Agent Product Page · Integration & Orchestration Layer
NEXUS — The Integration & Orchestration Layer
NO MORE
MANUAL HAND-OFFS.
NEXUS is the connective tissue between every revenue system you run, and the event architecture the other agents work through. CRM, marketing automation, advertising, email, voice, calendar, payments, analytics, customer support, enrichment and messaging all publish events onto one bus — and any event can trigger an AI workflow, governed by permissions, approvals and a full audit trail. Nothing gets ripped out and nothing waits in someone's inbox for two days.
NEXUS value proposition
NEXUS moves records, tasks and notifications between the tools you already pay for, so work never waits in an inbox — with every action versioned and logged.
PROBLEMS IT SOLVES
The same data typed into three systems
Hand-offs that stall for days between teams
SLAs missed because nobody noticed
Records disagreeing across CRM, billing and calendar
Automations nobody can audit or explain
XIILIO AGENT INFRASTRUCTURE
NEXUS is the layer every other agent runs on. NOVA, ARIA, HERALD, SENTINEL and CORTEX do not each hold their own private copy of your data — they read and write through NEXUS, so one record, one identity and one audit trail run across the whole stack. Availability of any given system depends on that vendor's API and your plan with them.
CRM AND PIPELINE
- HubSpot
- Salesforce
- Pipedrive
The system of record. NEXUS reads pipeline state and writes back contacts, activity, stage changes and agent actions, with a defined authoritative source per field.
COMMUNICATION
- Slack
- Microsoft Teams
- Telephony and SMS providers
Where humans get told and asked. Notifications, approvals and escalations route to the person who actually needs them, not to everyone.
BILLING AND COMMERCE
- Stripe
- Shopify
- Invoicing tools
Closed revenue, subscriptions, orders and payment events flow back into the pipeline, so CORTEX and SENTINEL optimise against money rather than form fills.
ADVERTISING AND ANALYTICS
- Google Ads
- Meta
- GA4
- Search Console
Spend and performance in, conversion and revenue events out — the loop SENTINEL needs to allocate budget on real outcomes.
MARKETING AUTOMATION
- Klaviyo
- Mailchimp
Lists, segments, suppression and campaign engagement stay in step with CRM state, so no one is emailed after they opt out or convert.
CUSTOMER SUPPORT
- Helpdesk and ticketing platforms
- Shared inboxes
- Live chat
Tickets, escalations and sentiment become events the agents can act on, so a support problem can pause outreach or raise a retention task.
CALENDARS AND SCHEDULING
- Google Calendar
- Microsoft 365
- Booking systems
Real availability, held slots and cancellations, so ARIA books into the diary that actually exists.
DATA PROVIDERS
- Licensed firmographic and contact data
- Enrichment and verification providers
Licensed and public sources only, feeding NOVA's account intelligence. No scraped private data and no bypassing provider terms.
ANYTHING ELSE
- Webhooks
- REST APIs
- Scheduled file and database syncs
Where no native connector exists, NEXUS connects over the vendor's documented API or a webhook contract you control.
WHAT THE BACKBONE GUARANTEES
- One authoritative source per field
- Conflicts are resolved by a rule you set, not by whichever system wrote last.
- Identity resolution
- The same person or company across CRM, billing, ads and email is matched to one record instead of five.
- Idempotent writes
- A retried sync does not create duplicate contacts, tasks or deals.
- Backpressure and rate limits
- Vendor API limits are respected and queued through, rather than failing a sync mid-run.
- Replayable failures
- A failed sync is queued, surfaced and re-runnable once the cause is fixed. Nothing is silently dropped.
- Full audit trail
- Every read, write, mapping change and agent action is logged with timestamp, actor and before/after values.
- Scoped permissions
- Each connection uses least-privilege credentials, revocable independently, with no shared master key across systems.
- Your data stays yours
- Connections can be disconnected at any time and the systems keep working — NEXUS coordinates your tools, it does not hold them hostage.
CONNECTING A SYSTEM
- 01
MAP
We list the systems you run, what each is authoritative for, and where records currently disagree.
- 02
CONNECT
Authorise each system with scoped credentials. Nothing is ripped out or migrated.
