Architecture
A single runtime receives requests from every channel, verifies identity and policies before touching your systems, pulls credentials from a secure Vault to query your databases natively, and records every decision.
Request lifecycle
No channel talks directly to your databases or to an unguarded model. Every request passes through six stages governed by the kernel.
A teammate writes or speaks from Web, Android, iOS, WhatsApp, Voice/SIP, or Alexa. The gateway validates their corporate SSO session, role, and department.
Nous identifies whether the request is a data query, a recommendation, or a transactional workflow, and resolves the business objects involved (Customer, Invoice, Supplier, Exchange rate).
Before anything runs, the kernel evaluates policies top to bottom: which objects and rows that role may see, which fields are masked, and whether the action is read-only or requires approval.
The executor retrieves credentials from the internal Vault (never exposing them to the model) and queries your databases through native drivers or runs the workflow with EVA under contract.
When a rule requires sign-off (for example, a sales adjustment of 10,000 or more), Nous runs the approver chain (SITE_MANAGER → GOP → DIRECTOR_SEGMENTO → CFO) with L1/L2 signature and automatic voice:SIP calls if the SLA expires.
The result returns to the originating channel and the event viewer records full lineage: who asked, what data was used, which model reasoned, which policy applied, and who approved.
Security & data at the core
Three runtime foundations let AI operate at speed on real enterprise data without opening security gaps.
Business and security logic never depends on a model “remembering” an instruction.
The kernel never lets the model touch files or see credentials: every secret is encrypted or sent to the Vault.
Nous queries your data engines through native drivers and built-in connection pools, without fragile glue.
Governed omnichannel
There is no separate bot for web and another for WhatsApp or phone. Every channel enters the same data plane and follows the same roles, policies, and approvals.
Enterprise chat, tables, event viewer, metrics by flow, approval-route editor, and real-time ontology explorer.
Mobile terminals for executives and field teams: queries, on-the-go approvals, voice, and file attachments.
Request handling, portfolio or balance queries, and approval responses bound to the user’s corporate identity.
Two-way voice channel plus automatic outbound calls when an approver does not respond within the configured SLA.
Executive briefings (“how did the company wake up today?”) and quick queries under profile permissions.
Direct integration with ERPs, CRMs, and custom portals over HTTP/JSONL contracts with full traceability.
Plane separation
Teammates talking over Web, WhatsApp, or phone enter through the operations plane; administrators configuring policies, approval routes, database connections, or the secrets Vault work in an isolated control plane.
The environment where technology and security teams govern the platform away from conversational traffic.
The single entry point for employees, customers, and internal enterprise systems.
The core that verifies every rule before any database or enterprise system is touched.
The reasoning layer that interprets natural language and executes authorized steps.
EVA · Expert Virtual Agent
We separate the intelligence that interprets and drafts from the authority that decides what may be queried, what may be modified, and who must sign off.
Understands requests in natural language, cross-references authorized enterprise data, prepares executive summaries, and executes reasoning steps inside each workflow.
It never sees Vault keys, cannot bypass an approval chain, cannot modify policies, and never writes to a database outside an explicitly authorized step.
Direct queries and deterministic rules run without invoking a model when none is needed. When EVA participates, you can run local models on your servers or whichever endpoints your company approves.
Context & traceability
So AI understands your operation and every decision is demonstrable to leadership and auditors, Nous keeps three live layers in the same installation.
Customers, invoices, suppliers, orders, employees, controls, and risks linked together and mapped to your real tables and systems.
14+ operational workflows ready to run with validations, amount thresholds, L1/L2 signatures, and automatic voice:SIP calls when an SLA expires.
Every query and every action is recorded with originating channel, requester, data accessed, policy applied, approvers, duration, and outcome.
Multi-site & enterprise groups
Built for enterprise groups, banks, and institutions running independent Nous installations across multiple plants, countries, or subsidiaries.
Each subsidiary keeps its databases, its secrets Vault, and its daily operations inside its own perimeter without relying on a central cloud.
Authorized sites exchange catalogs, workflow definitions, and operational knowledge through cryptographically signed and verified packages.
No package received from another site overwrites local rules or workflows automatically—every import goes through verification and approval.
