For IT and security
What your IT team will ask
- Where is the data processed?
- It depends on the deployment option and the model. Lattice runs in its cloud, on a VPS or VPC of your organization, or on your own server, which we set up with you as a project. With Na'at and Séeb on your infrastructure or in the Mexico region of our cloud, information is processed in Mexico; with other models, it goes out to the provider shown in the catalog. We tell you in writing, model by model.
- Who has access?
- The people your organization authorizes. You split teams by area, assign roles and they sign in with Google Workspace, Microsoft Entra ID or any OIDC provider.
- What gets logged?
- The organization's audit log is append-only, exports to CSV, and your organization sets how long it is kept, with a 30-day minimum. Usage is visible by agent, key and model.
- What requires approval?
- Every message the agent sends is shown in full and only goes out if a person approves it. Risky commands and, for cloud agents, pages that look like payment pages are stopped by automatic detection, which may not catch every case. For everything else, such as filling in and submitting a form or writing from a portal or webmail, your organization can set a policy by organization, team or agent: what is allowed, what asks and what is prohibited. If nobody answers an approval, the action does not run.
- What about the models?
- You choose which ones each team can use and you see the provider of each one. Sintérgica does not use your data to train models without an explicit contract.
- What runs the agents?
- Azca, Sintérgica's agent engine. It comes inside Kaná and runs in every deployment option: on the person's computer, in one container per agent in the Lattice cloud, or on your server. It is the piece that calls the model, uses the tools and applies your organization's policy before each action.