Skip to content

Synthetic Users Transactional Authority Levels

Document ID: CRA-33.3.1-TAL-001

Version: 1.0

Effective Date: March 25, 2026

Last Updated: March 25, 2026

Owner: CEO — Kwame Ferreira

Approved By: CEO — Kwame Ferreira

Classification: Internal – Confidential

CRA Control: CRA 33.3.1


1. Purpose

This document formally defines who within Synthetic Users, Inc. is authorized to approve financial commitments, operational decisions, and system-level actions — by role, individual, and threshold. It ensures that all material transactions and decisions are subject to appropriate authorization and that no single individual can unilaterally approve transactions beyond their designated authority level.


2. Scope

This document applies to:

  • All financial commitments (expenditure, contracts, subscriptions)
  • All operational authority delegations (hiring, vendor onboarding, system access)
  • All system-level privileged actions
  • All employees, contractors, and directors of Synthetic Users, Inc.

3. Organizational Roles

RoleIndividualReports To
Chief Executive Officer (CEO)Kwame FerreiraBoard / Founders
Chief Financial Officer (CFO)Zumbi FerreiraCEO
Chief Technology Officer (CTO)Artur VenturaCEO
Head of Research / OperationsSamantha ReisCEO
Senior EngineerDavi CamposCTO
EngineerTiago CoelhoCTO
Operations AssociateJoao RochaHead of Operations

4. Financial Authority

4.1 Expenditure Approval Thresholds

Transaction ValueRequired Approver(s)
Up to $1,000CTO (technology) or CFO (operations/finance)
$1,001 – $10,000CTO + CFO joint approval
$10,001 – $50,000CEO approval required
Above $50,000CEO + CFO joint approval
Any amount — external legal or regulatory commitmentsCEO only

4.2 Specific Financial Transaction Authority

Transaction TypeAuthorized By
Employee payrollCFO (Zumbi Ferreira)
Contractor invoicesCTO (technology contractors) or CFO (other)
SaaS / software subscriptionsCTO up to $1,000/month; CEO above
Cloud infrastructure (AWS, Render)CTO up to $10,000/month; CEO above
Vendor contracts (new)CEO; CFO for renewals below $10,000
Client refundsCFO up to $5,000; CEO above
Bank transfersCFO initiates; CEO authorizes for amounts > $10,000

5. Operational Authority

ActivityAuthorized ByNotes
New hire offer lettersCEOAll permanent hires
Contractor engagement (< 90 days)CTO (technical) or CEO (other)Must include written SOW
Contractor engagement (≥ 90 days)CEORequires CFO budget confirmation
Employee terminationCEOCFO notified for payroll
Performance improvement plansCEO + relevant department lead
New vendor onboardingCTO (technical vendors) or CFO (other)DPA required where applicable
Vendor offboardingCTO (technical) or CFO (other)Confirm data deletion
Customer contract executionCEO onlyPer Signing Authority Policy
NDA executionCEO onlyPer Signing Authority Policy
JPMC-specific commitmentsCEO; CTO for technical commitments within existing contract scope
Press releases / public statementsCEO
Regulatory filingsCEO + Legal advisor

6. System-Level Authority

System ActionAuthorized ByRequires Second Approver?
Production database accessCTOYes — CEO for break-glass
Production deployment (planned)Engineering LeadNo — via CI/CD
Emergency production rollbackCTONo — immediate action permitted; post-event review required
New LLM provider enablementCTOYes — CEO informed
API key creation (production)CTONo — logged automatically
API key rotation (production)Engineering LeadNo
Infrastructure scaling changesCTONo — within approved budget envelope
Security group / firewall changesCTONo — reviewed in weekly security standup
New user provisioning (internal admin)CTONo
Admin privilege grant (internal)CTOYes — CEO approval for financial system access
JPMC-specific system configurationCTOYes — JPMC must confirm in writing for material changes

7. Exception Process

When a transaction or action falls outside the defined authority levels or requires urgent action:

  1. The requesting party documents the exception in writing, including the nature of the request, the business justification, and the time constraint
  2. The next-level authority reviews the exception request
  3. If approved, the approval is recorded in the company's document management system with date and approver identity
  4. The exception is reviewed at the next quarterly governance meeting to determine if the authority matrix should be updated
  5. All exceptions are logged and reported to the CEO monthly

No exception may be approved by the same individual making the request.


8. Segregation of Duties

The following segregation of duties controls are maintained to prevent conflicts of interest and unauthorized transactions:

  • Initiator ≠ Approver: The person requesting a financial transaction may not also approve it
  • Payment initiation ≠ Payment authorization: Bank transfers are initiated by the CFO and authorized by the CEO for amounts > $10,000
  • Vendor selection ≠ Contract execution: Technical vendor selection (CTO) is separate from contract execution (CEO)
  • System access requests ≠ Access grant: Engineers request access; CTO (or CEO for elevated rights) grants it
  • No single-person JPMC transactions: All actions taken in connection with JPMC client engagements involving financial commitments require both CTO (technical) and CEO (commercial) awareness

9. Governance and Re-approval

  • This document is reviewed and re-approved annually or when organizational roles change materially
  • Any change to authority thresholds requires CEO approval
  • All role holders listed in this document must confirm their understanding of their authority levels in writing annually
  • A copy of this document is maintained in the legal documentation repository and in the JPMC SCA evidence package

10. Review

This document is reviewed annually by the CEO and CFO and updated to reflect any changes in organizational structure, personnel, or business scale.



Synthetic Users, Inc. — 3201 Coolidge Ave, Los Angeles, CA 90066, USA

Released under the MIT License.