Every dollar you give away, decided by the right person and proven.
AEGIS is the delegation of authority platform for integrated resorts. It checks every comp, marker, commission and offer against your authority matrix, routes it to whoever actually holds the limit, and writes the decision to a tamper-evident record. Comps are where it starts. The same engine governs credit, premium play, marketing and AI agents.
Discretionary value is the largest lever on the floor, and the least governed.
An integrated resort gives value away all day: meals, suites, free play, loss rebates, markers, junket commissions, convention blocks, campaign offers. That generosity is the reinvestment engine that keeps players loyal. It also moves cash equivalent value through hundreds of hands, around the clock, governed by a spreadsheet people are meant to remember.
“More than half of occupational frauds occur due to lack of internal controls or an override of existing internal controls.” ACFE, 2024
Every request takes the same four steps, in the same order.
A host's tablet, a cage terminal, a campaign or an AI agent: whoever asks, AEGIS answers the same way, and nobody can skip a step.
Patron gate
Exclusion, do not comp, responsible gaming and sanctions holds run first. No level of authority overrides them.
blocked → refused, with the reasonThe matrix
The request is matched to the rule for this category, amount and person, in the matrix version in force right now.
within the limit → approvedThe org chart
Above the limit, AEGIS walks the live reporting line, delegations and duty cover to the person whose authority covers it.
above the limit → routed, with a counter offerThe record
The decision, its reasons, the matrix version and the people involved are written to a hash-chained record and signed.
every outcome → recorded
It works the way the floor already works, only faster.
Within authority, instant approval
An F&B manager comps a dinner. If it is inside her authority, with the evidence the rules ask for, it approves on the spot.
Above the limit, the right person
The request climbs the reporting line to someone whose authority covers it, and waits in that person's queue in the Team app.
A yes the host can give now
AEGIS works out the largest amount the host can approve and offers it in one tap, in words the host can say aloud.
No signal, still hospitable
Where the property switches it on, a host's phone grants comps from a small allowance issued beforehand, each grant reviewed afterwards.
Planned before the guest lands.
A host writes a premium guest's stay once, on the phone. Every line goes through the matrix before arrival, the approver signs on their own phone, and the host sees the suite authorized. Nothing waits at the desk.
One engine for every kind of value you give away.
A $320 dinner, a $50,000 marker, a junket commission, a 120 night convention block and an AI agent's $150 offer all take the same path: the patron gate first, then the matrix, then the org chart, then the record.
Comps
Every complimentary across every outlet, host offers, trips, the counter offer at the podium, and review after issue.
Credit and cage
Front money per currency, credit facilities with a limit, term and review date, marker ageing and collection, write offs signed by two people.
Premium play
Junket agreements with commission settled by formula and decided by the matrix, group blocks valued like any comp, outside principals cleared by due diligence.
Marketing offers
Every campaign offer a real comp, sized from recorded play, capped per guest, and measured against a holdout.
AI agents
Agents with their own seat and limit, sealed versions, a shadow run before going live, a kill switch and their own key.
Each domain inherits the same evidence and the same controls. Start with comps, and add the rest on the platform you already run.
One decision, recorded once, useful to everyone.
Finance
Close on the gaming day with sealed snapshots, balanced journals, reconciliation and a general ledger export. Outlet and Player P&L. Test a matrix change against the decisions already made before you publish it.
Compliance and investigations
A responsible gaming gate on every path that offers value. Sanctions screening against the lists your officers load, with a hold until a person rules. Cases opened by detectors, with clocks, an evidence vault and a referral workflow.
Audit and the board
Records already linked and tamper-evident, so audit asks why, not what. A quarterly board pack with every override by name, break glass, escalation waits and every rule change.
Operations
No hunting for a signature while a guest waits. Routine comps resolve on the spot, escalations route themselves, and a host always has a yes to offer.
Marketing and player development
Campaign offers sized in bands of average daily theo, versioned segments, a cap on how often a guest hears from you, and a holdout or test cells to show what a campaign achieved.
Regulators
A read only portal over the record, scoped by you. One button recomputes the chain and checks it against a second ledger and outside timestamps. Every export is itself recorded.
AI agents, governed exactly like your people.
An agent in AEGIS has a seat, a delegated limit and a sponsor. Inside its limit it acts in seconds. Beyond it, the request lands in a person's queue like anyone else's. It never gets an override and can never hold a privileged right.
Sealed versions
What an agent may do is sealed when it is promoted. A change is a new version, on the record.
Shadow before live
Run a draft through the real rules without issuing anything, and see what it would have done.
A kill switch
A sponsor halts an active agent at once, and can release it again.
Its own key, every call
Every tool connection presents the agent's own key, checked on every call. A stopped agent is refused, on the record.
Your authority matrix, as governed data.
Two people for every sensitive change
Publishing the matrix, granting privileged rights, delegations, loyalty rates, jurisdiction values and erasing a guest each need one person to ask and a different person to approve. The database enforces it as well as the application, and both names are on the record.
Start from your spreadsheet
Upload the matrix you have today and get a draft with every problem listed by row and column. Nothing goes live until a second person approves it. Export writes the same format.
Versioned, so it can be proven
Every decision records the exact matrix version and org snapshot in force. Re-run a past decision, reconstruct the organisation on any date, and test a change side by side or back test it against the decisions already made before it is published.
Even someone with full access to the database cannot rewrite history undetected.
Audit integrity is layered four times, so the record holds up even against someone with full system access.
Hash-chained internal record
Every event is chained inside the operational database. Any alteration breaks the chain and shows.
Anchored into immudb
Events are anchored into immudb, an open-source cryptographically verifiable store kept apart from the operational database, so rewriting one is caught by the other.
