Productizing AI Inside the ERP
AI-to-ERP value comes from repeatable tools, governed access, and structured outputs CFOs and controllers can use.
The question is why an AI assistant should connect to an ERP system at all. It is not because chat is a better interface for every task. It is because many operating decisions depend on structured financial, customer, vendor, item, and transaction data that already lives inside the ERP. If that data can be queried, summarized, and returned in a repeatable format, the assistant becomes less of a novelty and more of an operating layer.
What is at stake is not simply whether a sandbox connection works. The deeper question is whether the work can be turned into a repeatable system. A one-off integration may help one client once. A productized tool can help many clients run the same analysis, produce the same output shape, and trust the same method.
First principles matter here. ERP systems are designed around controls, permissions, records, and auditability. AI systems are designed around interpretation and generation. The useful work sits between them: constrained access, structured retrieval, predictable outputs, and tools that encode the judgment of operators who know what CFOs and controllers actually need.
The sandbox is not the strategy
The immediate milestone was practical: approval had been received to connect an AI assistant to a client sandbox environment. The connection was completed ahead of the strategy discussion, which changed the tone of the meeting. Instead of asking whether access was possible, the team could ask what should be built next.
That shift is important. Once the basic bridge exists, the conversation moves from installation to operating design:
- Which role should the assistant use?
- What permissions should it have?
- Which records should it be able to read?
- What outputs should it produce?
- How should custom tools be deployed and maintained?
- Which buyer has a painful enough problem to pay for the solution?
The standard setup path was clear enough to begin. Create an AI role based on a finance-oriented, view-only role. Install the ERP AI suite or equivalent package. Keep permissions narrow. Use the sandbox to test retrieval, behavior, and output reliability before anything approaches production.
That is a reasonable implementation path. But it is not yet a business strategy. The strategy begins when the team can define reusable tools, deploy them predictably, and describe the value in terms a CFO or controller recognizes.
Custom tools are the product boundary
The central technical tension was around custom tool deployment. The confirmed path appeared to be through the ERP development framework. That may be the right path, but it creates friction. It is more formal, less transparent to non-developers, and not yet fully understood by the strategy lead.
The team was still exploring whether a simpler path exists. Could tools be loaded through a file cabinet? Could they live in another directory? Is there a lighter deployment method for sandbox testing before formal packaging?
This matters because the custom tool is where the product begins to take shape. In this context, a custom tool is not just a script. It is closer to a defined skill: a JSON-based instruction and schema that tells the assistant how to perform a narrow task and return a structured result.
For example, instead of asking an assistant to generally analyze receivables, a tool could be designed to return:
- Customer balances by aging bucket
- Material changes since the prior period
- Disputed invoices separated from standard overdue balances
- Top exposure accounts with notes-ready summaries
- A JSON output that can feed a dashboard, memo, or workflow
The value is not that the assistant can produce prose. The value is that it can produce the same structured output every time from the same controlled data source, without requiring the user to understand joins, saved searches, or complex platform queries.
Repeatability is the core value proposition
ERP clients do not mainly need more ways to ask questions. They need repeatable operational outputs. The assistant is useful when it lowers the cost of producing those outputs without weakening controls.
A CFO does not want a surprising answer. A controller does not want an elegant but untraceable summary. They want a reliable path from source records to decision-ready information.
That points to a product design principle: build tools around recurring jobs, not open-ended curiosity.
Good candidates include:
- Month-end variance explanations
- Cash position summaries
- Revenue recognition exception lists
- Vendor payment prioritization
- Customer credit exposure reviews
- Inventory risk summaries
- Project margin alerts
- Budget-to-actual commentary packs
Each of these jobs already exists in some form. Today, the work may be spread across saved searches, exports, spreadsheet formulas, manual review, and narrative writeups. The product opportunity is to compress that chain into a controlled tool that produces structured data and, where appropriate, a draft explanation.
This also makes the sales motion clearer. The buyer is not purchasing an AI assistant in the abstract. They are purchasing fewer manual cycles, cleaner recurring analysis, and a faster close or review process.
