The workflow

Watch this workflow run through Kroy.

  1. The request.

    “Board Channel”

  2. Who is asking.

    Kroy identifies the person in finance and Claude acting for them, within the delegation they gave it.

  3. Only what the task needs.

    Kroy retrieves monthly management accounts (Xero), pipeline summary (Salesforce) and headcount and operating measures (KroyDB) from Xero, Salesforce and SharePoint.

  4. Excluded by design.

    Individual salaries, Transaction-level ledger detail, for directors and Draft packs, for directors never reach Claude. That boundary is Kroy’s, not an instruction to the AI.

  5. The proposed action.

    Permitted: read reports (xero.reports.read, salesforce.report.read), create the draft pack (artifact.create) and request approval (approval.request).

  6. What Kroy refuses.

    Refused: share the pack before approval, give directors ledger-level detail and edit the approved pack.

  7. A person decides.

    The finance director approves the pack before it reaches the board Channel.

  8. State changes. Everything is recorded.

    The work is updated in Kroy, and every request — allowed or refused — is written to the audit trail.

Claude
Finance
Kroy
Xero
Salesforce
SharePoint
Read reports
Share the pack before app…
! Approval
AUDIT · STATE

Retrieved

  • Monthly management accounts (Xero)
  • Pipeline summary (Salesforce)
  • Headcount and operating measures (KroyD…
  • Previous board minutes and actions (Sha…

Excluded

  • Individual salaries
  • Transaction-level ledger detail, for di…
  • Draft packs, for directors
Claude
Finance
Kroy
Xero
Salesforce
SharePoint
Read reports
Share the pack before app…
! Approval
AUDIT · STATE

Retrieved

  • Monthly management accounts (Xero)
  • Pipeline summary (Salesforce)
  • Headcount and operating measures (KroyD…
  • Previous board minutes and actions (Sha…

Excluded

  • Individual salaries
  • Transaction-level ledger detail, for di…
  • Draft packs, for directors
Preparing a board pack with AI, and sharing it with the board: the workflow through Kroy. The request.. Who is asking.. Only what the task needs.. Excluded by design.. The proposed action.. What Kroy refuses.. A person decides.. State changes. Everything is recorded..

What the AI can and cannot do

Data accessed

  • Monthly management accounts (Xero)
  • Pipeline summary (Salesforce)
  • Headcount and operating measures (KroyDB)
  • Previous board minutes and actions (SharePoint)

Data excluded

  • Individual salaries
  • Transaction-level ledger detail, for directors
  • Draft packs, for directors

Actions permitted

  • Read reports (xero.reports.read, salesforce.report.read)
  • Create the draft pack (artifact.create)
  • Request approval (approval.request)

Actions refused

  • Share the pack before approval
  • Give directors ledger-level detail
  • Edit the approved pack

Human approval required

  • The finance director approves the pack before it reaches the board Channel

Business situation

ABC Limited’s board meets monthly. Before each meeting, the finance team collects the management accounts from Xero, the pipeline from Salesforce, headcount and operating measures, and the actions from the last meeting, and writes a pack. Two non-executive directors read the pack in advance and increasingly ask their own AI to help them prepare questions.

Why existing tools alone are insufficient

Assembling the pack by hand is slow and error-prone. An AI connected to everything could assemble it, but would also be able to share drafts, and non-executives’ own AI tools would receive the pack as an attachment with no boundary on where it goes next. The board needs the approved pack, not the ledger behind it.

Systems involved

  • Xero — management accounts.
  • Salesforce — the pipeline summary.
  • KroyDB — headcount and operating measures.
  • SharePoint — previous minutes and the action log.
  • Board Channel — where approved packs are shared with directors.

Kroy architecture

Claude connects to Kroy. Xero, Salesforce and Microsoft 365 are connected to Kroy by the finance team. The Prepare Board Pack Skill may read reports and create a draft pack. A board Channel carries a projection of approved packs and minutes only. Non-executive directors are guests in the Channel and can connect their own AI.

Workflow

  1. The financial controller asks Claude: “Prepare the board pack for this month.”
  2. Kroy returns management accounts via xero.reports.read, the pipeline via salesforce.report.read, operating measures from KroyDB and last month’s actions from SharePoint.
  3. Claude drafts the pack — financial summary, pipeline, people, and progress on actions — and saves it with artifact.create.
  4. The controller asks: “Send the draft to the board so they have it early.” Kroy refuses: the pack has not been approved.
  5. Claude requests approval.request. The finance director revises the commentary and approves the pack. Kroy adds it to the board Channel.
  6. A non-executive director asks their own ChatGPT: “What were the main reasons for the margin movement?” Kroy returns the approved pack, and ChatGPT answers from it.
  7. The director’s ChatGPT asks for the underlying Xero transactions. Kroy refuses: the board Channel’s projection contains approved packs, not ledger detail.

Agent permissions

Claude acts under the controller’s delegation and can read and draft. Directors’ AI acts under each director’s delegation, bounded by the board Channel.

Human permissions

The finance director approves each pack. Directors read the board Channel. The company secretary manages who is a guest.

State changes

  • A draft pack Artifact is created, then approved.
  • The approved pack is added to the board Channel.
  • Board actions from the pack are linked to the meeting.

Audit outcome

Kroy records each source read, the draft, the refused early share, the approval, each director’s access and the refused ledger request.

External sharing

Non-executive directors are guests in the board Channel. Their access can be ended at any time, for example when a term ends.

Security considerations

  • Drafts never reach directors; approval is enforced by Kroy.
  • Directors’ AI is bounded by the projection, not by the AI provider.
  • Credentials for Xero, Salesforce and Microsoft 365 stay in Kroy.

Setup requirements

  • Xero, Salesforce and Microsoft 365 connected to Kroy.
  • Claude connected to Kroy.
  • A board Channel with a projection of approved packs and minutes.
  • Non-executive directors invited as guests.

Try this with your own systems.

See Guest Access