Over a thousand actions across all eleven modules are exposed to an agent as tools — raise the invoice, approve the leave, add the vendor, score the call. It calls the same endpoints the screens call, sees only what your role allows, and shows you every write before it happens.
Not a chatbot bolted on. There is no second, looser path into your data. The copilot is another client of the same API, under the same authorisation.
Raise the March invoice for Palm Cove Resorts from last month’s approved timesheets, and tell me if they still owe us anything.
Ready to raise: ₹4,86,000 across 6 members at their project rates, tax applied from the customer’s state. Separately, they are 19 days overdue on an earlier invoice — worth mentioning before this one goes out. Nothing has been written yet · the invoice is a preview until you confirm
Every write works this way — preview first, then verified after
Every one of these runs in the product today, on the same key store and the same permission model.
This is what the AI does across the business OS — the modules themselves are on the platform overview. The same seat opens Meetings, Mail, Chat, Drive, CRM, HR, Accounts, Projects, Procurement, Learning and Research, and the copilot reaches into all of them from wherever you happen to be standing.
No. It calls the same endpoints the screens call, routed to the owning module with your own token, so it is subject to exactly the authorisation the interface is. There is no second, looser path into your data — the copilot is another client of the same API, not a shortcut around it.
Both. Roughly half the tool surface writes. Every write is intercepted before it runs, shown to you as a preview and held until you confirm it — and after it lands the copilot re-reads the record to check the change is actually there rather than assuming its own success.
Three things, in order. The tool list is filtered to your tenant’s licensed modules and your roles, so a tool you are not entitled to use is never offered to the model at all. Parameters are machine-checked against the schema before execution. And the write confirmation gate sits in front of anything that changes state.
It is engineered not to, and in the places where that matters most the prevention is deterministic rather than a polite instruction. On the research side every figure comes from a statistical function call or a validated query. On WhatsApp auto-replies, a guard checks that every significant number in the outgoing message literally exists in your knowledge base, the conversation or the stored customer facts, and blocks the reply if it does not.
Yours. Keys are held encrypted in the platform key store and used at the moment of the call, so the spend is on your account and the data goes where you have chosen to send it. Where cost matters — coding runs, for instance — it is reported per job rather than aggregated into a monthly surprise.
Yes, and only for the host. In a sales meeting it watches the transcript for the moment the other side stops talking and puts an objection, a missed next step or a suggested close in front of the host — never in the shared room. In an interview it pulls the candidate and the job description from HR and rates answers as the interview runs.
It escalates rather than improvising, and the failure is visible. Failed auto-reply jobs raise an alert to admins within the hour, drafts left unapproved past the messaging window expire rather than sending late, and a weekly digest reports what the AI could not answer so the gap gets filled.
Anthropic’s Claude for reasoning and tool calling, on a two-tier setup — the stronger model where the decision is hard and a fast one for mechanical passes like rewriting a narrative around new numbers. Speech uses a cloud provider by default with local models available where audio must not leave your infrastructure.
Rather than finding the screen where you can do the thing.
AI is not a module you buy on top. It is included in the seat, it runs on your own API keys, and it is bounded by the same licence and the same roles as everything else. You are not buying an AI product; you are putting the company on one system and then talking to it.