SynOI

Solutions · Managed Service Providers

Your AI acts on
client systems.
Can you prove every routed action was authorized?

MSPs use AI to manage infrastructure at scale. But when your AI agent patches the wrong server, changes a firewall rule, or touches sensitive data, you own the outcome. SynOI wraps every action routed through a SynOI gateway in a cryptographically signed Decision Receipt proving who authorized what, when, and why.

Get early access →Talk to us

Every

gateway-routed action receipted

3 Classes

A (auto), B (supervised), C (human approval / HITL)

<2ms

governance overhead (measured internally)

The reality

Without proof, you have no defense.

What happens

Your AI agent is patching servers for a healthcare client. It misreads a hostname, patches the wrong machine, and takes down critical systems.

The call:

“Your system deleted our backups. Who authorized this? Where’s your audit trail?”

The problem

  • ✗No audit trail. "The AI did it" is not a defense.
  • ✗No client approval. Can't prove the action was authorized.
  • ✗Liability falls on you. Client dispute. Potential SLA breach.
  • ✗Regulators (HIPAA, SOC2, PCI) want proof. Logs aren't enough.

From the user side

You hired an MSP. You have a right to proof.

Your MSP's AI manages your critical infrastructure. When something goes wrong, you deserve to know:

  • →Who authorized this action?
  • →Was it human or auto-approved?
  • →Can you prove it was authorized?
  • →If something breaks, who’s liable?

SynOI Decision Receipts answer all of this. Every action comes with a signed, independently verifiable proof. You can hold your MSP accountable.

What to ask your MSP

"Do you use SynOI for AI governance?"

If yes: you get signed Decision Receipts for every action.

"Can I approve Class C actions before they execute?"

If yes: your MSP won't delete critical systems without your go-ahead.

"Who can I contact if something goes wrong?"

If vague: demand a governance escalation path. SynOI enables it.

The solution

Give every client signed proof.

Every AI action flows through SynOI Sentinel. We classify it (routine, supervised, or high-risk), issue a cryptographically signed Decision Receipt, and enforce HITL approval for Class C actions.

The receipt is independently verifiable. Your client can check it with any Ed25519 library: no trust required, no black box.

✓ Signed by SynOI infrastructure

✓ Downloadable, auditor-ready

✓ Includes: who, what, when, why, authorization level

receipt_id: "rec_abc123def456"
client_id: "acme_healthcare"
action: "patch_server"
target: "prod-db-04.acme.com"
class: "B" (supervised)
authorized_by: "acme_admin@acme.com"
signed_at: 1746351840000
signature: "sig_edxxxxxxxxxxxxx"

Risk classification

Different actions, different gates.

AAuto-Approved

Routine monitoring and reads. No risk, no approval needed.

  • → Collect system logs
  • → Check server health
  • → Query metrics
BSupervised

Configuration changes. Logged and receipted, no blocking.

  • → Install patches
  • → Update firewall rules
  • → Rotate credentials
CHuman Approval

High-risk actions. Client approval required before execution.

  • → Delete data
  • → Admin role changes
  • → Backup modifications

Your MSP control: Define which actions are Class A, B, or C per client. SynOI enforces it automatically. High-risk actions get a HITL gate: clients see what their AI is about to do and approve or deny before it happens.

Compliance

Pre-built for regulated industries.

Policy Packs are on the roadmap (see /solutions/compliance for shipping windows); the shapes below are the design target.

HIPAA Policy Pack

Roadmap

Healthcare

Designed to map to HIPAA technical safeguards for healthcare MSP clients: gate access to protected health information (PHI), log data operations, flag missing encryption.

  • ✓ PHI access control
  • ✓ Encryption enforcement
  • ✓ Audit trail for every governed action

SOC2 Policy Pack

Roadmap

Tech & SaaS

SOC2 Type II requires change control and access management. Decision receipts are designed to serve as your change log once the pack ships: every action is logged and verifiable.

  • ✓ Change control gate
  • ✓ Access audit trail
  • ✓ Incident response proof

PCI-DSS Policy Pack

Roadmap

Financial & Retail

PCI-DSS 3.2.1 requires documented change control. Receipts are designed to become your compliance proof once the pack ships: who changed what, when, and why.

  • ✓ Card data protection
  • ✓ Change documentation
  • ✓ Audit readiness

Implementation

One environment variable.

SynOI wraps any AI tool: Flamingo OpenFrame, ConnectWise, Datto, or your custom agents. Change one variable and governance is live.

OPENAI_API_BASE=https://gateway.synoi.systems/v1

Your AI client library (Python, Node.js, Go) continues working unchanged. All requests route through SynOI Sentinel for governance before reaching your provider. Client SDK, no infrastructure changes.

The ecosystem

Everyone wins with SynOI.

For MSP Providers

  • ✓Liability protection: Decision Receipts prove you authorized actions
  • ✓Competitive advantage: offer governance as a trust differentiator
  • ✓Win more clients: they demand this. Be ready.
  • ✓Compliance proof: HIPAA, SOC2, PCI-DSS audits are easier

For MSP Users

  • ✓Accountability: hold your MSP responsible with signed proof
  • ✓Control: approve high-risk actions before they execute
  • ✓Compliance confidence: regulators see the audit trail
  • ✓Peace of mind: verify every AI action on your infrastructure

The flywheel: MSP Providers implement SynOI to win clients. MSP Users demand it for accountability. MSP Providers adopt faster to stay competitive. Everyone gets better governance.

Ready?

The conversation starts now.

For MSP Providers

Your clients will start asking for governance proof. Be ready with SynOI. Integrate in hours, win in weeks.

Request early access →

For MSP Users

Ask your MSP: “Do you use SynOI?” Demand accountability. Hold them to a higher standard.

Learn more