Axentra / Products / Kusto
Accountable distribution

Controlled distribution
for government programs.

The accountable kiosk for government distribution programs. Verifies the beneficiary, dispenses the item, records every transaction.

Talk to us about Kusto See how it works
PROGRAMS IT SUPPORTS
DIF · breakfast & school kits School supplies Hygiene kits Pharmaceutical distribution
Kusto kiosk rendered in red Bienestar branding, showing four shelves of medical and hygiene supplies behind glass, NFC tap pad and screen on the right side, and a wide dispense bin at the base
< 8s
Tap to dispense
100%
Transactions audited
24 / 7
Availability
4
Program types supported
DEPLOYED FOR
Federal social programs State health agencies Education ministries Municipal program offices
Presence

Presence, not promises.

Every kiosk is an agency footprint that runs 24/7, wears the agency's brand, and serves citizens close to where they live. Deploy one or deploy a hundred — the program becomes a visible institution in every neighborhood it touches.

24/7

Never closes

A service point that doesn't keep office hours. No window opening at 9am, no line forming at 5am to make sure you get one.

BRANDED

Wears the agency

The agency's identity stands in public, every day. Beneficiaries know exactly whose program they're collecting from — no intermediaries between the institution and the citizen.

LOCAL

Where citizens are

Goes where people already go — clinics, schools, transit nodes, town centers — not where the agency happens to have its office.

MEASURABLE

Real data points

"We served N citizens at M locations" stops being an estimate. Every transaction is logged, every site is countable, every program report is auditable from the underlying records.

The problem

Paper rosters don't survive contact with reality.

The line forms at 5am. Someone hands out kits from a clipboard. The same beneficiary collects twice from a different volunteer two blocks down. Three boxes go missing. By the time the program manager finds out, it's been six weeks and the receipts don't match the population served.

Diversion isn't a moral failure. It's what happens when accountability ends at the program office and the last mile has nothing tracking who got what. Kusto is what tracking who got what looks like when it works without slowing the line down.

~ 15% of distributed government aid is estimated lost to diversion or duplication in low-traceability programs
0 paper rosters survive a real audit
How it works

Four steps. Eight seconds. Every time.

From card-tap to item-in-hand, the same path runs end to end with no parallel paper process underneath.

01

TAP

Beneficiary holds their program card to the reader. NFC, magstripe, QR — the kiosk supports all three depending on what the agency already issues.

02

LOOKUP

Card ID hits the agency registry. The kiosk doesn't store beneficiary records — it queries the system of record (DIF, IMSS, SEP, etc.) and gets back a yes/no plus the entitlement.

03

VERIFIED

Entitlement returns: this beneficiary, this program, this period, this allotment. If they already collected, the kiosk says so. If they're not enrolled, the kiosk says that. No second chances on a paper roster.

04

DISPENSED

Slot opens, item is taken, sensor confirms removal, audit log records the full transaction (cardholder, slot, item ID, timestamp). The agency dashboard updates in real time.

What it does

Software accountability.
Physical delivery.

Every capability built around one principle: every item dispensed is traceable to a verified beneficiary, with no parallel paper system that can be tampered with afterwards.

01

Card-based beneficiary verification

NFC, magstripe, or QR — the kiosk reads whatever identity credential the agency already issues. Card ID hits the system of record, agency returns entitlement, no local PII stored on the kiosk.

02

Real-time entitlement check

The kiosk doesn't decide what someone is entitled to. The agency does. Every transaction queries the registry in real time and respects the agency's eligibility logic, including frequency caps and program windows.

03

Slot dispensing with removal sensors

Slot opens. Item is taken. A sensor confirms the slot is empty. The transaction only closes once the kiosk knows the beneficiary actually got the item, not just that the door opened.

04

Immutable transaction ledger

Every dispense is logged with cardholder, slot, item ID, and timestamp. Records are hashed in a chain so any retroactive edit breaks the next hash and gets caught in the next audit.

05

Anti-diversion by construction

The same card cannot collect the same allotment twice. Cross-kiosk and cross-program enforcement runs against the registry, so duplicate attempts are blocked everywhere — not just where the first one happened.

06

Inventory analytics in Pulse

Per-kiosk and per-program inventory streams into Pulse in real time. Restock alerts fire based on actual consumption velocity, not a calendar. Program managers see runway in hours, not estimated weeks.

07

Restock driven by consumption

The kiosk knows how fast it's dispensing. The route system knows where the trucks are. Restock tasks generate automatically against the actual depletion curve, not a fixed schedule that runs whether kiosks are empty or full.

