Six levels, from the whole enterprise to one individual.
The org chart is not a diagram alongside the system: it is the thing the system checks. Every person, AI agent and machine is a node in one tree, and their position in that tree is what decides what they can see and what they can manage.
What does each level mean?
Each level contains the one below it, and nothing skips a level. The tree is read top-down, from the whole enterprise to a single individual.
What makes the tree enforceable rather than decorative?
Two rules, and the fact that Hierarchy checks them on every governed write before Policy is even consulted.
Visibility flows down
You see your own node and everything below it, never sideways into a sibling brand. That means a brand lead sees their own ORG, its OPS groups, their FIELD sites and every NODE beneath, and sees nothing at all of the brand beside them, because a sibling is not below them.
Management is strictly downward
You can manage below you, not at your own level. Two nodes at the same level cannot manage each other, so authority has to come from above. A peer cannot grant a peer more reach, and cannot quietly promote them.
Taken together the two rules produce the property that matters in a multi-brand group: brands are isolated from each other by construction, not by a permission someone remembered to set. Isolation is what the tree is, so there is no configuration in which two sibling brands can see one another.
How is reach worked out for a given action?
Hierarchy takes the caller's position and the target of the action and answers one question: is that target inside this caller's reach? If it is not, the action does not get as far as Policy.
Reach is the downward cone from wherever the caller sits. A NODE at a FIELD site reaches that node and whatever sits beneath it. An OPS lead reaches their group, its FIELD sites and their nodes. Someone at GLOBAL reaches the whole enterprise. In every case the shape is the same: everything below, nothing beside, nothing above.
Because reach is derived from position rather than stored as a list, it cannot drift out of step with the org chart. Moving a node moves its reach with it, and there is no second place where an old permission can survive the move.
How does a person experience their own scope?
Through the session they sign in with. Each sign-in carries exactly what that person can see and manage, and it expires and refreshes on a short TTL, so a scope is a live thing rather than something granted once and forgotten.
The same applies to an AI agent or a machine, because both are NODEs in the same tree. For AI actors there is an additional control: AI governance decides which AI models each level may use, and interactions are logged.
Does your org chart fit the six levels?
Most groups map onto GLOBAL, COMMAND, ORG, OPS, FIELD and NODE more cleanly than they expect. Send us the shape of yours and we will walk through it.
Questions people ask before they commit
What are the six levels of the VXCTRL org model?
GLOBAL, COMMAND, ORG, OPS, FIELD and NODE. GLOBAL is the whole enterprise and the owner or CEO sits there. COMMAND is a geography or command tier, such as a country. ORG is a brand or business unit. OPS is an operating group, such as a market, inside a brand. FIELD is a site or location, such as a store. NODE is an individual: a person, an AI agent or a machine.
How is visibility decided?
By position. Visibility flows down: you see your own node and everything below it, never sideways into a sibling brand. There is no setting to switch that off, because the boundary is a property of where you sit in the tree.
Can a brand lead see a sibling brand?
No. Two brands are sibling ORG nodes under the same COMMAND, and visibility never moves sideways between siblings. A brand lead sees their own ORG and everything beneath it, and nothing of the brand next to them.
Can someone manage a peer at their own level?
No. Management is strictly downward: you can manage below you, not at your own level. Two people at the same level cannot manage each other, which means a promotion or a grant has to come from above rather than sideways.
Is an AI agent a different kind of thing in the tree?
No. A NODE is an individual, and that individual can be a person, an AI agent or a machine. All three sit at the same level of the model and are governed by the same reach rules. AI governance adds a further control over which AI models each level may use.
How does a global restaurant group map onto the six levels?
The group is GLOBAL, each country a COMMAND, each brand an ORG under every country it trades in, each market an OPS, each store a FIELD, and every person, AI agent and machine a NODE: a crew member, a drive-thru ordering agent, the employee laptop, the POS terminal, the kiosk, the kitchen robot.
Why six levels rather than four?
Because a real multi-brand group needs a geography or command tier above the brand, and a site or location tier below the operating group. The six-level model: GLOBAL, COMMAND, ORG, OPS, FIELD, NODE. It is the current model and it is the one the product enforces.