- 03
RECONCILE
Duplicate and conflicting records are surfaced for a decision before any agent writes to them.
- 04
GOVERN
Set write permissions per system: read-only, write with approval, or write automatically.
- 05
RUN
Agents operate through the backbone, every action logged, with a dry-run period before writes go live.
Connector availability depends on each vendor's API and your own plan with them. Where a native connector is not available, NEXUS uses documented APIs or webhooks — we will tell you which before you buy, not after.
UNIFIED EVENT ARCHITECTURE
Every connected system publishes its events onto one shared bus. Any event can trigger an AI workflow, and any workflow can call any agent. That is what makes the agents a system rather than six separate tools — a lead created in your CRM, a call answered by ARIA, a card charged in Stripe and a conversion fired by an ad platform all arrive in the same normalised shape, with the same identity resolution, permissions and audit trail behind them.
EVENTS ON THE BUS
CRM
- Record created
- Field or owner changed
- Stage moved
- Deal won, lost or stalled
Marketing automation
- List or segment change
- Campaign engagement
- Unsubscribe or suppression
Advertising
- Conversion fired
- Spend threshold crossed
- Campaign anomaly detected
- Reply received
- Bounce or complaint
- Sequence completed or stopped
Voice
- Inbound call answered
- Call ended with transcript and summary
- Escalation to a human requested
Calendar
- Meeting booked
- Rescheduled or cancelled
- No-show recorded
Payments
- Payment succeeded or failed
- Subscription started, upgraded or cancelled
- Refund issued
Analytics
- High-intent session on a key page
- Goal completion
- Attribution model updated
Customer support
- Ticket opened or escalated
- Negative sentiment detected
- SLA breach
Data enrichment
- Account record enriched
- Funding, hiring or technology signal
- Contact verification result
Communication platforms
- Slack or Teams approval answered
- SMS or WhatsApp reply
- Notification acknowledged
EVENT-TRIGGERED WORKFLOWS
NEW LEAD CREATED
- 01NOVA enriches the account from licensed and public sources
- 02CORTEX scores fit, intent and expected value
- 03HERALD starts the permitted outreach sequence
A scored, enriched, owned lead with the first contact already in motion instead of sitting in a queue.
Outreach sends automatically only if the score clears your threshold and consent checks pass; otherwise it waits for the owner.
INBOUND CALL
- 01ARIA answers and qualifies against your business knowledge
- 02NEXUS writes the contact, transcript, summary and intent to CRM
- 03The meeting is booked into real calendar availability
A qualified conversation captured, logged and diarised without anyone rekeying it afterwards.
ARIA books only inside the availability rules you set; anything outside them routes to a human.
DEAL STALLED
- 01CORTEX detects the slippage against normal cycle behaviour
- 02HERALD drafts and queues a follow-up in your brand voice
- 03The owner is notified in Slack or Teams with the evidence
Risk surfaced while it is still recoverable, with a specific next action attached.
Follow-ups on named deals require owner approval by default.
AD CONVERSION
- 01The conversion lands in CRM with source and campaign attached
- 02Closed revenue is attributed back to the campaign
- 03SENTINEL re-optimises allocation against qualified pipeline and profit
Budget decisions made on money rather than clicks, with the evidence trail intact.
Reallocation follows the permission mode you set: recommend, approve, or auto-execute within caps.
CHURN SIGNAL
- 01CORTEX raises an alert with the underlying evidence
- 02NEXUS opens a retention workflow
- 03A task is assigned to the account owner with a due date and SLA
An at-risk account gets an owner and a deadline the day the signal appears.
Retention offers, discounts and credits always require human approval.
PLATFORM CONTROLS
- OAuth and credentials
- Each system is authorised with scoped OAuth or least-privilege API credentials, stored encrypted, rotatable and revocable one connection at a time.
- Permissions
- Per system and per object: read-only, write with approval, or write automatically. Defaults are read-only until you widen them.
- Webhooks
- Inbound webhooks are signature-verified and de-duplicated; outbound webhooks let your own systems subscribe to Xiilio events.
- Retry logic
- Failed calls retry with exponential backoff and jitter, respect vendor rate limits, and stop at a defined ceiling rather than hammering an API.
