Technical Proposal · RFP 26-019 · Component 3

Hybrid Managed Services
for Cloud4LAC

Sinapsis Innovation S.A.S. · July 2026
01 · Introduction
Who we are

14 years walking with the Bank taught us how it works

0
Years of continuous service to the IDB
0
Projects delivered in the region
Some projects
  • Energy Hub
  • OLAS · Water and Sanitation Observatory
  • HydroBID
  • LACChain
  • INTEGRA
  • Subnational Platform
  • Waste Hub
  • Data Lake CMF
... among many others
0
Bank member countries served
Countries served
🇲🇽Mexico
🇧🇿Belize
🇭🇳Honduras
🇸🇻El Salvador
🇨🇷Costa Rica
🇵🇦Panama
🇧🇸Bahamas
🇩🇴Dominican Rep.
🇧🇧Barbados
🇨🇴Colombia
🇪🇨Ecuador
🇵🇪Peru
🇧🇴Bolivia
🇧🇷Brazil
🇵🇾Paraguay
🇨🇱Chile
🇦🇷Argentina
🇺🇾Uruguay
Different government institutions Spain · USA · Korea · Middle East Talent in Colombia · Argentina · New Zealand
New Zealand New Zealand · Sinapsis talent MexicoBelizeHondurasEl SalvadorCosta RicaPanamaEcuadorPeruBoliviaChileArgentinaUruguayParaguayBrazilBahamasDominican Rep.Barbados Colombia · Sinapsis hubArgentina · Talent
18 Bank member countries · ◎ Sinapsis talent
01 · Introduction

We operate services like Cloud4LAC every day

Multi-country government

Transparency and citizen services in Honduras, Mexico, Paraguay, Uruguay and Chile: national systems with more than 100,000 active users.

Multilateral organizations

Organizations like the IDB and UN Tourism: we meet their standards in hosting, development and consulting.

Corporate

Experience with public and private organizations for more than a decade, evolving to modern technologies like AI, Blockchain and IoT, among others.

Own SaaS 10+ years

Our own platforms managed for more than 10 years: the same discipline required by the Cloud4LAC in-house solutions.

We have helped many countries install their systems: we know their challenges with infrastructure, licensing and technical guidelines, and we put that knowledge at the service of Cloud4LAC.

01 · Introduction

Why Sinapsis for Cloud4LAC?

We know the internal processes of the Bank

More than 100 PRAC processes supported: in solutions developed by Sinapsis and helping other vendors follow the guidelines. That gives us the experience of working with good practices.

Dedicated specialists since the beginning

Specialists with specific capabilities for the initiative, trained by the Bank (ISMS ISO 27001) and present since the beginning of Cloud4LAC: we understand the challenges and also the future projection.

We share the purpose

Create impact in the region by giving access to technology to those who could not operate it alone. We understand that purpose and we share it.

We understand the hybrid model

SLAs are met with rigor, and we also know this is a joint work with the Bank to guide every solution in the best way.

01 · Introduction
Our understanding

Cloud4LAC is much more than infrastructure

Stable and secure

The platform institutions trust every day.

Ordered growth

The initiative grows with documented and standardized processes.

Expert advisory

Guidance and support for internal and external teams, and compliance with guidelines.

It is not only provisioning infrastructure: Cloud4LAC supports, guides and strengthens the solutions until they graduate to their institutions.

A service is only as good
as the team that delivers it.

02 · Key Personnel

The team assigned to Cloud4LAC

JCZ

Juan Camilo Zapata Arbeláez

Technical Lead
Executive MBA in Technology Business Management · 12 years in IDB projects

Juan Camilo Zapata Arbeláez

Technical Lead
  • Tech MBA · Executive MBA in Technology Business Management
  • 12 years working in IDB projects
  • 100+ PRAC processes supported
  • Software architect
  • Escalation point with the Product Owner
JT

Julian Trujillo Obregón

Solutions / Application Architect
Solutions architect certified in Azure and AWS

Julian Trujillo Obregón

Solutions / Application Architect
  • Certified in Software Architecture, Azure, AWS and other technologies
  • Validated architecture of the 50+ active projects
  • Architecture and technical risk reviews
  • Reusable blueprints and patterns
  • Access hardening in AWS and Azure
JAC

José Alejandro Córdoba Angarita

Systems & Network Operations
Master in AI · Cloud expert certified in Azure and AWS

