Most AI connected to an ERP is either a demo or a liability. This one works from a fixed, published list of lookups, verifies the customer before anything account specific is released, and can raise only three kinds of document. Every request is checked against two levels of permission at the moment it runs, and recorded either way.
Ten lookups, written in advance and published here in full. If a question is not on this list, the agent cannot ask it.
On-hand and available quantity, optionally by warehouse, resolved with B1's own committed and on-order logic.
The status and detail of a sales order, plus every outstanding order for that customer.
Estimated delivery date and current status, so nobody has to promise a date they cannot see.
Where an open service call or support request has actually got to.
Anything touching money, pricing or an account balance is released only after the customer verifies their identity. That requirement cannot be switched off, by you or by us.
Account summary, balance and credit detail for the customer on the line.
Customer-specific pricing, drawn from their price list and special prices rather than the number everybody else sees.
Invoice detail, and a list of anything unpaid or partially paid.
Each one is confirmed with the customer before it is raised, and each one can be reversed by a person afterwards.
Raise a sales quotation from the conversation. Cancelled the same way any other quotation is.
Place the order they just confirmed, with the total and delivery detail read back first.
Log a credit or return against the right document, with the reference given back before the conversation ends.
Most of the following is not a policy we apply. It is a thing the system cannot do.
A small Windows service inside your network makes one outgoing encrypted connection. No inbound firewall rule is opened on your side.
The SAP database password is entered and encrypted on your own machine. It does not reach the cloud, and we never handle it.
Every lookup is pre-written with parameters filled in. The whole class of problem where an agent improvises a damaging query does not exist here.
Revoke the connector certificate and the live connection closes within a second. Permissions are re-checked on every request, not just at setup.
We create the company record and point it at the Business One database it will read.
One command with a single-use pairing code. The certificate is generated on your machine and the database password is entered there, both by design.
Which of the lookups this company may use at all, before any agent is granted a subset of them.
Your admin takes ownership and decides which agent gets which capabilities.