Socraft is competing in the IGF GovTech Innovation Challenge 2026 with three on-premise, fully-traceable platforms that turn procurement dossiers into auditable evidence, risk-prioritised mission plans, and compliance findings — without sending a single byte to the cloud.
About Socraft
Socraft builds sovereign software for the Moroccan public-finance audit ecosystem. Our work for the Inspection Générale des Finances (IGF), the Cour des Comptes (CDC) and the Cours Régionales des Comptes (CRC) shares one substrate: on-premise hosting, local LLMs, full traceability on every alert and deliverable, and human oversight at every audit boundary.
Every requirement, data model, risk, and security decision is governed through ArcKit — a versioned, review-cycle-controlled architecture framework — so that each platform is auditable not only in its outputs but in its design.
On-premise hosting & LLMs. No external cloud APIs. Data stays in Morocco.
Every alert, response and deliverable traces back to its evidence and rule.
Inspectors stay in control. The system surfaces, prioritises, drafts — never decides.
French, Arabic and English across documents, OCR and the workbench UI.
The three challenges
Each platform addresses a distinct GIC 2026 challenge while inheriting the same programme-wide architecture principles and shared substrate.
Indexes permanent & mission files, parses PMP data and DAO documents, runs compliance tests, prioritises risk, and generates reviewed audit deliverables — with a bilingual RAG citation engine and full evidence traceability.
Risk-based annual audit programming: AHP + TOPSIS scoring, Isolation Forest anomaly detection with TreeSHAP explanations, CP-SAT mission team planning, and Catala criteria-as-code — all powered by an on-premise LLM reasoning layer.
Comprehensive procurement control platform: Decree 2-22-431 compliance rules-as-code (Catala + DSPy extraction), graph-based fraud detection, price benchmarking, and automated deliverable generation — on-premise, CPU-only, reusing the 001/002 substrate.
Governed architecture
The full architecture documentation site renders all governed artefacts: requirements, data models, risk registers, DPIAs, security design, roadmaps, ADRs and traceability matrices — with Mermaid diagram support.
KPIs, coverage bars and governance checklist across all projects.
Open the docs site →Programme-wide binding enterprise architecture principles (Project 000), inherited by all three challenges.
Read ARC-000-PRIN v2.0 →Requirements, data model, platform design, risk, DPIA, security, AI playbook, roadmap.
Browse artefacts →Full ArcKit artefact set for the SmartProgrammer audit-programming platform.
Browse artefacts →SmartController artefacts plus three architecture decision records (graph engine, benchmarking, ingestion).
Browse artefacts →Command reference for the architecture governance methodology used across the programme.
Read the guides →Applications
All three platforms are deployed in beta and available for testing.
Sm@rt Public Procurement Auditor — document intelligence, compliance analysis and assisted deliverable generation.
Open /auditor → ● BETASm@rt Programmer (SmartProgrammer) — risk-based audit programming and mission team planning.
Open /programmer → ● BETASm@rt Public Procurement Control (SmartController) — compliance rules-as-code and graph fraud detection.
Open /control → ● LIVETask orchestration service — monitor ingestion, rescan and compliance workflow execution.
Open /temporal → ● LIVEExperiment tracking for the MCDA worker — scoring runs, anomaly detection metrics, and AHP weight consistency.
Open mlflow.govtech.socraft.ma →