08

Multiple programs in one kiosk

A single kiosk can dispense for multiple agencies and programs at once, each with its own card type, eligibility rules, and slot allocation. One location, one machine, several programs the citizen can collect against on the same trip.

09

Offline operation, automatic sync

Connectivity drops happen, especially in field deployments. The kiosk keeps running on cached entitlements, queues every transaction locally, and syncs the full ledger the moment connectivity returns. No paper backup needed.

10

White-label agency branding

Every kiosk wears the colors and identity of the agency it serves. The citizen sees DIF, SEP, IMSS, or SALUD — not Kusto, not Axentra. Procurement gets accountability without forcing a new brand into the public eye.

Technical details

The boring details, in writing.

For the people who write procurement specs.

Form factor
Free-standing indoor or outdoor-rated unit. Footprint 0.6m² to 1.4m² depending on slot count. Power: 110/220V universal. Wall-anchor or floor-bolt mounting available.
Slot configurations
6 / 12 / 24 / 48 slots. Slot sizes are configurable per unit to fit anything from a pill bottle to a 5kg school kit.
Identity readers
NFC (ISO 14443 A/B), magstripe (ISO 7811), 2D barcode/QR scanner. INE (Mexico voter ID) read via the same magstripe path. Any reader can be disabled at the agency's request.
Connectivity
Wired Ethernet, Wi-Fi, or 4G LTE (with SIM tray). Will run on any of the three; will failover between them if more than one is configured.
Audit retention
Full ledger retained per agency contract (typically 7 years). Hash-chained for tamper evidence. Exportable to CSV or to the agency's existing audit system on demand.
Security
Door tamper sensors, cellular cut-off detection, optional Omnisight camera integration. Customer-managed keys on all deployments. On-premise registry option for agencies that can't push beneficiary data to cloud.
Service model
Lease (per kiosk per month, includes restock logistics) or purchase (one-time, with separate service contract). Restock can be Axentra-managed or agency-managed.
Deployment time
Pilot of 5 kiosks: 4–6 weeks from signed contract to live. Scale-out to 50+ kiosks: 8–12 weeks depending on connectivity site surveys.
Platform integration

Plugs into the rest of the platform.

Kusto is the physical endpoint. The accountability, analytics, and security around it live in software the agency may already be running.

PULSE Per-kiosk and per-program inventory analytics. Restock alerts. Anomaly detection on dispense patterns.
OMNISIGHT Optional camera at the kiosk. AI watches for tamper attempts, vandalism, or unusual lines forming.
REGISTRY DIF, IMSS, SEP, INE, or any agency system of record. Eligibility logic stays where it belongs.
Common questions

What procurement officers actually ask.

What if the beneficiary doesn't have their card?

The kiosk can verify by INE (Mexican voter ID) magstripe or by QR code from the agency's beneficiary app. Some deployments add fingerprint as a fallback, configurable per program. The agency decides what counts as identity proof; the kiosk enforces whatever they decide.

What happens to beneficiary data?

The kiosk does not store beneficiary records locally. It queries the agency registry at transaction time and keeps only the transaction record itself (card ID hash, slot, item, timestamp). Personal information stays in the agency system that already holds it.

How does it handle vandalism or theft?

Door tamper sensors fire immediately to the operations console. Optional Omnisight camera coverage gives video of any incident. Slot-level locks prevent extraction of more than the authorized item. Cellular cut-off detection escalates if connectivity is severed deliberately.

Can the kiosk run on solar / off-grid?

Yes for the lower-slot configurations (6 and 12 slots), with the right battery package. Mostly relevant for rural pharmaceutical distribution in IMSS-BIENESTAR territories. The compute footprint is small; the constraint is dispensing motor draw.

Who restocks the kiosks?

Either Axentra-managed (we contract regional logistics, restock tasks generated from consumption curves) or agency-managed (Pulse generates the restock list, agency dispatches their own crews). Most pilots start agency-managed; most scale-outs convert to Axentra-managed once volume is real.

How do we audit the audit?

Hash-chained ledger entries make retroactive tampering detectable. Federal auditors get read-only access to the full ledger and can verify the merkle root against the on-kiosk hardware. Independent re-verification is supported; we don't gatekeep the audit data.

Bring Kusto to your program.

If you run a distribution program of any size — beneficiaries you have to identify, items you have to hand out, an audit you have to survive — we can scope a pilot. Five kiosks. One program. Four to six weeks to live.

Schedule a Kusto pilot conversation