José Alejandro Córdoba Angarita

Systems & Network Operations
  • Cloud expert certified in Azure and AWS
  • Software specialization and master in AI
  • Azure · AWS · GCP · DigitalOcean · Hostinger and more
  • Least-privilege access and secret rotation
  • Bilingual technical communication ES/EN
YM

Yessid Muriel

Security Operations
Certified cybersecurity expert · 10+ years in IT

Yessid Muriel

Security Operations
  • Certified cybersecurity expert
  • 10+ years in IT · 5+ in cybersecurity
  • Cloudflare WAF · MS Defender · GuardDuty
  • Remediation over the Bank scans
  • Monthly security posture report
AV

Alexander Vargas Perdomo

Process and Monitoring Specialist
Master in Project Management · Certified in process automation

Alexander Vargas Perdomo

Process and Monitoring Specialist
  • Master in Project Management
  • Certified in process automation
  • Operational owner of the formal processes
  • Operates and evolves the service MIS
  • Onboarding, requests and reporting
Advanced AI users · Early adopters

All 5 trained in ISMS ISO 27001 by the Bank itself · present since the beginning of the initiative

MIS: Management Information System
02 · Key Personnel

We know challenges will come. We have the support to solve them.

We know the challenges that appear in Cloud4LAC: that is why the team has the support of different profiles of the company when needed.

0
Internal professionals with diverse profiles
0
Annual pool included, at no cost for the Bank
0
Roles with knowledge in multiple areas
03 · Staffing & Delivery

This is how the team is organized, aligned with the Statement of Work

RoleFTEResponsibility
Technical Lead0.25Leads the service technically, defines standards and coordinates with the Product Owner
Solutions / Application Architect1.0Designs and validates the architecture of every solution that joins the platform
Systems & Network Operations1.0Provisions and operates the daily infrastructure across all cloud providers
Security Operations1.0Protects the platform: controls, vulnerabilities and ISMS compliance
Process and Monitoring Specialist1.0Manages the requests, the formal processes and the service reporting
680 h/month of capacityPlus 160 h per year on demand with internal profiles of the providerBank Product OwnerDecision counterpartImprovement of in-house platformsThe whole team supports the evolution of the MISRoles that complement each otherShared knowledge to support each other across domains
MIS: Management Information System
03 · Staffing & Delivery

Where is the team when the Bank needs it? In the same time zone.

100% remote from Colombia

Bogota is 0-1 hour from Washington DC all year. Real time, no time-zone handoffs.

On-call coverage

Coordinated with the Product Owner: someone is always available for an emergency.

Global flexibility

Night windows covered with resources in New Zealand: their day is our night.

Resources over time

Monthly review of demand vs. capacity, 160 h on demand, and availability of other profiles if needed.

03 · Staffing & Delivery

How does the Bank know if something goes wrong? Before it has to ask.

LevelCadence
OperationalDaily meeting every day with the Product Owner + continuous flow of requests
TacticalWeekly meeting with the Bank · Monthly team retrospective · Monthly service review
IncidentsProtocol with 4 severity levels: a critical incident is reported to the Bank and escalated to leadership in less than 2 hours
ExecutiveQuarterly reports with results and progress of the service
Full traceability in the MISEvery activity is registered and auditable→Online dashboardsReal-time information: requests, projects, task assignment, SLA compliance and more
MIS: Management Information System
03 · Staffing & Delivery

We optimize the team time with automation and control

Control of all requests

Every request is registered, prioritized and traced in the MIS, in continuous flow with the Product Owner.

Automated processes

Onboarding, multi-cloud reporting, evidence collection and SLA validation, among others. And we keep automating.

Monitoring and alerts

Alerts for expirations, resource consumption and security: we act before anything becomes a problem.

MIS: Management Information System

AI does not make the decisions.
It makes them better.

04 · AI Capabilities

Base guidelines for the use of AI

Human-in-the-loop

AI assists the specialist. It never decides. The responsibility is with the person.

Joint decisions

Engines, use cases and limits agreed with the Bank. Never unilateral.

Data protection

Nothing privileged to external models. Enterprise accounts with privacy layers.

Periodic validation

Quarterly tests to verify that the answers are still correct.

Cost guardrails

Consumption limits. No billing surprises.

Written guidelines

When to use AI and when not. It is not a promise: it is a practice.

04 · AI Capabilities

Already implemented. The goal is to keep improving.

