Civitas — AI-native public intelligence
Two products, one commitment: Civitas OS diagnoses the present with official data; Civitas Simulation rehearses the future with synthetic populations. Fully auditable, every finding sourced.
app.us.civitas-os.com
Production platform for public administration: fiscal red flags, procurement integrity, territorial diagnostics, and day-to-day operations.
See the platformSwarm simulation engine: from a single seed document, a parallel world of synthetic agents forecasts how a population would react to a policy or message.
See the engineConnected to official sources
84
official data connectors
83
synced every day, unattended
110
indicators compared to state, region and Brazil
32
deterministic finding rules
5,570
municipalities in the addressable universe
app.us.civitas-os.com
Daily ingestion of official sources, deterministic rules, AI agents with guardrails, and mandatory human review — from raw data to citable report.
Money
Earmarked transfers committed but unpaid, agreements with instalments pending, money received and not executed, open windows nobody saw. Civitas separates each axis — each demands a different action — and never adds them into a total that means nothing.
Five axes that never add up
Committed to the municipality and still unpaid.
Live agreement with a pending instalment.
Cash in the account awaiting a work order.
Open window with its deadline and requirement cited.
What lapsed — so the next cycle does not repeat it.
World Bank, IDB, CAF, AFD, AIIB, NDB, FONPLATA, UNDP and the city networks — 23 catalogued doors, each with how much is realistically available, the path to it, and the date the information was verified. AIIB publishes the operation before it reaches the Treasury; NDB lends directly to the municipality.
Multilateral money for a municipality is a loan backed by the federal government — not a grant. 661 of the 707 external operations on record at the Treasury carry that wording, and the card says so before you ask.
26 states with a connector for state-level transfers
The system, block by block
Execução fiscal · RREO
2026 · B1Census Government Finances · SAIPE · F-33 — fiscal rules
Erário: personnel pressure, consolidated debt, budget balance and cash cushion, each finding citing the fiscal-responsibility article and showing its formula. A municipality that does not publish Census fiscal survey falls back to the annual DCA — declared as a fallback, never disguised.
Integridade · PNCP
10 regrasConcentração do maior fornecedor
USAspending · sanctions · PEP · amendments — 10 rules
Vigia: supplier concentration, single bidder, amendment escalation, sanctioned company and politically-exposed-person links. Non-accusatory by construction — a guardrail blocks accusatory wording before it reaches the screen.
Território · 8 camadas
grade municipal9 layers · 110 indicators · 11 fronts
Território and Políticas: water, sewage, health, education, mortality, social assistance, security, risk and deforestation on the map; and the municipality side by side with its state, region and national averages — official aggregates only, never an estimated mean.
Program · geografia agregada
TSE + IBGECensus · aggregates — separate tenant
Program: programmatic intelligence on aggregate-only data, in a database physically separated from government use. A file carrying a national ID or voter number is rejected at ingestion, not filtered afterwards.
Crisis Mode
War room with 30-minute checkpoints, real-time presence, and an automatically generated first statement.
WhatsApp Digest
Daily briefing at 7 am, in text and audio, sent directly to the manager's phone.
Route Planner
Visit planner that prioritises municipalities by unmet need and optimises the route.
Promises Tracker
Public commitment tracker with attached evidence: photo, contract, service order.
Memory
Institutional reports in PDF and PPTX with a 72-hour public link.
Field Mode
Mobile photo-to-post capture with offline queue, for the team in the field.
Evidence first
No conclusion without a trace: the platform surfaces red flags and anomalies — with official source, period, calculation method, confidence score, and human-review status. It never asserts an irregularity.
Despesa de pessoal a 53,1% da RCL — acima do limite prudencial (51,30%) definido pela LRF.
No black-box accusations
Language of red flags and anomalies, never of guilt. The system signals; people conclude.
Physical separation of uses
Distinct databases for government and programmatic use, with mutually exclusive access.
Human-in-the-loop
No finding becomes PUBLIC without human validation — enforced in the database, not in the UI. Internally a finding starts pending, and the panel shows it as pending.
LGPD by design
Only official and aggregated data; telemetry with personal-data stripping.
Civitas Simulation builds, from a single document, a parallel world of synthetic agents — and measures how a population would respond to a policy, message, or event — at scale, at low cost, with a structured output report.
01 / 05
An LLM derives the ontology from the seed document and constructs the knowledge graph — entities and relationships.
Personas and agents are synthetic — they do not represent real people. Simulation does not perform individual targeting or psychographic profiling of real voters; it measures reception in an aggregated, auditable way.
The complete cycle
app.us.civitas-os.com
Civitas OS reads official sources and surfaces red flags with method and confidence.
Civitas Simulation rehearses how the population would react to each course of action.
evidence + foresight
Decisions grounded in what is — and what will likely be.
Results feed back into the diagnosis — a continuous cycle of evidence.
Governance and security
Guardrails throughout AI
Eight checks across three passes — input, tool result and output. Six block, two warn; a rule that raises becomes a block, never a free pass.
End-to-end audit
Append-only log written OUTSIDE the business transaction — the record of a block survives the rollback of the refusal. Agent plans are HMAC-signed.
Tenant isolation
31 tables under row-level security (22 with FORCE — not even the owner escapes) and two physical databases with cross access revoked. Another tenant gets 404, not 403.
Keycloak identity
SSO with brute-force protection and per-organisation roles.
LLM without lock-in
Multi-provider gateway: the model is a configuration, not a dependency.
Official data
84 connectors to public sources, 83 synced daily. Each declares how it stays fresh — and CI breaks if the justification is missing.
Get in touch
Tell us who you are and which product you are interested in. We respond within two business days with a demo tailored to your context.
info@civitas-os.com