What can KYDE do for you?

One zero trust layer.
Two ways to use it.

Build workers for your business, or use Kyde Zero Trust to secure, govern, evaluate and prove the AI you already run. The same zero trust layer powers every Kyde worker, and runs on its own underneath AI somebody else built.

Automate the work your company already does.

Kyde finds the work worth automating, builds the worker and runs it on Kyde Zero Trust. Six processes people do today in regulated companies, each with a step nobody wrote down.

01
Banking & finance

Credit file pre-check

DORA · BaFin · EU AI Act
How it works today
An analyst opens the file, pulls three years of statements, reconciles the covenant list against the current facility and writes a one-page summary. Forty minutes when the file is clean. Half a day when it is not.
What the worker does
Pulls the statements, reconciles the covenants, drafts the summary, and names the figures it could not source instead of estimating them.
What stays with a person
The credit decision. The committee reads a file that is complete and sourced, and spends its time on the judgement rather than on assembling the evidence for it.
What KYDE records
Which documents were read, where each figure came from, which model drafted the summary, and what the analyst changed before it went in.
  • ·DORA, operational resilience and ICT third-party risk
  • ·EU AI Act, Annex III point 5(b), creditworthiness. High-risk obligations apply from 2 December 2027
  • ·KI-MIG, the German AI market surveillance act in force since 29 July 2026: BaFin supervises AI used in regulated financial activity
  • ·GDPR Article 22, decisions based solely on automated processing
02
Insurance

First assessment of a motor claim

BaFin · Solvency II · GDPR
How it works today
A handler reads the report, checks the policy for exclusions, sets a reserve and decides whether to instruct an assessor. The exclusions are in a PDF from 2021 that four people know how to read.
What the worker does
Reads the report, pulls the policy, proposes a reserve and cites the clause it relied on. Instructs an assessor when the estimate is over the threshold.
What stays with a person
Every rejection. A handler makes that call with the whole file already in front of them, which is where their experience is worth most.
What KYDE records
The clause the reserve was based on, the estimate, the threshold that applied that day, and whether a person changed the number.
  • ·Solvency II, system of governance and risk management
  • ·KI-MIG, in force since 29 July 2026: BaFin supervises AI used in regulated financial activity, insurers included
  • ·GDPR Article 22, decisions based solely on automated processing
  • ·EU AI Act: motor claims are not Annex III high-risk. Point 5(c) covers life and health insurance only. The Article 50 transparency duties still apply
03
Healthcare

Reimbursement claim preparation

GDPR Article 9 · NIS-2
How it works today
A coder reads the discharge letter, assigns ICD-10 codes, checks them against the payer rules and submits. Rejected claims come back weeks later and get reworked by whoever is free.
What the worker does
Drafts the coding from the letter, checks it against the payer rules, and holds anything the letter does not clearly support.
What stays with a person
The diagnosis, always. The worker codes what a clinician wrote, so clinical time goes to patients rather than to payer rules.
What KYDE records
Which letter produced which code, which payer rule applied, and what was held back for a human to look at.
  • ·GDPR Article 9, special category health data
  • ·NIS-2, transposed in Germany by the NIS2UmsuCG since 6 December 2025: health providers are essential entities under the BSIG
  • ·Coding for reimbursement is an administrative task with no medical purpose, so the Medical Device Regulation does not apply to it
  • ·EU AI Act, Article 50 transparency duties in force since 2 August 2026
04
Manufacturing

Supplier release

NIS-2 · EU AI Act
How it works today
A buyer checks the inspection report against the spec, looks up whether this supplier has had deviations before, and releases the batch or holds it. The deviation history lives in one person's spreadsheet.
What the worker does
Matches the report to the spec, pulls the supplier history, and releases within the tolerance band. Holds anything outside it and says which measurement was out.
What stays with a person
Releasing a batch that fell outside tolerance. Your quality lead makes that call with the measurements and the supplier's full history already assembled.
What KYDE records
The measurements, the tolerance in force, the supplier history it read, and every release that went through outside the band.
  • ·NIS-2, supply chain security under section 30 of the BSIG, in force in Germany since 6 December 2025
  • ·EU AI Act: a release decision on its own is not high-risk. AI built into a regulated product falls under Annex I, with obligations from 2 August 2028
  • ·GDPR, where supplier records name individuals
05
Public sector

Permit completeness check

VwVfG · GDPR · OZG
How it works today
A caseworker checks the application against the checklist, writes to the applicant for what is missing, and puts the file back in the queue. Most of the queue is waiting on one document.
What the worker does
Runs the checklist, drafts the request for the missing documents, and puts the file in front of the caseworker complete.
What stays with a person
The decision. The file reaches the official complete, so the discretion is the only part left to exercise.
What KYDE records
What was checked, what was requested, when the applicant answered, and how long the file waited on each side.
  • ·VwVfG, the German administrative procedure act, section 35a: a fully automated administrative act is only allowed where a statute permits it, and never where the authority has discretion or an assessment margin
  • ·VwVfG section 40, the limits of administrative discretion
  • ·GDPR Article 22, decisions based solely on automated processing
  • ·OZG, the German online access act
06
Energy

Operational reporting

NIS-2 · KRITIS
How it works today
After an imbalance, an operator reconstructs what happened from four systems and writes the report. The reconstruction takes longer than the event did.
What the worker does
Assembles the timeline from the recorded actions, drafts the report, and marks the intervals where the data does not agree with itself.
What stays with a person
The dispatch itself. Kyde stays out of the control loop entirely. Your operators keep operating, and get the reconstruction handed to them instead of building it.
What KYDE records
Every action in the window, in order, hash-chained, exported as a dated document the regulator recomputes without us.
  • ·NIS-2, transposed in Germany by the NIS2UmsuCG, in force since 6 December 2025 with no transition period
  • ·Section 30 of the BSIG, risk management measures, and the 24 hour reporting duty
  • ·KRITIS, operator obligations
  • ·EU AI Act: reporting sits outside the control loop, so it is not a safety component under Annex III point 2
Four people have to agree
Operations

What do I get back?

The process you own, written down properly for the first time, and then the routine part of it running on its own. You keep the exceptions, which is the part you were doing the thinking on anyway.

CIO & CTO

What am I taking on?

One layer, on-premise or in your private cloud, in front of whatever models you already use. No agent framework to standardize on and no vendor to be locked into. The workers, the processes and the record are yours.

Compliance & legal

Can I evidence this?

Every action is hash-chained at the boundary and exported as a dated document your auditor recomputes offline. Where the EU AI Act assigns deployer obligations, they stay with you. This is the apparatus for meeting them.

Works council & data protection

What happens to the people?

Your works council and data protection officer settle the legal basis. Sessions are scoped and announced, personal data is removed on your systems before storage, and the people recorded can review their own sessions.

Every Kyde worker runs on Kyde Zero Trust.

Explore Kyde Zero Trust →

Find out which of yours are on this list.

Three days to two weeks, one process area, one dated readout: what is buildable today, what is waiting and on what, and what stays with a person.

How it works →