitalisation in SMEs For SMEs, including micro-enterprises, in Brăila, Buzău, Constanța, Galați, Tulcea and Vrancea. **Initial digital maturity audit — at submission.** We record the company’s current level of digitalisation, document the IT infrastructure and the cyber security measures in place, and set out the technical specification the project will invest in. The eligible investment follows from what the audit establishes, which is why it comes before the investment list is fixed. ### Regional Programme South-East 2021–2027 · Action 1.4 — Digitalisation of public services in an integrated local and regional framework For local public authorities in the South-East region. **What we deliver: the technical documentation, before submission.** A public ICT investment is built on a technical-economic file: the ICT feasibility study, and the technical design where one is prepared before submission. The study rests on an analysis of the existing situation — the public services in scope and the current sophistication level of each, the inventory of applications and infrastructure, existing interconnections, the cyber security and accessibility position — together with the general cost estimate drawn from it. We deliver the analysis and the study under one contract, with the technical design as an option. ### Regional Programme West 2021–2027 — Digitalisation of public services For administrative-territorial units — counties, municipalities and towns — and local and regional public institutions in Arad, Caraș-Severin, Hunedoara and Timiș. The call covers digital services and applications run by public institutions, and smart city pilots across governance, environment, economy, people, mobility and living. **What we deliver: the technical documentation, before submission.** A public ICT investment is built on a technical-economic file: the ICT feasibility study, and the technical design where one is prepared before submission. The study rests on an analysis of the existing situation — the public services in scope and the current sophistication level of each, the inventory of applications and infrastructure, and existing interconnections — together with the general cost estimate drawn from it. Two requirements of this call are settled in that analysis and not later: interoperability with the systems of other national, local and regional administrations, and accessibility under Directive (EU) 2016/2102. Both have to be built into the specification, and both are verified. ### Projects already under way On the regional calls listed above, several projects are mid-implementation with the final audit still ahead. We are engaged on those: the application, the specification and the criteria are documents we have already read. If your project is in either position — an application not yet submitted, or an approved project whose final audit is coming — tell us the programme and the call number and we will say what the report will require and by when. [Send your project details](https://gridsearch.ai/contact?hsLang=en) Questions ## What we are asked ### Can you audit a project where the equipment was delivered a year ago? Yes. Most of the work is documentary. Where physical verification is needed we record the current state and note the date of verification in the report. ### We already have a report, but the authority raised objections. Can you help? Send us the objections and the existing report. Sometimes what is needed is a supplementary annex rather than a new audit, and we will tell you which of the two it is before taking the work. ### Do you supply IT equipment as well? No. We do not sell or resell the equipment or software we audit. If we did, the report would not be independent and would be worth less to you. If the format is one we have not worked on, we will say so rather than find out halfway through. [Book a call](https://gridsearch.ai/contact?hsLang=en) Related ## Other services [IT consulting](https://gridsearch.ai/it-consulting?hsLang=en) [AI and process automation](https://gridsearch.ai/ai?hsLang=en) [CRM implementation and development](https://gridsearch.ai/crm?hsLang=en) [ERP selection and implementation](https://gridsearch.ai/erp?hsLang=en) [Integrations and automation](https://gridsearch.ai/integrations-and-automation?hsLang=en) [Cloud and infrastructure](https://gridsearch.ai/cloud?hsLang=en) [Websites and online stores](https://gridsearch.ai/web-development?hsLang=en) IT consulting, AI, business systems, cloud and software. ### Services - [IT consulting](https://gridsearch.ai/it-consulting?hsLang=en) - [AI and process automation](https://gridsearch.ai/ai?hsLang=en) - [CRM implementation and development](https://gridsearch.ai/crm?hsLang=en) - [ERP selection and implementation](https://gridsearch.ai/erp?hsLang=en) - [Integrations and automation](https://gridsearch.ai/integrations-and-automation?hsLang=en) - [Cloud and infrastructure](https://gridsearch.ai/cloud?hsLang=en) - [Websites and online stores](https://gridsearch.ai/web-development?hsLang=en) - [IT audits for funded projects](https://gridsearch.ai/audit-it?hsLang=en) ### Company - [Contact](https://gridsearch.ai/contact?hsLang=en) - [GRIDHUB](https://gridsearch.ai/gridhub?hsLang=en) - [Privacy policy](https://gridsearch.ai/privacy-policy?hsLang=en) - [Cookie policy](https://gridsearch.ai/cookie-policy?hsLang=en) - [Terms](https://gridsearch.ai/terms?hsLang=en) - Cookie settings ### Get in touch - [contact@gridsearch.ai](mailto:contact@gridsearch.ai) - [+40 731 358 888](tel:+40731358888) - [LinkedIn](https://www.linkedin.com/company/gridsearch) GRIDSEARCH S.R.L. · Alba Iulia, Transilvania, Romania · CUI 46475997 Personal data is processed under GDPR. See the privacy policy for what we keep and for how long. © 2026 GRIDSEARCH S.R.L. ```json { "@context" : "https://schema.org", "@id" : "https://gridsearch.ai/#organization", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "RO", "addressLocality" : "Alba Iulia", "addressRegion" : "Alba", "streetAddress" : "Bld. Revoluției 1989 nr. 69, bl. A15, ap. 14" }, "contactPoint" : { "@type" : "ContactPoint", "availableLanguage" : [ "en", "ro" ], "contactType" : "sales", "email" : "contact@gridsearch.ai", "telephone" : "+40731358888" }, "email" : "contact@gridsearch.ai", "logo" : "https://gridsearch.ai/hs-fs/hubfs/Blue_Abstract_Circle_Global_Tech_Logo-removebg-preview-3.png", "name" : "GRIDSEARCH S.R.L.", "sameAs" : [ "https://www.linkedin.com/company/gridsearch" ], "taxID" : "46475997", "telephone" : "+40731358888", "url" : "https://gridsearch.ai/", "vatID" : "RO47761385" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://gridsearch.ai/#website", "@type" : "WebSite", "name" : "GRIDSEARCH", "publisher" : { "@id" : "https://gridsearch.ai/#organization" }, "url" : "https://gridsearch.ai/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://gridsearch.ai/audit-it#service", "@type" : "Service", "additionalProperty" : [ { "@type" : "PropertyValue", "name" : "Programme delivered against", "value" : "PNRR — Component C9, Investment I3, Measure 1 — Digitalisation of SMEs" }, { "@type" : "PropertyValue", "name" : "Programme delivered against", "value" : "PNRR — Component C7, Investment I9 — Digitalisation of the NGO sector" }, { "@type" : "PropertyValue", "name" : "Programme delivered against", "value" : "PRNV/2023/121/1 — Digitalisation of SMEs, North-West Development Region" }, { "@type" : "PropertyValue", "name" : "Programme delivered against", "value" : "PRSM/473/PRSM_P1/OP1/RSO1.2/PRSM_A38 — South-Muntenia Region, specific objective RSO1.2" }, { "@type" : "PropertyValue", "name" : "Programme delivered against", "value" : "PRV/1.2/1 and PRV/646/PRV_P1/OP1/RSO1.2/PRV_A11 — West Development Region, specific objective RSO1.2" }, { "@type" : "PropertyValue", "name" : "Programme in preparation", "value" : "Regional Programme Centru 2021–2027, Action 2.2 — Digital enterprises for an advanced economy, call 2 — digital maturity audit, initial and final" }, { "@type" : "PropertyValue", "name" : "Programme in preparation", "value" : "Regional Programme Bucharest-Ilfov 2021–2027, Action 2.1 — Digitalisation of public administration and smart city applications — ICT feasibility study and technical design" }, { "@type" : "PropertyValue", "name" : "Programme in preparation", "value" : "Regional Programme Bucharest-Ilfov 2021–2027, Action 1.7 — Support for the advanced digital transformation of SMEs — initial digital maturity audit and digitalisation plan" }, { "@type" : "PropertyValue", "name" : "Programme in preparation", "value" : "Regional Programme South-East 2021–2027, Action 1.3 — Increasing the level of digitalisation in SMEs — initial digital maturity audit" }, { "@type" : "PropertyValue", "name" : "Programme in preparation", "value" : "Regional Programme South-East 2021–2027, Action 1.4 — Digitalisation of public services in an integrated local and regional framework — ICT feasibility study and technical design" }, { "@type" : "PropertyValue", "name" : "Programme in preparation", "value" : "Regional Programme West 2021–2027 — Digitalisation of public services — ICT feasibility study and technical design" } ], "areaServed" : [ { "@type" : "Country", "name" : "Romania" }, { "@type" : "AdministrativeArea", "name" : "European Union" } ], "availableChannel" : { "@type" : "ServiceChannel", "servicePhone" : "+40731358888", "serviceUrl" : "https://gridsearch.ai/audit-it" }, "description" : "The independent technical report your funding authority requires, written to be read by someone looking for problems.", "name" : "IT audit for EU-funded projects", "provider" : { "@id" : "https://gridsearch.ai/#organization" }, "serviceType" : "IT audit for EU-funded projects" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://gridsearch.ai/audit-it#faq", "@type" : "FAQPage", "isPartOf" : { "@id" : "https://gridsearch.ai/audit-it#webpage" }, "mainEntity" : [ { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Yes. Most of the work is documentary. Where physical verification is needed we record the current state and note the date of verification in the report." }, "name" : "Can you audit a project where the equipment was delivered a year ago?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Send us the objections and the existing report. Sometimes what is needed is a supplementary annex rather than a new audit, and we will tell you which of the two it is before taking the work." }, "name" : "We already have a report, but the authority raised objections. Can you help?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "No. We do not sell or resell the equipment or software we audit. If we did, the report would not be independent and would be worth less to you." }, "name" : "Do you supply IT equipment as well?" } ] } ``` ```json { "@context" : "https://schema.org", "@id" : "https://gridsearch.ai/audit-it#webpage", "@type" : "WebPage", "about" : { "@id" : "https://gridsearch.ai/audit-it#service" }, "breadcrumb" : { "@id" : "https://gridsearch.ai/audit-it#breadcrumb" }, "description" : "The independent technical report your funding authority requires, written to be read by someone looking for problems.", "isPartOf" : { "@id" : "https://gridsearch.ai/#website" }, "mainEntity" : { "@id" : "https://gridsearch.ai/audit-it#service" }, "name" : "IT audit for EU-funded projects", "url" : "https://gridsearch.ai/audit-it" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://gridsearch.ai/audit-it#breadcrumb", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://gridsearch.ai/", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://gridsearch.ai/audit-it", "name" : "IT audit for EU-funded projects", "position" : 2 } ] } ```