This document gives government IT officers, COA representatives, NPC compliance teams, and procurement staff a complete technical picture of NovaGovAI: how it is deployed, how data is handled, what security controls are in place, how AI accountability works, and what happens if the vendor relationship ends. It is designed to answer the questions that cause govtech adoptions to stall.
NovaGovAI is a web-based AI decision support platform for Philippine local government units. It is licensed software — not a cloud subscription where your data is stored on someone else's servers. The platform runs on the LGU's own infrastructure or government-certified cloud. Zentarai Labs provides the software license, setup, and support. Your data stays under your control.
Choose the model that fits your LGU's infrastructure and compliance requirements. In all three options, the LGU retains full ownership of its data and can migrate between options at any time.
NovaGovAI handles two types of data: public government feeds (read-only, no PII) and LGU operational data (stored only in the LGU's own deployment). In self-hosted and DICT GovCloud deployments, Zentarai Labs has zero access to LGU operational data.
The following controls are implemented on all NovaGovAI deployments. For self-hosted deployments, server-level controls are the responsibility of the LGU IT team; Zentarai provides configuration guidance and documentation.
NovaGovAI is designed around Philippine legal and regulatory frameworks from the ground up — not adapted from a foreign platform afterward.
| Framework | How NovaGovAI Addresses It | Status |
|---|---|---|
| RA 10173 Data Privacy Act |
LGU data stored within LGU-controlled environment. PII processed only within authorized LGU systems. Data subjects retain all rights. DPA executed for Managed deployments. NPC-compliant data handling by design. | Compliant |
| RA 12254 CLUP Mandate |
Platform built specifically for RA 12254 compliance workflows. DHSUD checklist integrated. Generates RA 12254-ready gap reports for submission. AI drafts required sections; planning officer reviews and finalizes. | Aligned |
| RA 10121 DRRM Law |
Real-time integration with PHIVOLCS, PAGASA, NDRRMC, and MGB supports all DRRM planning mandates. Hazard overlay maps support LGU LDRRMO functions and contingency planning requirements. | Aligned |
| RA 11032 EODB Act |
Citizen reporting and service tracking module supports EODB and ARTA reporting. SLA tracking and resolution data is exportable for ARTA submissions. Automated escalation enforces response time standards. | Aligned |
| DILG SGLG Governance Standards |
SGLG dashboard tracks all seven assessment areas. Real-time scoring updated as LGU data changes. AI coaching on gaps before the national assessment period. | Aligned |
| COA Audit Commission on Audit |
All AI queries, outputs, and decisions are timestamped and cited to source. Full audit log exportable in PDF and CSV on demand. No AI output is applied without a human approval step. System architecture documentation available to COA on request. | Audit-Ready |
| DICT GovCloud Gov't Cloud Policy |
DICT GovCloud deployment is available and recommended. LGU retains full ownership of the GovCloud instance. Zentarai provides the software license only — not the cloud infrastructure. | Supported |
| RA 9184 Gov't Procurement |
Founding Partner Program (Year 1 free) does not require BAC process — no government funds are expended. Year 2 license agreements are structured to fit within standard procurement thresholds. See FAQ Section 11. | Addressed |
This is the most important section for COA reviewers and government officials. NovaGovAI is a decision support tool. It never makes binding official decisions. The accountability framework is designed to be clear, auditable, and legally defensible.
Specifications for self-hosted or DICT GovCloud deployments. Requirements scale with concurrent users and citizen report volume. Zentarai handles the full installation — LGU IT provides server access only.
| Component | Minimum | Recommended |
|---|---|---|
| CPU | 2 vCPU | 4 vCPU |
| RAM | 4 GB | 8 GB |
| Storage | 50 GB SSD | 100 GB SSD |
| Operating System | Ubuntu 22.04 LTS or RHEL 8+ (Linux required for backend API) | |
| Database | PostgreSQL 14 or higher | |
| Runtime | Python 3.10 or higher | |
| Network bandwidth | 10 Mbps | 25 Mbps (for external data feeds) |
| Concurrent users | Up to 20 | Up to 50 (on recommended spec) |
| End-user browser | Chrome 110+, Firefox 110+, Edge 110+, Safari 16+. No plugins required. | |
| End-user device | Any device with a modern browser — desktop, laptop, tablet, or smartphone. No installation required. | |
| Ports required | 80 (HTTP, redirects to HTTPS), 443 (HTTPS), 5432 (PostgreSQL — internal network only, never exposed publicly) | |
This section addresses the questions government IT departments are most concerned about but least likely to ask directly: vendor failure, internet outages, and data loss. We answer them directly.
Zentarai Managed deployments: 99% uptime target, measured monthly. Scheduled maintenance notified 48 hours in advance and performed outside business hours (10PM–6AM). Unplanned downtime response within 4 hours.
DICT GovCloud and Self-Hosted: Uptime is determined by DICT/LGU infrastructure. Zentarai provides application monitoring tools and responds to application-level issues within 4 hours during business days.
For Managed deployments ending: Full database export in open formats (PostgreSQL dump, CSV, JSON) delivered within 14 days of any service termination. No fees for data retrieval. No proprietary formats.
All external connections pull from public Philippine government sources. These are outbound, read-only connections. NovaGovAI does not write to, modify, or share data with any external agency system.
| Agency | Data Type | Connection | PII |
|---|---|---|---|
| PHIVOLCS | Seismic events, volcano bulletins | Public RSS/JSON feed | None |
| PAGASA | Weather advisories, typhoon tracks, rainfall | Public API | None |
| NDRRMC | Disaster alerts, situation reports | Public feed | None |
| MGB | Geohazard maps, landslide susceptibility | Public GIS dataset | None |
| DILG / SGLG | LGU governance scores, assessment results | Public registry | None |
| DHSUD | CLUP compliance status, zoning guidelines | Public registry | None |
| OSM / NAMRIA | Base maps, roads, administrative boundaries | Public tile servers | None |
Zentarai Labs handles all technical configuration. LGU staff involvement is limited to onboarding and training sessions. The implementation timeline below applies to all Founding Partner LGUs.
Like all software, NovaGovAI has bugs. We do not claim otherwise. When your team finds an issue: report it to landon@zentarailabs.com with a description of what happened. Critical bugs (platform inaccessible, data not saving) are acknowledged within 4 hours and patched within 24 hours. Non-critical issues are logged, prioritized, and resolved in the next update cycle. You will receive confirmation when the fix is deployed. Founding Partners receive direct access to the engineering team's issue tracker so you can see the status of reported bugs in real time — no chasing for updates.
This section is not for the institution. It is for the individual reading this document — the IT officer who will have to recommend, defend, and be accountable for what happens next.
We understand that recommending a new platform creates personal accountability for the IT officer who approved it. If something goes wrong, you are the person answering for it — not the vendor, not the Mayor's office. You.
That is why we have structured this program the way we have. Full data export at any time, at no cost. No BAC-violating commitments. COA-ready audit logs from Day 1. Source code in escrow for all Founding Partners. Year 2 pricing committed in writing before Year 1 ends. If something goes wrong with NovaGovAI, the paper trail is designed to protect you — not us. Every commitment in this document exists because we took seriously that you are a person with a career, not just a procurement checkpoint.
If your Mayor or Administrator asks for a summary, these are accurate points you can use directly in an internal memo or verbal briefing:
These are the questions that government IT officers, COA representatives, and procurement staff ask most often — and sometimes don't ask because they expect a non-answer. We answer them directly here.
For technical questions, security review requests, NPC compliance inquiries, or to schedule a call with the engineering team — contact us directly. All technical inquiries receive a response within one business day.