v1.0.0-beta — Initial Platform Release

🚀 The first public beta of AIIA — the AI-enabled internal audit platform. This release delivers the complete audit lifecycle with 14 integrated modules, AI governance, and Saudi regulatory compliance.

Release Highlights

🏗️ Full Audit Lifecycle

AIIA v1.0.0-beta delivers the complete internal audit lifecycle — from universe management and annual planning through fieldwork execution, reporting, and continuous monitoring.

14 Integrated Modules:

Module	Status	Description
Audit Universe & Library	✅ GA	Centralized auditable entity registry with risks and controls
Annual Planning & Resources	✅ GA	Risk-based planning with AI-assisted prioritization
Engagements	✅ GA	Full lifecycle engagement management
Fieldwork	✅ GA	Workpapers, testing, evidence, AI writing assistant
Sampling	✅ GA	Statistical and judgmental sampling
Client Portal (PBC)	✅ GA	External evidence collection portal
Findings & Remediation	✅ GA	CCCER-based findings with action tracking
Reporting & Board Packs	✅ GA	AI-assisted report generation and PDF export
Dashboards & Analytics	✅ GA	AI Governance Hub, custom builder, data agent
Continuous Monitoring & KRI	✅ GA	KRI playground, AI wizard, real-time alerts
Quality Assurance	✅ GA	Engagement and program-level QA reviews
Questionnaires	✅ GA	Dynamic forms with conditional logic and scoring
Compliance Frameworks	✅ GA	NCA ECC, PDPL, CSCC, ISO 27001, COSO
Integrations & APIs	✅ GA	REST API, webhooks, pre-built connectors

---

🤖 AI Layer (Cross-Cutting)

AIIA embeds AI throughout the audit lifecycle with full governance:

AI Capabilities:

• AI Companion — Conversational assistant for all modules
• Evidence Summarization — Auto-summarize uploaded documents
• Narrative Drafting — Draft workpaper conclusions and report narratives
• Historical Retrieval (RAG) — Search past audits with citations
• AI Diff Review — Intelligent version comparison
• Data Agent — Natural language queries against audit data
• Document Intelligence — Upload and analyze documents
• Agentic AI — Multi-step autonomous tasks with human approval
• KRI Wizard — AI-guided Key Risk Indicator creation
• Risk/Control Suggestion — AI recommends based on industry data
• Recurring Finding Detection — Pattern recognition across engagements

AI Governance:

• All AI outputs are suggestions only — human approval required
• RBAC-constrained — AI respects user permissions
• Fully audited — every AI interaction logged
• Citations required — source references for all outputs
• Confidence scoring — transparency on AI certainty

Multi-Provider Support:

Provider	Type	Key
Ollama	Local (on-prem)	No
Gemini	Cloud	Yes
OpenAI	Cloud	Yes
Anthropic	Cloud	Yes
DeepSeek	Cloud	Yes
Custom	Any	Yes

---

🇸🇦 Saudi Regulatory Compliance

Built for Saudi enterprises and Vision 2030:

• NCA ECC — National Cybersecurity Authority Essential Controls (pre-loaded)
• PDPL — Personal Data Protection Law compliance
• CSCC — Cloud Security Compliance Certification
• SAMA CSF — Saudi Monetary Authority Cyber Security Framework
• Full Arabic/RTL support — complete bilingual interface (EN/AR)

---

🔒 Security & Governance

• RBAC + SoD — Role-based access at API and UI levels
• Immutable audit trail — every CUD operation logged
• Evidence chain-of-custody — SHA-256 hash, virus scan, uploader tracking
• API key encryption — AES-256-GCM encryption at rest
• Multi-tenancy — full data isolation between organizations
• SaaS + On-Prem — deployable in both modes

---

📊 Dashboards

• AI Governance Hub — 360° audit program dashboard
• Executive Dashboard — Board-ready portfolio view
• Custom Dashboard Builder — Drag-and-drop widget configuration
• Data Agent — Natural language data queries with chart generation
• Portfolio Analytics — Cross-engagement trend analysis

---

Technical Stack

Component	Technology
Backend	Python 3.11+ / FastAPI / SQLModel
Frontend	TypeScript / Next.js 14 (App Router)
Database	PostgreSQL 16 + pgvector
Storage	MinIO (S3-compatible)
Identity	Keycloak (SSO/OIDC/SAML)
AI	LangChain + multi-provider LLM
Cache	Redis
Observability	OpenTelemetry → Prometheus → Grafana
Deployment	Docker Compose / Helm

Known Issues

Issue	Workaround	Status
Dashboard custom widgets may not persist layout on Safari	Use Chrome/Edge	Investigating
Arabic RTL in PDF export may have alignment issues on complex tables	Use simple table layouts	In Progress
Keycloak session timeout may not redirect cleanly	Refresh the page to re-authenticate	Fix planned for v1.0.1

Upgrade Notes

This is the initial release — no upgrade path needed. For fresh installation, see the Deployment Guide.

What's Next

v1.1.0 (Planned — Q3 2026):

• Mobile responsive enhancements
• Bulk finding operations
• Enhanced PDF export with custom templates
• Workflow automation rules
• Additional compliance frameworks (SOX, GDPR)
• Performance optimizations for large datasets