Implementation
What IT needs to know in one screen.
How we're different
- Ops-first, not checks-first.
- Policy-gated actions with human approvals.
- Evidence binders by default.
Deployment options
Local / dev
Run locally for pilots and internal demos with local storage and a local model gateway.
Dedicated VPC (roadmap)
Dedicated environment with isolation, private networking, and customer-controlled keys.
On-prem (roadmap)
On-prem worker + data plane for stricter data residency and connectivity constraints.
Data flow (high-level)
AI drafts and extracts under strict schema. Humans approve sensitive actions and outcomes.
Network requirements
Outbound
- HTTPS to vendor APIs (KYB/KYC/sanctions) via customer-owned accounts
- HTTPS to email provider APIs (Gmail/Outlook) for ingestion + sending
- Object storage (S3-compatible) for documents and binder exports
Inbound (optional)
- Webhooks for case state sync to internal systems
- Callback URLs for vendor events (if supported)
Inbound endpoints can be restricted to allow-listed IPs and signed payloads (roadmap).
IAM, access, and audit
RBAC
Role-based access controls and least-privilege default roles (pilot scope).
- Reviewer vs approver separation
- Approval rationale captured
- External actions always gated
SSO + SCIM (roadmap)
Enterprise identity and lifecycle management for larger teams.
- SAML/OIDC SSO
- SCIM provisioning
- Audit exports for access events
Logging and exports
Audit exports
Every action is logged with actor + timestamp + evidence pointers; binders include approvals and timeline.
- PDF + JSON binder export
- Append-only audit timeline
- Case status API (roadmap)
SIEM export (roadmap)
Stream audit events for centralized monitoring and retention.
- Webhook or log sink integration
- Redacted fields by default
- Tenant-bound exports only
Vendor adapters
KYBRIQ sits on top of your existing vendors. You bring the vendor accounts; KYBRIQ orchestrates ops workflows and evidence around them.
- Adapters normalize vendor results into a consistent evidence model
- Swap vendors without retooling operational playbooks (goal)
- Retries and SLAs are managed by the orchestrator
Procurement shortcuts
- Procurement pack for short-form answers.
- Trust center for posture pages.
- Download security packet (mock).