- Error handling
- Anything that cannot be delivered goes to a dead-letter queue, is surfaced in the command centre, and is replayable once the cause is fixed. Nothing is silently dropped.
- Audit logs
- Every event, workflow run, agent action and configuration change is logged with timestamp, actor, inputs and before/after values, and is exportable.
- Role-based access
- Who can view, edit, approve, execute or connect is set by role. Approval rights are separate from build rights.
- Data mapping
- Field-level mapping between systems with type coercion, transformation rules and one authoritative source per field, changeable without engineering work.
- Event history
- A searchable timeline of every event and every workflow it triggered, filterable by system, record, agent or outcome.
- Workflow versioning
- Workflows are versioned, diffable and roll-backable. Each run records the version it executed, so past behaviour stays explainable.
- Human approval
- Any step can be marked approval-required, with a named approver, a timeout and an escalation path if nobody responds.
Event coverage depends on what each vendor's API and webhook surface exposes and on the permissions you grant. Workflows described here are configuration examples, not guaranteed outcomes.
INPUTS, LOGIC, OUTPUTS
Inputs
- CRM record and stage-change events
- Booking, form and webhook events
- Payment and invoice events
- Your approved workflow definitions and SLA rules
- Ownership and routing rules
Processing Logic
- Receive a trigger event and load the approved workflow version
- Resolve which system is authoritative for each field
- Validate the record is complete enough to progress
- Execute the scoped reads and writes in order
- Create and assign tasks with owners and due dates
- Track SLAs and escalate when they slip
Outputs
- Synced records across connected systems
- Assigned tasks with owners and deadlines
- Targeted notifications in Slack, Teams or email
- SLA breach escalations
- A complete run record with every API call and status
NEXUS specification
Connects To
- HubSpot, Salesforce, Pipedrive
- Google Workspace / Microsoft 365 (mail, calendar, drive)
- Slack and Microsoft Teams
- Stripe, Shopify and invoicing tools
- Google, Meta and LinkedIn ad accounts
- Klaviyo and Mailchimp
- Telephony and SMS providers
- Licensed data and enrichment providers
- Webhooks and REST APIs for anything else
- Every other Xiilio agent
What Triggers It
- A CRM record created, updated or moved a stage
- A booking made or cancelled
- A form submission or inbound webhook
- A payment or invoice event
- A schedule, or an SLA breach threshold
Decisions It Makes
- Which system is authoritative when two records disagree
- Who owns the next task, and by when
- Whether a record is complete enough to progress a stage
- Which notifications matter and which are noise
- When to pause and ask a human instead of acting
Acts Autonomously On
- Sync and update records within scoped fields
- Create, assign and chase tasks
- Route notifications
- Progress stages where rules are satisfied
- Escalate SLA breaches
GUARDRAILS, IN WRITING
An autonomous agent is only useful if its limits are explicit. Here is what NEXUS will never do, and where a human always signs off.
What It Cannot Do
- Delete customer records without an explicit approved rule
- Move money, issue refunds or change billing without human approval
- Write to a system you have not connected and scoped
- Sign contracts, agree discounts or commit your business to anything
- Invent facts, case outcomes, guarantees or performance claims
- Give legal, medical or regulated financial advice
- Act outside the systems and data scopes you explicitly grant it
Human Approval Points
- Every automation is specified and approved before it goes live
- Destructive actions (delete, merge, bulk update) require human approval
- Billing and payment actions always require human approval
- Human-in-the-loop can be switched on for any individual workflow
WHEN THINGS GO WRONG
Failure Handling
- Every run is idempotent — a retry can never duplicate a record or a send
- Transient failures retry with backoff; persistent failures stop the run rather than guess
- A failed step never silently continues — the workflow halts in a known state
- Failures raise an alert to the owning human with the run ID and the exact failing step
- Errors, retries and halts are written to the same audit trail as successful actions
- Partial failures roll the run into a halted state with the completed steps recorded, so nothing is applied twice on retry
Escalation To Humans
- Destructive actions — delete, merge, bulk update — always require human approval
- Any billing or payment action requires human approval
- Conflicting records between systems are escalated, not overwritten
- Human-in-the-loop can be switched on for any individual workflow
EXAMPLE OUTPUT
Workflow run record — a representative example of what NEXUS writes back into your systems.
