<30smedian ticket-to-assignee
92%first-touch routing accuracy
-68%P1/P2 SLA breaches
100%audit-traceable decisions
<30smedian ticket-to-assignee
92%first-touch routing accuracy
-68%P1/P2 SLA breaches
100%audit-traceable decisions
<30smedian ticket-to-assignee
92%first-touch routing accuracy
-68%P1/P2 SLA breaches
100%audit-traceable decisions
Back-office AI · ITSM · Audited routing

Every ticket.The right expert.On the clock.

TriageIQ is the orchestration layer between your inbound channels and your support org. It reads every incoming ticket, classifies it against your taxonomy, scores it against your live skill-and-load matrix, and routes it to the right N1, N2 or N3 expert with an SLA clock already running. Built for VP Support and CIOs in regulated environments.

ForVP Support / CIO / Head of ITSM · large B2B enterprises (500-10000 tickets/day)
WhatsApp Tour the control room
SLA control tower · Live
STREAMING
P1Critical
SLA 15 min78 open
P2High
SLA 1 h62 open
P3Standard
SLA 4 h41 open
MTTA< 30sACCURACY92%BREACH-68%

Multi-tier routing

Every ticket lands on the right expert · first time.

N1Frontline triage
12 agents
ITILEN
Load67%
N2Domain specialists
7 agents
AWSITILEN/FR
Load82%
N3Senior experts
3 agents
PCI-DSSAWS ProFR
Load54%

02:47 on a Saturday

A payment-rail incident lands. And your whole weekend burns.

Incident #98421 · forensic timeline
02:47:00CustomerTagged 'urgent' on ticket #98421 · payment rail degraded
02:47:08TriageIQClassified P1-Payments-Regulated · confidence 0.94
02:47:09FastAPISkill lookup · N3 PCI-DSS on-call: Sofia D. (load 41%)
02:47:10SLAClock started · breach at 03:02:10 · pre-alert 02:52:10
02:47:11PagerDutySofia D. paged · SMS + push + Slack DM
02:48:42Sofia D.Acknowledged · diagnostic in progress
02:58:14Sofia D.Root cause identified · patch deployed
03:00:01SLATicket resolved · 12m 53s · breach avoided
OutcomeSLA held · 12m 53s · breach avoidedContractual penalty avoided~150 000 EUR
Market state

Enterprise support orgs handling 500-10000 tickets/day lose an average of 23% of agent capacity to mis-routing and re-assignment loops (HDI 2025). The average P1 incident touches 4.2 agents before reaching the resolver; each handoff adds 18 minutes of clock-time and a 14% probability of SLA breach. In regulated sectors · fintech, insurance, telecom · a single breached P1 SLA can trigger contractual penalties of 50k-500k EUR plus mandatory regulator disclosure. Mean-time-to-assign (MTTA), not mean-time-to-resolve, is now the leading indicator of ITSM maturity in Gartner's 2025 ITSM Magic Quadrant criteria.

Why us

Wikolabs builds production AI orchestration for regulated B2B operators across Europe and the Indian Ocean. Our team has shipped ITSM, fraud-ops and back-office automation for banks, telco operators and public-sector clients · environments where every routing decision must be auditable, every model output traceable, every escalation path documented for the regulator. We run n8n, FastAPI and our LLM stack behind SSO, VPN and on-prem deployment options. No vendor lock-in, full source access, EU data residency available.

Our approach

TriageIQ plugs into your existing ITSM stack (ServiceNow, Jira Service Management, Zendesk, Freshservice, GLPI) via webhook or polling connector. Inbound tickets are normalized in n8n, classified against your custom taxonomy, scored against the live skill-and-load matrix in FastAPI, and pushed back to your ITSM with assignee, priority, SLA clock and routing rationale. Every decision is logged with model version, prompt hash and confidence score · ready for your SOC2, ISO 27001, or DORA audit. Go-live in 4-6 weeks with parallel-run shadow before cutover.

12-axis taxonomy

No free-text. Structured JSON, confidence scores, audit-ready.

Every inbound ticket produces a JSON verdict across 12+ dimensions · directly consumable by your ITSM, exportable for regulatory audit.

#AxisSample ticket #98421Conf.
01PriorityP10.90
02Business impactHigh0.91
03ServicePayments0.92
04RegulatoryPCI-DSS0.93
05Customer tierEnterprise0.94
06LanguageFR0.95
07SentimentFrustrated0.96
08RCA familyInfra0.97
09ExpertiseN30.98
10BillableYes0.90
11SLA pressure0.870.91
12Recurrencex3 / 30d0.92

Pipeline n8n + LLM + Python · vertical

From ingest to audited routing · in under 30 seconds.

