TrustSecurity and governance
Security and control, built for finance teams on SAP
Agents read by default, stage drafts and leave every approval to your people. Your data is protected and is never used to train models.
Free · 30 minutes. You leave knowing whether an agent fits your process.
- SAP user created by your IT teamRevocable
- Read-only by defaultOn
- Drafts, not postingsOn
- Named approver on money and customersOn
- Every action loggedOn
- Model training on your dataNever
01Access
How agents access your SAP
A user your IT team creates
Agents connect to your SAP through a user your IT team creates and can revoke, with only the permissions you grant.
Read-only by default
A new agent can read. It writes nothing until you decide it should.
Drafts, not postings
Where an agent writes to your ERP, it stages drafts. People approve, post and release.
02Data
How your data is protected
Run in the Corpogents cloud
Agents run in the Corpogents cloud and connect to your SAP through the user your IT team can revoke.
Encrypted, and least privilege
We apply encryption in transit and at rest, access controls and least privilege.
Under a data processing agreement
Data from your systems is processed under a data processing agreement, in line with the data protection law that applies to you, including the GDPR where it applies.
Never used to train models
We never train models on your data.
03Control
People stay in control
A named person approves
Payments, postings and customer messages always need a named person’s approval.
Separation of duties
Where your controls need it, the person who sets the rules can be kept apart from the people who approve transactions.
Rules you can read
Tolerances, approval limits and tax treatments are settings your controllers can see and change, and each change is recorded.
04Audit
A complete record
Every step an agent takes is logged, and your auditors can review it.
- Every read and every check
- Every draft and every hold
- Every approval and every override
- Who, what, when and the reason, for each
05Governance
AI that proposes, people who decide
- 01
The AI reads and proposes
The rules your controller signs check every result before it goes anywhere.
- 02
Mistakes are caught at the draft
Agents make mistakes, as people do. A person catches them at the draft, before they reach your books.
- 03
You can switch an agent off
Revoke its access at any time, and your team carries on in SAP as before.
07FAQ
Questions from IT and risk
Where do the agents run?
Agents run in the Corpogents cloud and connect to your SAP through a user your IT team creates and can revoke, with only the permissions you grant.
Can we revoke an agent’s access?
Yes, at any time. Your IT team creates the agent’s SAP user and can revoke it. Because the agent stages drafts rather than running your process inside a separate system, your team can carry on in SAP exactly as before.
Is our data used to train AI models?
No. We never train models on your data.
Who can see our data?
Data from your systems is processed under a data processing agreement. We apply encryption in transit and at rest, access controls and least privilege, and the agent can only reach what the permissions you grant allow.
What happens if an agent makes a mistake?
It is caught at the draft, because a person approves every posting, payment and customer message. The correction is logged with the reason, and if it should become a rule, the change goes to your controller first.
Can you complete our security questionnaire?
Yes. We provide a security overview and a data processing agreement, and we answer your questionnaire in writing.
NextBook a demo
See the controls working on a real process
In the demo we show an agent at work, then open the approval queue and the audit log so your finance and IT leads can see exactly what is recorded.
Free · 30 minutes. Bring your controller, and IT if they’d like to see the audit trail.