Book a Demo

Playbooks

How to Audit a Customer Service Knowledge Base

Audit what your service team and AI can rely on: source authority, freshness, scope, contradictions, permissions, findability, handoff boundaries, and real question tests.

Marcus BellCustomer Success LeadPublished 6 min read
Two customer experience specialists reviewing organized knowledge cards and binders
Two customer experience specialists reviewing organized knowledge cards and binders

A knowledge base audit is a structured review of what information exists, who has authority over it, where it applies, whether it is current and accessible, how contradictions are resolved, and whether people or AI can retrieve the right answer under realistic conditions. The goal is not to make every article look polished. It is to make important guidance trustworthy, findable, scoped, and safely bounded.

Define the audit boundary first

List every source that can influence a customer answer: public help content, internal procedures, product documentation, policies, price or service-area tables, CRM notes, macros, transcripts, PDFs, integration instructions, and informal team documents. Record the system of record, owner, audience, access level, effective date, superseding source, and where the content is consumed.

Risk tierTypical contentMinimum audit decisionFailure route
HighSafety, privacy, legal, financial, regulated, access-control, or irreversible actionNamed authority, exact scope, effective date, tested escalationDo not answer or act; route to reviewed owner
MediumEligibility, pricing, appointment, returns, service area, integration behaviorVerified source, owner, date, exception pathState uncertainty and hand off
StandardHow-to, navigation, status explanation, terminologyAccurate steps, usable language, working linksOffer alternate route or create gap ticket
ReferenceBackground education and non-operational contextSource quality, relevance, accessibilityExclude from direct action if stale or ambiguous

Run the content-level checklist

  • Authority: is this source allowed to determine the answer?
  • Accuracy: do named systems, fields, steps, and conditions match the current reviewed state?
  • Scope: which product, plan, location, channel, language, customer type, or date range does it cover?
  • Freshness: is there a meaningful review trigger, not just an arbitrary timestamp?
  • Precedence: what wins if another source disagrees?
  • Permissions: should every reader or workflow be able to retrieve this content?
  • Accessibility: can people perceive and operate the content in the formats provided?
  • Action boundary: may the workflow answer, draft, recommend, transact, or only route?
  • Observability: can an owner see retrieval failures, exceptions, and feedback?
  • Retirement: can obsolete content be removed from retrieval without erasing required history?

WCAG 2.2 is a W3C Recommendation for web accessibility. Which requirements apply depends on the implemented experience and the organization's obligations, but the audit should at least flag content that relies only on color, lacks useful text alternatives, has inaccessible tables or documents, or cannot be operated with the intended input methods. W3C Web Content Accessibility Guidelines 2.2

Assign a disposition, not a vague score

  1. Keep: authoritative, current, correctly scoped, and tested.
  2. Revise: useful source with a fixable accuracy, scope, structure, or accessibility gap.
  3. Split: one item covers audiences or conditions that need different owners or rules.
  4. Merge: duplicate guidance can become one canonical source with redirects or references.
  5. Restrict: valid information should be available only to approved roles or workflows.
  6. Retire: superseded or unsafe for current retrieval, while preserving records required by policy.
  7. Escalate: authority is unclear, sources conflict, or qualified review is required.

Do not let an auditor silently rewrite a policy to resolve a conflict. Capture both sources, identify their owners, stop the affected answer or action if necessary, and record the authoritative decision. The escalation matrix gives that conflict a named destination and closure rule. customer service escalation matrix

Test retrieval and behavior with realistic questions

NIST's AI RMF recommends testing systems before deployment and regularly in operation, with measures documented for conditions similar to deployment. For a knowledge workflow, a clean demonstration question is not enough. Build a set from real phrasing and known failure modes, then preserve the expected source, allowed action, and acceptable fallback for each test. NIST AI RMF Core

  1. A direct question with one current authoritative answer.
  2. A synonym, misspelling, or conversational version of the same question.
  3. A question whose answer changes by location, product, plan, date, or customer status.
  4. Two sources that appear to contradict each other.
  5. An outdated but highly similar article that should not win retrieval.
  6. A restricted source requested by an unauthorized role.
  7. A question with insufficient evidence where the correct response is uncertainty or handoff.
  8. A request to perform an action that the knowledge layer may explain but not authorize.

Make ownership operational

Each high- and medium-risk item needs a business owner, a content steward, a review trigger, and a fallback route. The owner decides meaning; the steward maintains the artifact. Useful triggers include policy changes, product releases, integration changes, incident findings, recurring failed searches, and owner departure. A calendar review can supplement these triggers but should not replace them.

For how knowledge fits into a complete front-desk workflow, continue with the AI front desk guide. Use the human-handoff guide to define what travels when retrieval is uncertain, and browse the fundamentals hub for adjacent implementation and governance decisions. what an AI front desk includes · AI agent to human handoff · customer service fundamentals guides

Start with the ten sources most likely to change a customer outcome, then assign owners and test questions before expanding the audit.

Explore knowledge-enabled service

Quick answers

Frequently asked

How often should a knowledge base be audited?

Use risk-based triggers such as policy, product, integration, incident, and ownership changes, supplemented by a documented review cadence. High-impact content usually needs faster review than background reference material.

What should be removed from a knowledge base?

Retire content that is superseded or unsafe for current retrieval, restrict valid content that is not appropriate for every audience, and preserve any history required by the organization's record policy.

How do you test an AI knowledge base?

Use realistic phrasing, scope variations, conflicts, stale lookalikes, restricted sources, insufficient-evidence questions, and action requests. Record the expected source, allowed behavior, and fallback for each test.

Turn the knowledge estate into an owned system

Map authority, risk, scope, precedence, review triggers, permissions, and fallback behavior.

Explore the AI front desk