STEP 01n8n · trigger

Webhook ingest & normalize

n8n receives webhooks from ServiceNow, Jira SM, Zendesk, email, Teams, or custom API. Payload is normalized into a unified ticket schema with source, channel, customer-tier and raw content fields.

STEP 02LLM

Multi-criteria LLM classification

An LLM classifies the ticket against your custom taxonomy: priority (P1/P2/P3/P4), category, affected service, regulatory flag, language, sentiment, required expertise tier. Returns structured JSON with confidence scores.

STEP 03Python · FastAPI

Skill & load matrix lookup

FastAPI service cross-references classification against the live agent matrix: certifications, domain expertise, current open-ticket load, on-call schedule and language fluency. Returns ranked candidates.

STEP 04Python · FastAPI

SLA engine & clock assignment

SLA engine applies contractual deadlines based on customer tier and priority, schedules pre-breach alerts at 50/75/90% and arms auto-escalation paths to N2/N3 and management.

STEP 05Audit log DB

Routing decision & audit log

Final routing verdict is committed to an append-only audit log: model version, prompt hash, confidence, candidate ranking, chosen assignee · ready for SOC2, ISO 27001, DORA evidence requests.

STEP 06n8n · action

ITSM update & ticket push

n8n writes back to your ITSM of record: assignee set, priority adjusted, SLA timer attached, routing rationale appended as internal note, parent-child links for related incidents.

STEP 07HTTP webhook

Multi-channel notification

Assignee is notified via the channel they live in · Teams, Slack, PagerDuty, SMS, email · with deep-link to the ticket, SLA clock and one-click acknowledge / reassign actions.

Audit log · ticket #98421
{ "ticket_id": "98421", "model_version": "wikolabs-router-1.4.2", "prompt_hash": "0x7af3...c812", "classified_at": "02:47:08.241", "verdict": { "priority": "P1", "service": "payments", "regulatory": "PCI-DSS", "confidence": 0.94 }, "routed_to": "sofia.d", "sla_clock_start": "02:47:10", "sla_breach_at": "03:02:10", "decision_id": "dec_a8f...4c2" }
Append-only · immutable

Compliance

Ready for your auditors.

SOC 2 Type II

Exportable model-decision logs

ISO 27001

Access control & traceability

DORA

Regulatory incident reporting

GDPR / RGPD

EU residency available (Paris, Frankfurt)

01 / 03

12-axis classification taxonomy

Every ticket is scored on 12+ axes: urgency, business impact, affected service, regulatory exposure, customer tier, language, sentiment, root-cause family, expertise level, billable contract, SLA clock pressure, recurrence. Structured JSON verdict your ITSM can act on · no free-text guesswork.

02 / 03

Skill & load matrix routing

A FastAPI engine cross-references classification against your live agent matrix: certifications (ITIL, AWS, PCI-DSS), domain expertise, current workload, on-call shift, language. Tickets land on the right N1/N2/N3 the first time · zero ping-pong escalations.

03 / 03

SLA clock & breach prevention

Each routed ticket triggers a live SLA timer with pre-breach alerts at 50%, 75% and 90% of contractual deadline. Auto-escalation paths, manager notifications and audit logs are generated · single source of truth for compliance and exec dashboards.

Compatible with your ITSM

servicenowservicenow
atlassianatlassian
zendeskzendesk
freshworksfreshworks
salesforcesalesforce
pagerdutypagerduty

From signature to cutover

4-6 weeks · parallel-run mandatory before production.

01

Week 1-2 · Taxonomy & matrix

Audit your service catalog, model the 12+ axis taxonomy, extract the agent matrix (certifications, loads, on-call) from your ITSM.

02

Week 3-4 · Wiring & shadow

ServiceNow / Jira SM / Zendesk / GLPI webhook connector, SLA engine deployed, parallel-run shadow mode (TriageIQ proposes, human dispatcher validates).

03

Week 5-6 · Cutover & live audit

Auto-routing on high-confidence classifications, append-only audit log in production, SOC2 / ISO 27001 / DORA dashboards delivered to your CISO.

Operational in 4-6 weeks

Take back control of your queue

4-6 weeks to cutover. Parallel-run shadow mandatory. SOC2 / ISO 27001 / DORA audit log delivered.

Included
  • ITSM connector (ServiceNow / Jira / Zendesk / GLPI)
  • Custom 12-axis taxonomy
  • SOC2 / ISO 27001 / DORA audit log
  • Mandatory parallel-run shadow
  • On-prem or EU residency