Certified once is not certified.
A fatwa covers the product as it was reviewed. Products drift — a new feature, a new counterparty, a process changed quietly to fix an operational problem.
Audit tests what the institution actually does against what it was certified to do, and closes the gap before it becomes a finding someone else makes.
What you get.
Transaction testing
A sample of real transactions traced end to end, against the structure as certified.
Process and controls review
Where the operating reality diverges from the documented process, and why.
Annual Shariah certification
A signed annual opinion your board, your auditor and your regulator can rely on.
The audit cycle.
Annual by default, with interim testing where the risk sits.
Plan
We agree scope and sample against where the risk actually is, not evenly across the book.
Test
Transactions, documents and controls, traced to source.
Report
Findings ranked by materiality, each with what caused it and what closes it.
Certify
The annual opinion, signed by named scholars, once the material findings are closed.
What drift usually looks like.
- A step that stopped happening. The ownership leg that takes an extra day, until someone shortens it.
- A product that grew a feature. Small additions that individually look harmless.
- A counterparty that changed. Same process, different party, different answer.
Common questions.
Is this the same as a financial audit?
No. Your financial auditor tests the numbers; we test whether what happened matches what was certified. The two run alongside each other.
What happens if you find something material?
It goes in the report with the remediation attached, and the annual opinion waits until it is closed. That is the point of the exercise.