Skip to content
Back to case studies

Pat: An AI Agent That Works Across Our Business

How an internal AI agent retrieves information, prepares routine work and coordinates approved actions across business systems while people retain authority.

Xian Hui

Xian Hui

11 August 2026

Quick answer

How can an internal AI agent work across business systems?

An internal AI agent gives employees one route into several business systems. It can retrieve records, combine information and prepare or perform permitted actions without requiring the employee to navigate each application. Defined permissions, approval rules and action logs keep financial, contractual and other consequential decisions with the responsible people.

Pat: An AI Agent That Works Across Our Business

Routine work becomes expensive when employees must navigate several systems to answer one question or complete one task. Preparing an invoice may require customer details, agreed pricing, the contract and previous accounting records. Checking a payment may require another sequence across the customer record and accounting system.

Each application can perform its own function, but the employee still joins the process together. The work is slow because people repeatedly locate records, reconcile identifiers, transfer information and remember which approval applies.

An internal AI agent provides one controlled route across those systems. It retrieves information, prepares the permitted next step and sends exceptions to the responsible person.

Why does work slow down between business systems?

Business information is usually divided by function. Customer relationship management holds contacts and commercial history, the accounting system holds invoices and payments, and document storage holds contracts and correspondence.

A simple request can therefore involve several searches. The employee must establish that records in different systems refer to the same customer, decide which source governs each field and assemble the result before acting.

The repeated workload commonly includes:

  • locating the relevant customer and contract
  • retrieving pricing, invoices and payment records
  • comparing information held in different systems
  • preparing the transaction or follow-up for review

This fragmentation also affects connected accounting processes. A month-end closing workflow may depend on records prepared elsewhere, while client onboarding and KYC produces information that later supports billing and service delivery.

Why do existing applications not solve the whole problem?

Search within one application only covers the information held there. Integrations can move defined fields between systems, but they usually require a known trigger and a fixed sequence.

Traditional workflow automation remains appropriate for predictable work. A rule can send an invoice reminder after a defined period or create a task when a status changes. It is less suitable when a colleague asks why a customer’s claimed payment does not appear against the expected invoice.

A general chatbot has the opposite limitation. It can interpret the question, but without controlled connections it cannot retrieve the underlying customer, contract and accounting records or carry out an approved action.

The internal agent combines interpretation with defined system tools. It complements fixed automation rather than replacing the applications, databases and controls that already govern the work.

How does Pat process a request?

A team member asks Pat a question in ordinary language, such as whether a customer has paid its latest invoice. The agent identifies the customer, retrieves the relevant invoices, checks payment records and presents the result with the sources used.

For invoice preparation, the sequence is mechanical:

  1. identify the customer and approved billing arrangement
  2. retrieve the billing period, pricing and previous invoices
  3. calculate and prepare the proposed invoice
  4. run the defined checks and request approval where required
  5. create the invoice only after the workflow permits the action

The same pattern can prepare an overdue account summary, draft a customer follow-up or create an internal task. Where high-volume transactions must enter an accounting platform, a separate accounting data pipeline remains the appropriate mechanism.

Conversation with the internal agent. A single question about whether a customer has paid its latest invoice returns one combined answer: an earlier invoice of S$6,300 settled on 26 July, and a later invoice of S$12,100 still outstanding and 12 days overdue. Beneath the answer, the steps the agent took are listed — identifying the customer in the customer records, retrieving invoices from the accounting system, checking payments and calculating the amount outstanding — each naming the system it used and how long it took.

How are knowledge, actions and permissions separated?

The agent needs separate authority to read information and to change it. Access to an invoice does not by itself grant authority to create, amend or send one.

WorkInformation the agent retrievesPermitted preparation or actionHuman responsibility
Account enquiryInvoices, payments and customer recordsAssemble the account positionDecide any customer response
Invoice preparationContract, pricing and billing historyPrepare or create an approved invoiceResolve unusual billing terms
Customer follow-upOutstanding items and contact detailsDraft a messageApprove what is communicated
Internal administrationPolicies, records and documentsPrepare a standard document or taskReview exceptions
System updateExisting record and authorised fieldsApply a permitted updateApprove restricted changes

Permissions should follow the user’s role and the controls of the underlying systems. The agent should record the request, records consulted, checks performed, action taken and approval received.

The National Institute of Standards and Technology AI Risk Management Framework places governance, measurement and management around AI use. The UK National Cyber Security Centre’s guidelines for secure AI system development also address secure operation, access controls, logging and monitoring.

Agent permission board setting out every connected system as a row, with what the agent may read, what it may change on its own and what it may only prepare for a person to approve, alongside the roles each permission applies to and a note that actions with financial or contractual consequences always require approval.

When should the agent stop and ask for a decision?

Defined checks determine when the workflow can continue. The agent should stop where a contract has expired, pricing conflicts across systems, information is missing or an action requires authority it does not hold.

It should present the relevant evidence rather than conceal the uncertainty. For an invoice, that may include the retrieved contract terms, previous billing, proposed amount and failed check.

This handover keeps judgement with the responsible employee. It also creates a record of why the agent stopped, who resolved the issue and what action followed.

Prepared invoice held for approval, showing the pricing the agent retrieved and the checks it ran against the contract, previous periods and the customer record. The draft comes to S$9,600 where the last three months averaged S$3,200, so that check has failed and the contract renewal check is also flagged. The agent has stopped rather than creating the invoice, explained what it found, and asked the team member to confirm the treatment.

What does one internal agent change?

The agent reduces repeated navigation and data transfer without removing the systems that hold authoritative records. Employees ask for the work they need, while the agent handles the permitted retrieval and preparation across applications.

The practical benefit comes from shortening the path between a request and a controlled result. Clear permissions, fixed checks, approval points and action logs remain necessary because the agent coordinates work; it does not assume accountability for it.

Backbone helps accounting and finance teams build internal agents around their existing systems and controls — while keeping financial, contractual and operational decisions with the responsible people.

Frequently asked questions

This information has been prepared for general informational purposes only and is not intended to be relied upon as accounting, tax, or other professional advice.

Related articles

Ready to make accounting easier?