← Back to Home

◆ CAPABILITY STATEMENT

Kesper for military exchanges and federal food service

A daily 90-second operations brief for concession-style food service and multi-format retail across military bases and federal facilities — built for the procurement officers, ops directors, and program managers who run them.

Who Kesper is built for

Federal NAFI and appropriated-fund operations that run concession dining, base retail, or commissary operations at scale:

  • AAFES — Army & Air Force Exchange Service. 3,100+ facilities, 30+ countries. Food courts, base restaurants, gas station food service, Class Six.
  • NEXCOM — Navy Exchange Service. ~280 stores, food service, lodging.
  • MCX — Marine Corps Exchange. ~70 stores, food courts.
  • CGX — Coast Guard Exchange. ~50 facilities.
  • DeCA — Defense Commissary Agency. 236 commissaries. Sharpest fit for shrinkage, ghost-stock, and expiry detection across perishables.
  • VA Canteen Service — cafeterias at VA medical centers nationwide.

Core capabilities

Kesper deploys a roster of named AI agents that read sales, inventory, labor, and review data overnight, then deliver one ranked operational brief per facility manager each morning — five actions max, mobile-first, via Slack or text. No additional dashboards to log into.

  • HEIMDALL — Labor compliance. Forward-flags multi-state OT exposure, Fair Workweek and predictive-scheduling violations, and break-rule risks BEFORE a draft schedule is published. Critical for installations with personnel deploying across state and federal jurisdictions.
  • SCROOGE — Margin leak detection. Variant- and menu-item-level margin analysis after platform fees, ingredient costs, and labor. Surfaces concessions quietly losing profit on items that don't show in standard exchange reports.
  • PROPHET — Demand forecasting. Pre-stages volume against weather, local events, deployment cycles, payday patterns, and training rotations. Drives staffing and inventory decisions before peaks land.
  • SHERLOCK — Inventory integrity. Ghost-stock detection (items showing as sold without inventory drawdown), expiry tracking across perishables, and shrinkage pattern analysis. Specifically targeted at commissary operations.
  • FORTUNE — Cash forecast. 30-day cash-flow projection across NAFI accounts, with liquidity-dip alerts before they hit.
  • MONICA — Brief synthesis. Stitches the above into a single 90-second morning brief per facility manager, ranked by P&L impact.

Procurement identifiers

Legal name

Kesper

Business size

Small Business (per SBA size standards)

UEI (SAM.gov)

Registration in progress

CAGE code

Pending issuance via SAM.gov

Primary NAICS codes

541511 — Custom Computer Programming Services541512 — Computer Systems Design Services511210 — Software Publishers

Place of performance

United States (remote engagement)

SAM.gov registration and CAGE code issuance are in progress. Contact procurement for current status before issuing a solicitation that requires either.

Technical posture

Kesper is a multi-tenant SaaS hosted in the United States. The architecture below describes the current commercial deployment. Government-tier hosting (FedRAMP / GovCloud) is part of the roadmap and will be implemented in response to a specific authorization-to-operate (ATO) requirement.

  • Data classification. Kesper reads operational data (orders, inventory, labor shifts, reviews) from authorized POS and commerce systems. It does not handle Controlled Unclassified Information (CUI) or classified data. End-customer PII is processed only as aggregate signals; raw PII is never displayed to operators.
  • Encryption. TLS 1.2+ in transit (HSTS enforced). AES-256 at rest on managed PostgreSQL plus app-level field encryption (AES-256-GCM) on sensitive credentials. Backups inherit the same at-rest encryption.
  • Access control. Role-based access (store_manager, district_manager, vp, admin, owner). scrypt password hashing with 16-byte random salt. Server-revocable Bearer-token sessions. All data-touching mutations recorded to an immutable audit log.
  • Compliance roadmap. NIST 800-171 self-assessment in progress. CMMC 2.0 Level 1 planned. FedRAMP Moderate authorization under consideration based on customer demand and contract value. SOC 2 Type I planned. Status updates available on request.
  • Integration model. Read-only by default. Kesper connects via official APIs (Square, Shopify, eBay, Amazon, Toast, WooCommerce, Clover); via a Developer Ingest API for custom or legacy systems; or via CSV upload where no API exists. No write actions occur without explicit human approval in the operator's daily brief.
  • Data residency. US-only hosting today. GovCloud or in-region hosting available under specific contracts.

Differentiators

  • Format-aware operations. A 150 sq ft transit kiosk doesn't have the same P&L shape as a downtown café; Kesper's recommendation logic accounts for the difference natively. Relevant for exchange operations spanning food courts, gas stations, and standalone retail.
  • Forward-flagged compliance. HEIMDALL surfaces labor-law risks before a schedule is published, not after the violation. Useful for the multi-state and multi-jurisdiction context typical of military installations.
  • Human-in-the-loop by design. Every recommendation in the morning brief has an explicit approve action. Agents draft, operators decide. No autonomous write actions.
  • Brief over dashboard. 90 seconds beats 90 panels. Field managers don't have time to aggregate ten reports each morning. Kesper aggregates the reports and surfaces five ranked actions.

Past performance

Kesper currently serves commercial multi-platform retail and restaurant operators in the United States. Public-sector and federal references are not yet available; Kesper is open to early-engagement pilots through Department of Defense innovation pathways (DIU, AFWERX, Army xTechSearch, DoD SBIR) or as a subcontractor to existing prime contractors with military exchange or commissary master agreements.

Procurement contact

Email: business@kesper.io

Subject lines that include the issuing entity (AAFES / NEXCOM / MCX / CGX / DeCA / VA / other) and any solicitation or RFI number get routed and answered first.

This page is the live capability statement. To produce a PDF for distribution, use your browser's Save as PDF (Cmd-P / Ctrl-P → Save as PDF). The page is formatted for letter and A4 paper sizes.