FinanceProtected

Owner-only. By design, not by setting.

Books, bank feeds and billing sit in a protected domain granted to a named person. It is never granted by role, and admins don’t inherit it.

Access to finance comes from a grant to a person. Not a role. Not a setting.

Only the owner can grant it. Every change to a grant is audited and notified to the owner.

How the protected domain works.

These rules are enforced in code at every layer, not in a prompt.

Grant: An explicit grant to a named person. Never derived from a role.
Admins: Workspace admins and super admins get nothing from their role.
Label propagation: A conversation that touches finance data becomes finance-labelled. So does everything derived from it: summaries, memory, briefings and subtasks.
Retrieval: Memory and documents are filtered by label before ranking, so finance content never reaches someone without the grant.
Automations: Run as their owner. A teammate’s briefing can’t contain finance data. The owner’s can.
Delegation: Can’t carry the grant to an agent acting for someone else.
Admin views: Run lists, usage and audit search show only counts for finance-labelled rows.

The sources it covers.

01

Accounting

Your books and the accounting modules in the erp.io suite.

02

Bank feeds

Transactions and balances, read for matching and cash questions.

03

Stripe, read-only

Payouts, charges and balances. Brigham.ai looks. It does not move money.

04

Billing tables

Plans, entitlements and billing events in the CRM.

Ask it

Things the owner asks.

›“Where is cash going this month versus last?”
›“Which invoices are overdue, and who do we chase?”
›“Reconcile this payout against the books.”
›“Draft the board package. Cite the ledger for every figure.”
›“What changed in recurring revenue since last month?”
›“Show cash movement by entity for the quarter.”
›“List unmatched bank transactions older than a week.”

Held for the owner.

Chasing an overdue invoice, moving cash, closing a reconciliation or sending a board package are all things Brigham.ai can prepare. They stay held until the owner approves.