BGNexa AI v0.5.1 — Evidence Intelligence & Assurance Workspace Public Beta

BGNexa AI v0.5.1

BGNexa AI v0.5.1 advances the project from evidence-backed readiness assessment into a broader cybersecurity, privacy and regulatory assurance workspace.

The release combines the v0.5 Assurance Workspace milestone with the v0.5.1 public-beta usability and deployment improvements.

Assurance Workspace

BGNexa can now turn an assessment into a traceable assurance workplan with:

• control-owner and assurance-owner assignment
• evidence-request registers
• suggested test objectives and procedures
• workflow states from open through remediation, retest and closure
• test-result recording
• sample references
• user-recorded findings and severity
• management responses
• action owners and target dates
• reviewer notes
• closure evidence
• CSV workplan exports
• findings/action exports
• evidence-request exports
• session audit-trail exports
• tamper-evident JSON assurance snapshots

Readiness gaps are not automatically converted into audit findings.

Evidence intelligence

BGNexa maintains conservative evidence controls including:

• source-traceable evidence ingestion
• evidence-source registry
• SHA-256 provenance
• evidence-quality classification
• freshness signals
• applicability controls
• prompt-injection safeguards
• local TF-IDF retrieval
• optional AI-assisted evidence review
• explicit human-validation states
• distinction between provisional readiness and resolved coverage

Supported framework packs

Current packs include selected or verified material for:

• Nigeria Data Protection Act 2023
• NDPC GAID 2025
• CBN Risk-Based Cybersecurity Framework for OFIs
• CBN Risk-Based Cybersecurity Framework for DMBs and PSBs
• ISO/IEC 27001 readiness support
• NIST Cybersecurity Framework 2.0
• EU GDPR organisational-readiness use cases

Frameworks, laws, standards and regulatory guidance are not treated as interchangeable scoring systems.

Public-beta improvements

v0.5.1 also includes:

• polished product interface
• clearer Scope → Evidence → Assess → Assure workflow
• public-beta guidance
• stronger Streamlit CI validation
• improved onboarding and README navigation
• contributor guidance
• release metadata and product positioning improvements

AI provider behaviour

BGNexa works without an API key in deterministic retrieval/manual-review mode.

Optional AI-assisted review can use configured providers, but external-AI processing should only be used for evidence the user is authorised to send externally.

Important limitations

BGNexa does not:

• determine legal compliance;
• issue an audit opinion;
• certify ISO/IEC 27001 conformity;
• provide regulator approval;
• replace legal, privacy, cybersecurity, regulatory or audit professionals.

The public beta is not yet a production multi-tenant evidence-management SaaS.

Status

v0.5.1 — Public Beta

Feedback, reproducible testing, focused forks and pull requests are welcome.

BGNexa AI v0.4.0 — Initial Public Release

BGNexa AI v0.4.0

Turn evidence into readiness.

BGNexa AI is an evidence-backed cybersecurity, privacy and regulatory readiness platform that evaluates organisational evidence against multiple Nigerian and international frameworks.

Framework coverage

• Nigeria Data Protection Act 2023
• NDPC GAID 2025
• CBN Risk-Based Cybersecurity Framework for OFIs 2022
• CBN Risk-Based Cybersecurity Framework for DMBs & PSBs 2024
• ISO/IEC 27001:2022 reference-level readiness
• NIST Cybersecurity Framework 2.0
• EU GDPR

Key capabilities

• Framework-specific applicability logic
• Evidence ingestion for PDF, DOCX, TXT and Markdown
• Hybrid lexical and semantic retrieval
• Evidence-grounded AI assessment
• Human validation workflow
• Prompt-injection safeguards
• Readiness scoring with uncertainty handling
• Cross-framework evidence reuse analysis
• Priority remediation queue
• Tamper-evident assessment snapshots
• Source provenance and regulatory traceability
• Executive readiness reporting

Quality

• 62 automated tests passing
• GitHub Actions CI enabled
• Prompt-injection security evaluation
• Framework provenance validation
• Synthetic retrieval evaluation suite

Important

BGNexa AI provides evidence-backed readiness assessments. It does not provide legal advice, determine regulatory compliance, certify ISO conformity, or replace qualified audit, privacy, cybersecurity or legal review.

This is the first public portfolio release of BGNexa AI.