workflow : 'Booking → prep → follow-up' v7
trigger : booking.created · ARIA · 10:04 UTC
crm.update : deal 48213 → stage 'Audit booked' ✓
crm.note : qualification summary attached ✓
task.create : 'Prep audit' → owner J. Consultant, due Mon 09:00 ✓
slack.notify : #revenue · transcript link ✓
guardrail : no destructive action in this workflow
duration : 1.8s · 0 errors · fully audit-loggedEXAMPLE DASHBOARD
NEXUS — automation dashboard. Every figure below is a simulated demo value, not a reported client result.
Workflow runs
4,910
last 30 days · illustrative
Success rate
99.4%
halted runs reviewed
Median run time
1.8 sec
trigger to completion
Tasks assigned
702
with owner and due date
SLA escalations
23
raised before breach
Approvals pending
5
destructive or billing actions
KPIs NEXUS IS HELD TO
Hand-off time
Minutes between trigger and completed downstream action
SLA compliance
Workflow steps completed inside the agreed window
Sync error rate
Runs halted or reconciled per thousand
Manual admin hours removed
Hours of copy-paste work eliminated per month
Audit coverage
Share of actions with a complete run record — target 100%
Technical Architecture
HOW NEXUS CONNECTS
NEXUS reads from your existing systems, applies its own governed processing, and writes results back. Nothing runs outside these lanes.
Upstream · sources
- CRM webhooks and stage changes
- Booking and form events
- Billing / payment events
- Third-party REST and webhook sources
NEXUS · processing
- Event bus + trigger matcher
- Versioned workflow engine
- Field authority resolver
- Approval gate (destructive + billing)
- SLA tracker and escalator
Downstream · destinations
- CRM (HubSpot / Salesforce / Pipedrive)
- Google Workspace / Microsoft 365
- Slack / Teams
- Stripe and invoicing
- CORTEX reporting feed
- Every workflow is versioned — a run records which version produced it
- Destructive and billing actions pass through an approval gate that cannot be bypassed by a workflow
SECURITY & AUDIT LOGS
Security
- Data encrypted in transit (TLS 1.2+) and at rest
- Least-privilege access — the agent only sees the records its job needs
- Row-level security on every customer record in the Xiilio platform
- UK/EU data handling with GDPR rights (access, export, deletion) honoured
- No customer data used to train third-party foundation models
Logged On Every Action
- Timestamp (UTC) and agent identity
- Trigger that started the run
- Every system read and write, with the record ID touched
- The decision taken and the rule or score behind it
- Human approvals, overrides and rejections
- Workflow version, every external API call made and its response status
Full detail on encryption, data handling and your GDPR rights is on the Trust & Security page.
How a merchant services provider would use NEXUS
An application arrives, and today it touches four tools and two inboxes before anyone acts on it. NEXUS takes the submission, creates the CRM record, assigns underwriting prep with an SLA, posts the checklist to the right channel, and escalates if the SLA slips. Nothing is deleted, no billing is touched, and every step is inspectable afterwards.
This scenario is written to show how NEXUS is deployed. It is not a named client, a delivered engagement or a reported result.
Live Demo
SEE NEXUS RUNNING
The homepage system builder shows NEXUS-style workflow automation inside a full pipeline. Values shown there are simulated.
Watch the workflow engine runNEXUS FAQs
NEXUS — QUESTIONS WE GET ASKED
- Will NEXUS replace our existing tools?
- No. It works alongside your existing CRM and marketing stack — no rip-and-replace. It connects the tools you already pay for and moves work between them.
- Can NEXUS delete or change our data?
- Only inside rules you have approved. Destructive actions — delete, merge, bulk update — and anything touching billing require explicit human approval every time.
- What if a workflow does the wrong thing?
- Every run is audit-logged with the trigger, each system call, the decision taken and the rule behind it, so it can be traced and corrected. Human-in-the-loop can be enabled on any individual workflow.
- What if a tool we use isn't on the list?
- If it exposes a webhook or REST API, NEXUS can usually connect to it. Scoping that is part of the audit before anything is built.