Skalable AI · Controls
Early accessKnow when a control breaks, not when the auditor finds it
Risk & Compliance AI monitors Dynamics 365 for the control failures that matter most: vendor bank account changes, duplicate invoices across companies, journal approvals, segregation-of-duties conflicts and high-risk payments. Rules run on your schedule, raise cases for the right owner and leave evidence behind every decision.
- Vendor bank account changedChange awaiting second reviewOpen
- Possible duplicate invoiceSame vendor and amount, two companiesAssigned
- Segregation of dutiesRole change creates a conflictEscalated
- Journal approvalPosted without required approverResolved
Built for
- CFOs and controllers
- Internal audit and control owners
- IT and security teams who manage Dynamics 365 roles
Works with
- Dynamics 365 Finance & Operations
- Dynamics 365 users, roles and legal entities
- In-app notifications and email
Availability
Early accessThe first release of core controls is complete. Early-access customers shape what ships next.
The problem
Periodic testing finds problems months after they happen
Sample-based control testing looks backwards. By the time a duplicate payment or an unauthorised bank detail change is found, the money has moved. Risk & Compliance AI checks continuously and puts each exception in front of the person who owns the control.
See it working
From monitoring rule to resolved case
1:45 video · Microsoft demo data · no sign-up · Open full size (opens a new tab)
A “vendor bank details change” rule is set up from a template, raises a case with its evidence, and the control owner places the vendor on hold.
More walkthroughs in the demo libraryWhat you get
What is included
- A library of core controls
- Start from templates for vendor bank account changes, cross-company duplicate invoices, journal approval validation, segregation of duties and high-risk payments.
- Deterministic rules, no guesswork
- Critical controls run as deterministic rules, manually or on a schedule. AI is only used where it is clearly scoped.
- Cases with owners
- Every exception becomes a case, reviewed in the app and actioned in Dynamics 365. Escalation is manual or automatic when an SLA is breached.
- Access follows Dynamics 365
- Users are imported from Dynamics 365, and case and rule visibility follows each person’s role and legal-entity access.
- Evidence by default
- Who created or changed a rule or case, and when, is recorded, and audit entries are synchronized back to Dynamics 365.
- Notifications that reach people
- In-app notifications and email when a case is raised, assigned or escalated.
Getting started
What you need, who does what, and how you judge it
- Prerequisites
- Dynamics 365 Finance & Operations
- A finance or audit owner who will review cases
- A sandbox to start in
- Setup
- Users imported from Dynamics 365, with roles assigned in the app
- Controls chosen from the library and configured to your thresholds and entities with the product team
- Evaluation
- Early access starts in your sandbox
- Scope and commercial terms agreed in writing before anything is configured
- Ongoing support
- Working sessions with the product team
- A direct say in the next release
Early access
What early access includes, and what it does not yet
The first release is complete. Early-access customers use it on their own Dynamics 365 Finance & Operations data and help shape what ships next.
Participants get
- The core control library configured for your environment
- Working sessions with the product team
- A direct say in the next release
Not included yet
- Evidence packs
- Rule versioning and rollback
- Approval workflows and bulk remediation
A good fit if you have
- Dynamics 365 Finance & Operations
- A finance or audit owner who will review cases and give feedback
- A sandbox to start in
Scope and commercial terms for early access are agreed in writing before anything is configured.
Rules and AI
Most of the value here is not AI, and that is deliberate
Deterministic, every time
- Critical control checks
- Scheduled and on-demand rule runs
- Case creation, routing and SLA escalation
- Evidence and audit logging
Where AI is allowed to help
- Clearly scoped assistance around the rules
- Never approving, overriding or deciding a critical control
How it works
Observe, evaluate, govern, remediate, prove
Connect
Import users from Dynamics 365 and assign roles and permissions in the app.
Choose controls
Pick controls from the library and configure them to your thresholds and entities.
Run
Rules run on demand or on a schedule against Dynamics 365 data, with no AI in the decision path for critical controls.
Resolve and prove
Cases go to the control owner, are actioned in Dynamics 365, and leave an evidence trail for audit.
Controls and governance
AI that cannot override your controls
Dynamics 365 remains the authoritative source of business data. The product does not replace ERP functionality; it watches it.
- Human approval remains mandatory for critical actions
- AI cannot independently approve or override a financial control
- Every risk is traceable and every decision is explainable
- Visibility is limited by Dynamics 365 role and legal entity
FAQ
Common questions
What does early access mean?
The first release, covering the core control library, deterministic rule execution, cases, escalation and audit logging, is complete. Early-access customers work with the product team on configuration and on the next release.
Which controls are included?
The library starts with vendor bank account changes, cross-company duplicate invoices, journal approval validation, segregation of duties and high-risk payment controls. Rules can also be created manually.
Does it use AI to decide whether a control failed?
Not for critical controls. Those run as deterministic rules so the result is repeatable and explainable. AI is only used where its role is clearly scoped.
What is coming next?
Evidence packs, rule versioning with rollback and control KPIs are next, followed by approval workflows and bulk remediation. Ask us for the current timeline.
Which ERP does it work with?
Dynamics 365 Finance & Operations, which remains the system of record for every case and action.
See Risk & Compliance AI on Dynamics 365
A working session on a Dynamics 365 environment, your questions answered as we go, and a written next step within one business day.