Glossary
Glossary: AI agents for Mexican lenders
The terms you will hear when evaluating AI agents at a Mexican lender, in business language: first the technology, then the pieces of Mexican regulation that intersect with it most. Each definition links to the page that covers it in depth.
Updated October 4, 2026
What do the technology terms mean?
- Synthetic agent
- An AI agent with a defined role (customer service, collections, origination) that understands what people tell it, reads and updates systems, follows rules and hands off to a person. It always introduces itself as an AI agent, never as a human. See synthetic agent vs. chatbot vs. call center.
- Agentic ecosystem
- Systems, synthetic agents and people running a process together, with the Agentic Office to direct them. See what an agentic ecosystem is.
- Agentic OS
- The operating system for running your business with agents: InnovaBlack’s layer on top of your existing systems (connectors, cores and orchestration) so agents can operate them with no migration. See Agentic OS.
- Synthetic OS
- The operating system behind each synthetic agent: its intelligence, rules, memory, monitoring, kill switch and ability to self-repair. See Synthetic OS.
- Agentic Office
- The screen where your team sees what every agent is doing, takes over a conversation, hands it back and stops the agent. See Agentic Office.
- Connector
- The piece that opens access to a system (core, CRM, collections) through an API, MCP or another door, with its own permissions. See connecting agents without a migration.
- Agentic core
- Where the logic of an end-to-end process lives (originating, collecting, serving), above any single system.
- MCP (Model Context Protocol)
- An open standard that lets an AI agent use tools and data from other systems in a controlled way.
- Audit log
- A record of every message, lookup, action and handoff the agent makes, with date, time and case. It is your evidence for a complaint or an audit. See agent governance.
- Kill switch
- The control an authorized person uses to stop an agent immediately.
- Handoff (escalation)
- When the agent passes a case to a person, with the conversation and the data already gathered.
- Hallucination
- A model answer that sounds confident and is wrong. It is controlled by limiting the agent to data from your systems and approved documents. See risks and controls.
- Prompt injection
- An attempt to make the agent ignore its rules through what someone writes to it. It is controlled with permissions and validation inside the tools.
What do the regulatory terms mean?
- SOFOM
- Multi-purpose financial company (sociedad financiera de objeto múltiple), governed by the General Law of Auxiliary Credit Organizations and Activities (LGOAAC). It can be regulated (E.R.) or unregulated (E.N.R.); for unregulated ones, CNBV supervision focuses on anti-money-laundering compliance. See solutions for SOFOMs.
- SOFIPO
- Regulated savings and loan company (sociedad financiera popular), governed by the Popular Savings and Credit Law and supervised by the CNBV. See solutions for SOFIPOs.
- IFPE
- E-money institution (institución de fondos de pago electrónico), one of the financial technology institutions created by the Fintech Law; it needs CNBV authorization to operate. See solutions for IFPEs.
- CNBV
- Mexico’s National Banking and Securities Commission. It supervises financial institutions; for unregulated SOFOMs, its supervision covers anti-money-laundering rules.
- CONDUSEF
- Mexico’s financial consumer protection agency. Among other things, it sets the conduct rules for collection agencies.
- UNE
- The specialized customer unit every financial institution must have to handle inquiries and complaints (article 50 Bis of the Law for the Protection and Defense of Financial Services Users). See customer service and the UNE.
- REDECO
- CONDUSEF’s registry of collection agencies, where lenders report the agencies that collect on their behalf. See collections with agents.
- AML/CFT (PLD/FT in Spanish)
- Anti-money-laundering and counter-terrorist-financing. For SOFOMs, the legal basis is article 95 Bis of the LGOAAC and the rules issued under it.
- KYC
- The policies for identifying and knowing the customer, building their file and keeping it current. See KYC and AML with agents.
- Compliance officer
- The officer the institution designates as responsible for its AML program. An agent supports this role; it does not replace it.
- Communication and Control Committee
- The committee the AML rules require; in smaller institutions, its duties can fall to the compliance officer, as the rules themselves provide.
- Relevant, unusual and internal-concern transactions
- The minimum transaction types that must be reported to the Ministry of Finance through the CNBV under article 95 Bis of the LGOAAC.
- Privacy notice and ARCO rights
- The notice tells people how and why their data is processed; ARCO rights (access, rectification, cancellation and objection) let them control it. See data protection and agents.
- Credit information company
- What people usually call the credit bureau. Pulling a customer’s credit history requires their express authorization (article 28 of the law that governs these companies). See origination with agents.
Official sources
- «Ley General de Organizaciones y Actividades Auxiliares del Crédito» (Chamber of Deputies)
- «Ley de Ahorro y Crédito Popular» (Chamber of Deputies)
- «Ley para Regular las Instituciones de Tecnología Financiera» — the Fintech Law (Chamber of Deputies)
- «Ley de Protección y Defensa al Usuario de Servicios Financieros» (Chamber of Deputies)
- CONDUSEF rules on collection agencies, «Despachos de Cobranza» (DOF, Oct 7, 2014)
- «Ley Federal de Protección de Datos Personales en Posesión de los Particulares» (Chamber of Deputies)
This page describes rules and practices; it is not legal advice. Your compliance officer and counsel have the final word.