AIIA Documentation Blog https://docs.aiia.sa/releases AIIA Documentation Blog Sun, 24 May 2026 00:00:00 GMT https://validator.w3.org/feed/docs/rss2.html https://github.com/jpmonette/feed en <![CDATA[v1.0.0-beta β€” Initial Platform Release]]> https://docs.aiia.sa/releases/v1-0-0-beta https://docs.aiia.sa/releases/v1-0-0-beta Sun, 24 May 2026 00:00:00 GMT

πŸš€ The first public beta of AIIA β€” the AI-enabled internal audit platform. This release delivers the complete audit lifecycle with 14 integrated modules, AI governance, and Saudi regulatory compliance.

Release Highlights​

πŸ—οΈ Full Audit Lifecycle​

AIIA v1.0.0-beta delivers the complete internal audit lifecycle β€” from universe management and annual planning through fieldwork execution, reporting, and continuous monitoring.

14 Integrated Modules:

ModuleStatusDescription
Audit Universe & Libraryβœ… GACentralized auditable entity registry with risks and controls
Annual Planning & Resourcesβœ… GARisk-based planning with AI-assisted prioritization
Engagementsβœ… GAFull lifecycle engagement management
Fieldworkβœ… GAWorkpapers, testing, evidence, AI writing assistant
Samplingβœ… GAStatistical and judgmental sampling
Client Portal (PBC)βœ… GAExternal evidence collection portal
Findings & Remediationβœ… GACCCER-based findings with action tracking
Reporting & Board Packsβœ… GAAI-assisted report generation and PDF export
Dashboards & Analyticsβœ… GAAI Governance Hub, custom builder, data agent
Continuous Monitoring & KRIβœ… GAKRI playground, AI wizard, real-time alerts
Quality Assuranceβœ… GAEngagement and program-level QA reviews
Questionnairesβœ… GADynamic forms with conditional logic and scoring
Compliance Frameworksβœ… GANCA ECC, PDPL, CSCC, ISO 27001, COSO
Integrations & APIsβœ… GAREST API, webhooks, pre-built connectors

πŸ€– AI Layer (Cross-Cutting)​

AIIA embeds AI throughout the audit lifecycle with full governance:

AI Capabilities:

  • AI Companion β€” Conversational assistant for all modules
  • Evidence Summarization β€” Auto-summarize uploaded documents
  • Narrative Drafting β€” Draft workpaper conclusions and report narratives
  • Historical Retrieval (RAG) β€” Search past audits with citations
  • AI Diff Review β€” Intelligent version comparison
  • Data Agent β€” Natural language queries against audit data
  • Document Intelligence β€” Upload and analyze documents
  • Agentic AI β€” Multi-step autonomous tasks with human approval
  • KRI Wizard β€” AI-guided Key Risk Indicator creation
  • Risk/Control Suggestion β€” AI recommends based on industry data
  • Recurring Finding Detection β€” Pattern recognition across engagements

AI Governance:

  • All AI outputs are suggestions only β€” human approval required
  • RBAC-constrained β€” AI respects user permissions
  • Fully audited β€” every AI interaction logged
  • Citations required β€” source references for all outputs
  • Confidence scoring β€” transparency on AI certainty

Multi-Provider Support:

ProviderTypeKey
OllamaLocal (on-prem)No
GeminiCloudYes
OpenAICloudYes
AnthropicCloudYes
DeepSeekCloudYes
CustomAnyYes

πŸ‡ΈπŸ‡¦ Saudi Regulatory Compliance​

Built for Saudi enterprises and Vision 2030:

  • NCA ECC β€” National Cybersecurity Authority Essential Controls (pre-loaded)
  • PDPL β€” Personal Data Protection Law compliance
  • CSCC β€” Cloud Security Compliance Certification
  • SAMA CSF β€” Saudi Monetary Authority Cyber Security Framework
  • Full Arabic/RTL support β€” complete bilingual interface (EN/AR)

πŸ”’ Security & Governance​

  • RBAC + SoD β€” Role-based access at API and UI levels
  • Immutable audit trail β€” every CUD operation logged
  • Evidence chain-of-custody β€” SHA-256 hash, virus scan, uploader tracking
  • API key encryption β€” AES-256-GCM encryption at rest
  • Multi-tenancy β€” full data isolation between organizations
  • SaaS + On-Prem β€” deployable in both modes

πŸ“Š Dashboards​

  • AI Governance Hub β€” 360Β° audit program dashboard
  • Executive Dashboard β€” Board-ready portfolio view
  • Custom Dashboard Builder β€” Drag-and-drop widget configuration
  • Data Agent β€” Natural language data queries with chart generation
  • Portfolio Analytics β€” Cross-engagement trend analysis

Technical Stack​

ComponentTechnology
BackendPython 3.11+ / FastAPI / SQLModel
FrontendTypeScript / Next.js 14 (App Router)
DatabasePostgreSQL 16 + pgvector
StorageMinIO (S3-compatible)
IdentityKeycloak (SSO/OIDC/SAML)
AILangChain + multi-provider LLM
CacheRedis
ObservabilityOpenTelemetry β†’ Prometheus β†’ Grafana
DeploymentDocker Compose / Helm

Known Issues​

IssueWorkaroundStatus
Dashboard custom widgets may not persist layout on SafariUse Chrome/EdgeInvestigating
Arabic RTL in PDF export may have alignment issues on complex tablesUse simple table layoutsIn Progress
Keycloak session timeout may not redirect cleanlyRefresh the page to re-authenticateFix planned for v1.0.1

Upgrade Notes​

This is the initial release β€” no upgrade path needed. For fresh installation, see the Deployment Guide.

What's Next​

v1.1.0 (Planned β€” Q3 2026):

  • Mobile responsive enhancements
  • Bulk finding operations
  • Enhanced PDF export with custom templates
  • Workflow automation rules
  • Additional compliance frameworks (SOX, GDPR)
  • Performance optimizations for large datasets
]]> Release Notes Features AI