The workflow

Watch this workflow run through Kroy.

  1. The request.

    “Kroy Artifacts”

  2. Who is asking.

    Kroy identifies the person in client services and Claude acting for them, within the delegation they gave it.

  3. Only what the task needs.

    Kroy retrieves profit and loss, balance sheet and aged debtors for the month (Xero), budget for the year (SharePoint) and prior month’s approved pack (Kroy Artifacts) from Xero and SharePoint.

  4. Excluded by design.

    Individual payroll and salary detail, Internal manager notes about the client and Other clients never reach Claude. That boundary is Kroy’s, not an instruction to the AI.

  5. The proposed action.

    Permitted: read reports (xero.reports.read), read the budget file (sharepoint.file.read) and create a draft pack (artifact.create).

  6. What Kroy refuses.

    Refused: share the pack with the client before approval, edit an approved pack and read individual salaries.

  7. A person decides.

    A manager approves each pack before it reaches the client’s Channel.

  8. State changes. Everything is recorded.

    The work is updated in Kroy, and every request — allowed or refused — is written to the audit trail.

Claude
Client services
Kroy
Xero
SharePoint
Read reports
Share the pack with the c…
! Approval
AUDIT · STATE

Retrieved

  • Profit and loss, balance sheet and aged…
  • Budget for the year (SharePoint)
  • Prior month’s approved pack (Kroy Artif…

Excluded

  • Individual payroll and salary detail
  • Internal manager notes about the client
  • Other clients
Claude
Client services
Kroy
Xero
SharePoint
Read reports
Share the pack with the c…
! Approval
AUDIT · STATE

Retrieved

  • Profit and loss, balance sheet and aged…
  • Budget for the year (SharePoint)
  • Prior month’s approved pack (Kroy Artif…

Excluded

  • Individual payroll and salary detail
  • Internal manager notes about the client
  • Other clients
Preparing a management accounts pack with Claude and Xero: the workflow through Kroy. The request.. Who is asking.. Only what the task needs.. Excluded by design.. The proposed action.. What Kroy refuses.. A person decides.. State changes. Everything is recorded..

What the AI can and cannot do

Data accessed

  • Profit and loss, balance sheet and aged debtors for the month (Xero)
  • Budget for the year (SharePoint)
  • Prior month’s approved pack (Kroy Artifacts)

Data excluded

  • Individual payroll and salary detail
  • Internal manager notes about the client
  • Other clients

Actions permitted

  • Read reports (xero.reports.read)
  • Read the budget file (sharepoint.file.read)
  • Create a draft pack (artifact.create)
  • Request approval (approval.request)

Actions refused

  • Share the pack with the client before approval
  • Edit an approved pack
  • Read individual salaries

Human approval required

  • A manager approves each pack before it reaches the client’s Channel

Business situation

A London accountancy practice prepares monthly management accounts for ABC Limited. Each month a manager pulls the profit and loss, balance sheet and aged debtors from Xero, compares them with the budget the client keeps in SharePoint, writes a page of commentary and sends the pack to the director.

Why existing tools alone are insufficient

An AI can write sensible commentary on a set of figures, but it has to be given the figures first — usually by pasting them into a chat. Once written, there is nothing to stop a draft reaching the client before anyone has checked it. And a direct Xero connection would expose payroll detail the client’s director is entitled to, but the practice’s assistant does not need.

Systems involved

  • Xero — the month’s reports.
  • SharePoint — the client’s budget.
  • Kroy Artifacts — the draft and approved packs.
  • ABC Client Channel — where approved packs appear for the client.

Kroy architecture

Claude connects to Kroy. Xero and Microsoft 365 are connected to Kroy by the practice. The Prepare Management Accounts Skill may read reports and the budget, create a draft pack and request approval. Publishing an approved pack to ABC Limited’s Channel is a separate step that requires a manager’s approval. Kroy holds every credential.

Workflow

  1. The manager asks Claude: “Prepare ABC Limited’s management accounts for last month.”
  2. Kroy checks the manager, the agent, the client and the Skill, then returns the reports via xero.reports.read and the budget via sharepoint.file.read. Wages are returned as a total; individual salaries are excluded.
  3. Claude compares actuals with budget and the prior month, and drafts commentary on the main movements.
  4. Claude requests artifact.create. Kroy saves the draft pack, linked to ABC Limited and the month.
  5. The manager asks: “Send it to John.” Claude requests publication to the client Channel. Kroy refuses: the pack has not been approved.
  6. Claude requests approval.request. The manager reviews the draft, edits one paragraph and approves.
  7. Kroy publishes the approved pack to the ABC Client Channel. John is notified.

Agent permissions

Claude acts under the manager’s delegation and within the Skill. It can draft and request approval. It cannot approve, publish or edit an approved pack.

Human permissions

The manager approves packs for their clients. A partner can see every pack’s status. The client’s director sees only approved packs in the client Channel.

State changes

  • A draft pack Artifact is created, then moves to Approved.
  • The approved version is added to the ABC Client Channel.
  • The month’s reporting task for ABC Limited is marked complete.

Audit outcome

Kroy records the reports read, the draft, the refused attempt to share before approval, the approval and the publication — each with the person, the agent and the policy.

External sharing

The approved pack appears in ABC Limited’s Channel. If the director uses their own AI, it can answer questions about the approved pack and nothing else. See a client using their own AI.

Security considerations

  • Approval is enforced by Kroy, not requested of the AI.
  • The client projection carries approved packs only — never drafts or internal notes.
  • Salary detail is outside the Skill.

Setup requirements

  • ABC Limited as a client entity in KroyDB, with a client Channel.
  • Xero and Microsoft 365 connected to Kroy.
  • Claude connected to Kroy.
  • The Prepare Management Accounts Skill enabled, with approval required for publication.

Try this with your own systems.

Try this with your practice