In production

Process & Governance

Automatic onboarding with auto-generated tasks and owners · traceable offboarding · automated dailies · MIS ↔ DevOps traceability.

In production

Reporting & Analytics

Real-time KPIs · monthly multi-cloud financial reports per project · executive metrics of solutions.

In production

Security & Compliance

Operational tasks work as audit evidence, with registered approvals. Compliance without friction.

In production

AI & Digital Services

Operational agents with Copilot: procedures, provisioning, document assistance. The person decides.

Continuous improvement
This is not the finish line: the catalog of automation and AI keeps growing, and there are many aspects we can still improve.
MIS: Management Information System
04 · AI Capabilities

What is next? Agents at the service of every role and the TTAs

Possible agents

For the service team

Security · which alerts should I attend first today?
Costs · how do we optimize the consumption of this project?
Processes · what is the procedure for this case?
Observability · how are the service health and the SLAs?

How we imagine it

A monitoring data point does not arrive: the agent detects it, diagnoses the cause and re-runs the load process. The specialist only validates the result.

The security agent analyzes alerts and trends with the context of the active projects, and suggests which ones to attend first.

Possible agents

For the TTAs and projects

Estimation · how much would this infrastructure cost?
Eligibility · does this project apply for Cloud4LAC?
Billing · questions about invoices and consumption
Guidance · guidelines to adopt AI in their projects

How we imagine it

"I need two virtual machines, a VPN and a database, how much would it cost?" The agent compares providers and delivers a structured estimation, registered in the evaluation.

And if a project wants to adopt AI: which clauses, technologies and guardrails to require.

How every agent would work, step by step
1
Understands the request
2
Analyzes with Cloud4LAC context
3
Diagnoses the cause
4
Recommends actions
5
Resolves if it is safe
6
Documents and learns
Phase 1 · Controlled pilotWe start with few use cases, agreed with the Bank→Phase 2 · ValidationWe measure the results and review them together→Phase 3 · ScalingWe extend only what shows value

The best transition plan
is to not need one.

05 · Transition Plan

How long is our learning curve? Zero days.

0
Knowledge transfer needed
Day 1
SLAs at 100%, no grace period
0
Active projects with no risk of interruption
The 3 months of the plan are invested in strengthening, not learning
Month 1 · AlignmentKick-off with the Bank and start of the documentation and process update→Month 2 · UpdateThe update is finished and the current processes are audited→Month 3 · AcceptanceFormal closing with the approval of the Product Owner
05 · Transition Plan

What if people change? Everything is prepared and documented.

Rotation covered by design

The replacement joins over documented and tested processes. The service is delivered the same.

100 controlled documents

Policies, processes, guides and records · 20+ base processes · complete life cycle · versioned with auditable evidence.

Crossed knowledge

Validation sessions inside the team: the knowledge is not in only one person.

And if the Bank requires it

The same documentation supports any future transition, with the full commitment of the team to share its knowledge and experience: more than a contract, the important thing is to keep contributing to the growth of the region.

06 · Pricing & Assumptions

Commercial proposal

YEAR 1 · FIXED MONTHLY FEE
$28,556/month
$342,672 per year
Monthly distribution per profile
Technical Lead (0.25 FTE)$2,405
Solutions / Application Architect$6,464
Systems & Network Operations$6,464
Security Operations$6,905
Process and Monitoring Specialist$6,318
YEAR 2 · FIXED MONTHLY FEE
$29,983/month
$359,796 per year
Monthly distribution per profile
Technical Lead (0.25 FTE)$2,525
Solutions / Application Architect$6,787
Systems & Network Operations$6,787
Security Operations$7,250
Process and Monitoring Specialist$6,634
INCLUDED AT NO COST
160h/year
UX/UI · BI · QA · development · audiovisual, among others
Closing

Why Sinapsis?

We know Cloud4LAC since its beginning

Processes, challenges, road and potential. We do not need to learn: we can keep building.

A team prepared for this

Specific capabilities, training from the Bank itself, and a career plan with annual certifications paid and promoted by the company.

We share the mission

Strengthen institutions and accelerate the adoption of technology in the region. That mission is also ours.

We innovate with responsibility

Automation and AI with governance, at the service of the initiative, the countries and the people.

Let's keep growing together for the region

Sinapsis Innovation S.A.S.

Questions and answers

Sinapsis Innovation S.A.S.

Thank you!

Sinapsis Innovation S.A.S. · Technology that adds value