AI finance agents and human approval: who decides what

What an AI finance agent does

An AI finance agent is software that works on your accounting data on your behalf. It connects to your ledger (Xero, QuickBooks, Sage or FreeAgent), reads the figures, and does three kinds of work:

• Answers questions in plain English: how much cash you have, why margin moved, which customers are late.
• Spots things: a bill that looks duplicated, an unreconciled bank line, a cost that jumped.
• Prepares work: a chase message to a late customer, a journal to spread a prepayment, a board minute for a dividend.

The first two only read your data. The third is where approval comes in, because prepared work can change your records or leave the business.

Why approval matters in finance

Your books are a formal record. Figures in them feed tax returns, payroll, lender reports and statutory accounts, so a wrong entry does not stay in one place. An AI agent can also misread context: a refund can look like a duplicate payment, and a one-off cost can look like a trend.

There is a security reason too. Supplier invoices, bank references and emails are text written by other people. Anthropic’s guidance on connectors warns about prompt injection, where hidden instructions in data try to steer an AI tool, and advises reviewing tool approval requests carefully. A human approval step is the control that stops a bad instruction or a misreading from becoming a posted entry.

Four levels of permission

Most of the value sits in the first three levels. The fourth removes the person from decisions that carry legal and financial weight.

What good approval looks like

• You see exactly what will change before you say yes: which accounts, amounts and dates.
• Approval is per item, not a blanket permission for the agent to do whatever it decides.
• Money stays with you. The agent cannot pay suppliers, move money or file returns.
• Messages go from you. A chase email is approved and then sent from your own email, not by the agent.
• There is a record of what was approved and when, so an entry can be reviewed and reversed.
• The right person approves. The person approving should have authority for that kind of entry.

How Nella handles it

Nella works as a team of nine AI seats: Finance Director, Management Accountant, Financial Controller, Treasury, Receivables, Payables, Tax & Compliance, Payroll and Company Secretary. Each reads your connected ledger and answers questions in its area, on the web, WhatsApp, ChatGPT and Claude.

The seats prepare the work. You approve it. Nella changes your books only through an entry you approve on Nella’s card, which shows the entry before it posts. Nella files nothing, pays nothing and moves no money. It sends no messages: you send each approved chase message from your own email. When a question needs professional judgement, such as a tax decision, Nella says so and points you to a qualified accountant. How the connection and your data are protected is set out on the security page.

Example · illustrative figures

Late customers. Receivables finds three invoices past terms, worth £10,900 together, and drafts a chase message for each. The owner edits the wording on one, approves all three and sends them from the business email. Nothing went out until the owner chose to send it.

A prepayment. The Financial Controller notices a £2,400 annual software subscription paid in January and booked to one month. It prepares a journal to spread the cost at £200 a month. The card shows the accounts, the amounts and the 12 monthly releases. The owner approves it and the journal posts to the ledger.

What approval does not replace

Approval controls what changes in your records. It does not make a judgement for you. Whether a cost is allowable for tax, how to pay yourself, or which scheme applies are questions for your accountant. Nella shows the figures and the timing so that conversation starts from the facts.

Related: Using ChatGPT with your accounting data and Using Claude with your accounting data.

Sources

• Claude Help Center: Get started with custom connectors using remote MCP
• Model Context Protocol specification: Authorization

Nella provides financial information and education, not accounting or tax advice. Nella shows you the numbers. When a question needs professional judgement, such as a filing or a tax decision, Nella says so and points you to a qualified accountant.