Overview
We engineered an AI assistant for Odoo with a security-first architecture, so natural-language productivity does not come at the cost of access control.
Business challenge
Connecting a language model to an ERP risks bypassing permissions or executing unintended operations if the model is given direct access.
Requirements
- Natural-language and voice interaction
- No execution of model-generated code or SQL
- Respect access rights, record rules and companies
- Confirmation before changes
- Provider independence
- Complete audit logs
Solution architecture
User request goes to the AI provider, which can only return structured tool requests. A tool registry and policy layer validate allow-lists and permissions, a confirmation engine issues signed expiring pending actions, and only then does the ORM execute as the user.
Major features
- Floating assistant on every backend screen
- Search, create, update, archive and open records
- Model and field allow-lists
- Pending action confirmation
- OpenAI, Claude and compatible providers
- Audit and performance logging
Important workflows
- 1 Ask in natural language
- 2 Tool request validated
- 3 Confirm
- 4 Execute as user
- 5 Show result
Business impact
- Demonstrates a controlled pattern for AI inside ERP
- Common record operations available in plain language
Impact is described qualitatively. We do not publish performance figures without client-verified evidence and permission.