Before getting into the architecture, it’s worth being blunt about something the architecture doesn’t answer on its own: not every vendor is going to make this jump.
That’s not a hypothetical concern. It’s a pattern with a name attached to it every time software has gone through a step change like this before. WordPerfect was the dominant word processor of the DOS era—genuinely dominant, not a close second. When Windows arrived and reset how software was supposed to work, Microsoft rebuilt Word natively for the new platform, while WordPerfect was slow to follow. By the time WordPerfect caught up, Word had already taken the category, and it never really got it back. The lesson isn’t that WordPerfect was a bad product. It’s that surviving one platform transition doesn’t guarantee surviving the next one, and the vendors who don’t make the jump rarely announce it in advance.
The question worth asking your FMS vendor isn’t whether they’ll say they have an AI strategy. It’s whether they’ll actually make the investments and shift in architecture needed to get there.
With that in mind, here’s the architecture behind the shift, and it’s the single most useful mental model for evaluating any FMS vendor’s AI story right now. The same three-layer structure shows up across most agentic AI frameworks, not just in self-storage software.
Picture a secure gateway to the outside world, called an MCP server, and behind it, three stacked layers:
- At the top an agentic layer that talks to the MCP Server, where agents plan, orchestrate, and execute;
- In the middle a context layer, which translates external requests for data into instructions for where the underlying data is stored; and
- At the bottom, the system of record as the foundation, where the underlying data itself lives;
Whatever AI agent an operator brings to the table—Claude, ChatGPT, Gemini, or a custom-built tool—it should interface exclusively with the MCP server. The MCP server then relies on the 3-layer architecture underneath to properly respond to the external AI agent.
MCP stands for Model Context Protocol, a documented, standardized way for an outside AI agent to securely connect to internal software and either query its data or, as this matures, take action within it, instead of relying on a one-off integration built and maintained separately for every AI tool a vendor wants to support. The MCP server isn’t bolted on next to the platform—it is the platform’s front door, and ideally its only one. Everything else sits behind it, out of reach from the outside.
Now let’s examine the three layers of the agentic architecture more closely.
1. The System of Record
At the bottom sits the system of record: structured data, an audit trail, and compliance. This is what an FMS already stores today—every lease, every ledger entry, every delinquency status, and every gate log.
But “the FMS already stores this” is doing a lot of quiet work in that sentence, and it’s worth pulling apart, because not every FMS stores it the same way—and the differences matter enormously once an agent, rather than a person reading a screen, is the one relying on that data.
A few honest questions worth asking about any system of record, including Monument’s:
- How well-architected is the underlying structured data? Is “delinquent” a real, timestamped, queryable field the moment a payment fails, or something reconstructed after the fact from notes and exports?
- Can you define a set of facilities—a region, a brand, a risk tier, an acquisition vintage—and take one action across that entire set? Or does every report, every rate change, and every automation rule have to be built and re-run facility by facility?
- Can the platform run cash-basis and accrual-basis accounting on the same underlying transaction at the same time natively—or does someone maintain a shadow ledger in a spreadsheet to satisfy an auditor once a quarter?
- Is a lien-processing timeline tracked as a structured, jurisdiction-aware field, or as a date someone has to remember to check against a state statute?
- Is churn sensitivity—how a specific tenant is likely to respond to a specific rent increase, based on tenure, payment history, and past response—captured as structured data at all, or does it live entirely in a regional manager’s head?
Monument’s answers to these are architectural choices, not afterthoughts. Navigator exists specifically so a portfolio segment—not a single facility—is the set an operator can report on and act on. Native accrual accounting runs alongside cash accounting on the same transaction, not as a parallel reconciliation project. Lien compliance stages are structured by state inside the platform, not tracked separately in someone’s calendar. And a lot of what most FMS platforms treat as tribal knowledge—churn sensitivity, delinquency-linkage concentration, and ECRI eligibility—is exactly the kind of thing Monument’s system of record was built to capture as structured data from day one, because a reliable KPI can’t be built on top of a note field.
These questions also highlight the gap most legacy platforms haven’t closed—not because they couldn’t, but because nobody needed a machine to read that data directly until now. A report a person reads can tolerate a little inconsistency; a person fills in the gaps without even noticing. An agent can’t. Structured data that’s ninety percent clean is unusable to an agent in exactly the situations where being wrong is expensive: a lien notice, a large ECRI batch, and an investor report.
Self-storage software built for
high-performance operators
2. The Context Layer
In the middle layers of the agentic architecture sits a context layer: who the user is, what they’re permitted to see, and what the business rules actually mean. This is the layer that turns raw data into something an agent can act on safely—and it’s the layer most FMS vendors, including some very established ones, have done the least deliberate work on.
This happens to be where Monument has spent the most deliberate effort of any part of the platform, and for longer than “agentic AI” has been a phrase anyone used. Monument’s Insights module—more than 100 business graphs that interpret raw data into actionable analytical insights, spanning operations, leasing, revenue management, and investor reporting—took more than three years to build, and building it was never really a reporting project. It was a context-layer project that happened to produce reports as a side effect. Every one of those 100+ graphs required Monument to answer a question:
- What does this number actually mean?
- How is this calculated?
- Whom rolled up across which segment, consistently, across every facility and every ownership structure in a portfolio?
That’s not a data-visualization problem. That’s the definitional work—user identity, permissions, business rules, domain knowledge—that any serious agentic architecture needs underneath it, except Monument was doing it years before anyone called it a context layer. The semantic layer that now sits underneath Monument’s MCP Server, giving any connected AI assistant a consistent read on the data, isn’t a new project bolted on for AI. It’s the same context-layer work insights already required, now exposed to a different kind of user.
3. The Agentic Layer
A system of record stores what happened. A system of action determines what happens next.
Data flows up through the layers of the agentic stack: the system of record feeds the context layer, which feeds the agentic layer on top. Action flows back down: the agentic layer acts on the context layer, which acts on the system of record. It’s a closed loop, not a one-way replacement of what came before.
This 3-tiered closed loop communicates with the outside world through the MCP server, whose job is to create a secure, authenticated connection between the internal systems and an outside AI agent—in Monument’s case, between Monument and whatever AI assistant an operator connects, whether that’s Claude, ChatGPT, or Gemini. The operator’s login credential is never handed to the AI itself: Monument’s MCP server holds that credential and manages authentication on the operator’s behalf, which is what makes the connection secure in the first place. It also means the AI agent can only ever see that operator’s own portfolio data—never another customer’s, and never a shared pool of data across accounts. It’s a direct, secured line between an operator’s AI agent and their own data, and nothing more.
It’s tempting to assume every established FMS vendor already owns the bottom two layers by default, simply by virtue of having been around a while. That assumption doesn’t survive contact with how most self-storage software was actually built. A lot of legacy platforms have a system of record that’s structurally shakier than it looks from the login screen—occupancy figures that don’t reconcile cleanly across facilities, delinquency tracked partly in free-text notes, one calculation for a single-facility report and a slightly different one for a portfolio rollup. And on the context layer specifically, most FMS vendors have done very little deliberate work at all. What context they do have is almost always implicit—logic baked into a report template that one engineer understands, rather than defined once, documented, and applied consistently everywhere. Implicit context that lives in someone’s head, or in a decade-old report query, isn’t the finish line. It’s step one of what has to be a ten-step process before an agent can be trusted to act on top of it.
Owning the bottom two layers of the agentic architecture isn’t a historical inevitability that comes with tenure. It’s a body of work—and not every vendor has actually done it.