Signed by outside authorities
At least hourly, the head of the chain is time-stamped by independent public authorities (DigiCert and Sectigo). Only a 32-byte fingerprint leaves; the signed answers are kept and can be checked with standard tools. Even someone who controls both our database and immudb cannot change anything older than the latest stamp without a signed witness contradicting them.
Signed by the platform
Every audit event, every decision included, is signed with a key that lives outside the database, so someone who can only write to the database cannot invent a decision and have it pass as ours. The key sits on our server rather than in a hardware module, and signing follows within about half a minute. Any decision can be exported as a signed receipt and checked offline with a short open script.
A record a regulator can check without trusting you.
Every sealed decision carries its ledger anchor and the exact matrix version in force when it was made. A regulator follows any decision step by step, re-runs it, and takes away a signed receipt.
Built like infrastructure, because it is.
Two engines, deliberately separate: a decision engine that answers authority checks in milliseconds for a terminal on the floor, and a workflow engine that runs escalations, reminders and holds without blocking real-time responses.
Resilient by design
Containerised services running at two sites in different countries. One site writes, which keeps the audit chain unbroken; the other follows continuously, serves reads and what-if simulations, and takes over automatically. Failover has been tested on our production system, planned and unplanned, with no data lost in those tests.
Open foundations, multitenant
Built on open-source components (PostgreSQL, Redis, a Kafka-compatible event stream and immudb), so there is no proprietary-database lock-in. Adding a second property is a configuration change, not a new implementation project. Delivered as containers.
Real-time event stream
Every decision is published the moment it is recorded to a Kafka-compatible event stream, so analytics and reporting tools can subscribe to it without slowing the approval path.
Built for the age of AI agents
Every agent call is a governed transaction: its own key, its own limit, logged and timestamped. Agents from any vendor connect through the Model Context Protocol, with no side doors.
The AEGIS CLI
Query the authority engine, check authority, submit and approve comps, inspect matrix versions, and pull reports from the terminal. Infrastructure teams automate governance like everything else.
Tuned to your property
Exclusion checks run before any incentive reaches a patron, and responsible-gaming rules are set per jurisdiction and applied to gambling-inducement comp types, so a gesture of hospitality never becomes an inducement.
The combination does not exist anywhere else.
The problem sits in a blind spot between three industries. Corporate DOA tools record who should have authority for auditors, but cannot answer a terminal in milliseconds. Approval-workflow products understand invoices, not patrons or theoretical win. Casino management systems know the floor, but only their slice of it. Nobody built the thing in the middle.
One engine for every dollar given away
Comps, credit, commissions, blocks, campaigns and agents share one set of rules, one escalation path and one record. A point solution governs one slice; AEGIS governs the whole.
Gaming-literate
Understands theoretical win, patron tiers, exclusion lists, and gaming-specific comp types. No incumbent does.
Org-aware at runtime
Resolves authority against a live org chart across every department and property, not a static file.
AI agents as governed principals
Every agent operates under the same matrix as a human employee, with its own delegated limits and full audit trail.
Tamper-evident accountability
Every decision is hash-chained, anchored in a second ledger, covered by timestamps from independent outside authorities, and signed by the platform. A record cannot be altered after the fact without the alteration showing.
Start with comps, from the spreadsheet you already have.
Load your matrix
Upload today's authority spreadsheet. AEGIS turns it into a draft and lists every problem by row and column.
Test it
Simulate requests against the draft, side by side with what you run now, before anything is live.
Publish with a second signature
A second person approves, and the first live decision is made against a matrix version you can prove.
Four words you will hear in a demo.
- Delegation of authority
- The written rules for who may approve what, up to which amount. AEGIS turns them into a service every system asks first.
- Theo
- Theoretical win: what the house expects to win from a guest's play over time. The basis for how much value a guest has earned.
- Average daily theo
- A guest's theo per day played. AEGIS sizes campaign offers in bands of it.
- Tamper-evident
- A record in which any change after the fact shows. Each entry carries the fingerprint of the one before.
What prospects ask first.
Does AEGIS replace our casino management system?
It works beside it. Your casino management system stays the home of patron identity, tier, ratings and worth. AEGIS is the system of record for who may give value away, the decision, and the audit trail.
Who changes the rules?
Finance owns the matrix as data, so a change needs no software release. Every change is tested by simulation and back test, requested by one person and approved by another, and published as a new version.
What happens at 3am?
AEGIS follows the live org chart, delegations and duty cover to whoever holds the authority at that hour. The request waits in their Team app queue with its reasons attached.
How does a regulator check the record?
Through a read only portal you scope. One button recomputes the chain and checks it against a second ledger and outside timestamps, and any decision exports as a signed receipt they can verify themselves.
How do we trust an AI agent with comps?
The same way you trust a new host. It gets a seat, a limit and a sponsor, it is tested in a shadow run first, every call is checked against its own key, and its sponsor can stop it at once.
Where does it run?
AEGIS is delivered as containers on open foundations (PostgreSQL, Redis, a Kafka-compatible event stream and immudb). Our production runs at two sites in different countries, with automatic failover tested both planned and unplanned.
The gap is real. The platform exists. Be the first property to run it.
Comps came first. The same engine now decides credit, markers, junket commissions, group blocks and offers, under the same rules and on the same record.
Beta clients & co-innovation partners
For integrated-resort operators who want to shape the roadmap, secure preferential commercial terms, and be first to market with a capability their competitors do not have.
Venture investment
We are raising to accelerate product development, expand the engineering team, and establish the first enterprise deployments. If you back infrastructure plays at the intersection of AI, compliance, and gaming, we would like to talk.