The ERP platform sets the constraints
The team’s uncertainty about deployment is not a side issue. It is the shape of the work.
When building inside an ERP platform, the platform decides what is easy, what is hard, and what is allowed. Permissions, bundles, file storage, scripts, roles, tokens, and development frameworks all become product constraints.
A useful strategy accepts those constraints early. It does not design an imagined tool in isolation and then discover that deployment is fragile. It maps the platform first:
Access model
The assistant should operate through a defined role, not a broad administrator account. View permissions are often enough for early reporting tools. If write actions are introduced later, they should be separated by workflow, approval, and logging.
Deployment path
If the development framework is the only confirmed path for loading custom tools, then it should be documented and tested as the default. If file cabinet or directory-based methods are possible, they should be evaluated as secondary paths, not assumed.
Output contract
Every tool should have an expected output schema. The schema is part of the product. It lets downstream workflows consume the answer, compare runs over time, and detect malformed responses.
Error handling
The assistant should not improvise when records are missing, permissions are insufficient, or queries fail. It should return clear status fields and explain what it could not access.
Auditability
For finance users, the answer is not enough. The path to the answer matters. Tools should include source references where possible: record IDs, date ranges, subsidiaries, accounts, filters, and assumptions.
Market signals matter, but they do not replace design
An integration vendor’s AI platform was flagged during the discussion as a relevant signal. It is already advertising MCP-based connections that allow clients to chat with data across systems. MCP, in simple terms, is a way for AI assistants to connect to external tools and data sources through a standard interface.
That signal matters because it shows where the market is moving. Clients will increasingly expect AI interfaces to sit across ERP, CRM, data warehouses, and operating systems. They will ask why they cannot simply chat with their business data.
But broad connectivity is not the same as operational usefulness. The hard part is not only connecting systems. It is defining the questions, permissions, data models, and outputs that make the connection valuable.
For a CFO or controller, the better promise is not chat with everything. It is repeatable answers to important operating questions, produced from governed systems, in a format the business can use.
Two tracks should run in parallel
The meeting landed in the right place: continue exploring the technical deployment path while beginning the productization work. These tracks should not wait on each other.
The technical track should answer a short list of practical questions:
- What is the confirmed method for deploying custom tools?
- Can tools be loaded or updated without a full development framework deployment?
- How are tool definitions versioned?
- Where do logs and errors live?
- Which permissions are required for the first three use cases?
- What changes between sandbox and production?
The product track should define the first sellable tool set:
- Buyer: CFO, controller, or finance operations lead
- Job: a recurring analysis or close process
- Input: ERP records and filters required
- Output: JSON schema, table, and optional narrative
- Control: role permissions, source references, and review steps
- Packaging: implementation time, maintenance model, and price logic
The mistake would be treating the sandbox connection as the accomplishment. It is only the opening move. The more durable work is turning patterns into tools and tools into a package.
A practical first product
A strong first product should be narrow enough to build and valuable enough to matter. One candidate is a finance review pack for controllers.
The assistant could run controlled tools that return:
- Open receivables by aging bucket
- Payables due by payment window
- Unusual account movements month over month
- Large transactions above a threshold
- Missing classifications or incomplete records
- Draft commentary for review, tied to source records
This is not a replacement for the controller. It is a compression layer for preparation. The controller still reviews, edits, and decides. The tool reduces the manual assembly burden and creates a more consistent starting point.
The same pattern can then be extended. Once the team has a deployment path, output schema, role model, and review workflow, each new tool becomes easier to build. Productization is the accumulation of these repeatable decisions.
Ultimately, the AI-to-ERP connection is valuable because the ERP is where the business records live. But the connection alone does not create leverage. Leverage comes from the tools that sit on top of the connection and turn governed data into repeatable operating outputs.
What this means for teams building in this space is simple: do not start with the broadest possible assistant. Start with the most repeatable job. Define the role, the records, the schema, the deployment path, and the review process. Then make that pattern easier to install the next time.
The takeaway is that productizing AI inside the ERP is less about conversation and more about operating discipline. The assistant matters when it can do constrained work, return structured results, and fit the way finance teams already control the business.