Operators run enterprise UCaaS, CCaaS, CPaaS, SMS and numbering brands on Synxum. One encrypted vault for every provider key. A meter on every model call, minute, message and DID. One settled invoice a month. White-label domains that provision themselves.
Billing period 2026-07 · 4 operators · all product lines
Control plane shown with demonstration data.
Take one. Take all five. Each line stacks onto the same contract, the same vault and the same invoice — and every one of them arrives with the switch, the rating engine and the reseller tier already built.
Carrier-grade cloud PBX on a dedicated FreeSWITCH partition. Extensions, ring groups, auto-attendants, voicemail-to-email, call recording and a WebRTC softphone your customers open in a browser.
Omnichannel ACD across voice, chat, email, WhatsApp and SMS with skills-based routing, supervisor barge, live wallboards and AI on every interaction — sentiment, summary, suggested reply, QA scoring.
The whole stack behind an authenticated REST surface. Issue scoped API keys, meter every call, and let your customers build voice, messaging and AI into their own products.
A2P messaging at operator scale: campaigns, two-way threads, opt-out handling and segment-accurate rating for GSM-7 and UCS-2 — wholesale leg and retail leg posted on the same CDR.
The gateway holds the provider key and hands back the answer. In between, it reads the token counts off the response, prices them against your rate card, attributes them to the operator and writes the row. No sampling, no monthly reconciliation, no arguing about a number nobody can reproduce.
Synxum is a meet-me room. Every operator gets its own database and its own switch partition — not a row in a shared table, not a tenant flag on a query. Rivals share the building and never the room. We don't broker introductions and we don't publish a customer list; the protection that keeps them quiet is the one that keeps you quiet.
NO ROUTE between tenants. Isolation is physical, not a WHERE clause.
They pick a template, buy the domain in-portal, upload a logo or generate one from a prompt. The registrar order, the DNS records, the custom hostname and the certificate all happen without a ticket. The storefront goes live under their name — with no trace of yours, or ours, on it.
A master key wraps a per-scope Fernet key; that key encrypts the secret. Delete the wrapped key and the ciphertext is unrecoverable — crypto-shred an operator in one statement.
Set and rotate a secret through the API; read it back and you get a masked hint. The plaintext leaves the vault only into the provider call it was stored for.
Every password and API key is argon2id-hashed. Keys are shown once at issue and verified in constant time. There is no recovery path, only rotation.
Each operator runs its own Postgres and its own stack. A cross-tenant read isn't blocked by a policy — there is no connection over which to attempt it.
Payment webhooks are HMAC-SHA256 verified with a per-owner signing secret and fail closed. Provisioning is idempotent on the event id.
Three realms — platform owner, operator user, machine key — with distinct JWT scopes. A reseller token cannot address an operator route, and never sees another reseller's subtree.
A base tier for each product line you license, plus a small meter on what actually flowed. Add ten thousand seats and the base doesn't move. Rates are quoted per operator before you sign.
We key in every operator by hand: scope the product lines, quote the rates, provision the stack. Tell us what you run and we'll tell you what it costs to run it here.
[email protected] · answered within two business days