Can AI change my ERP safely?
Yes, if the AI can’t decide on its own. Safe AI changes to an ERP need four things: a copy to build on, checks computed from your own books, a named person who approves, and a record with an undo. Without those, speed becomes risk.
By the rung1 team · Published · Updated · 7 min read
What AI is good at, and where it goes wrong
Modern AI models are good at turning “block purchase orders above ₹2,00,000 unless I approve” into fields, validation rules and workflows. They go wrong in the ways any fast worker does: a missed edge case, a script that changes a total, a permission widened to make something work. Over a long multi-step task small error rates compound.
The four safeguards that make AI changes safe
- A copy: every change is built and tested on a throwaway copy, never on live.
- Checks from your data: ledger, stock, access, GST and audit-trail checks computed from your own books.
- A named approver: a person you choose says yes, with a one-time code; the asker can’t approve their own change.
- A record and an undo: who asked, what the checks said, who approved; undo for 30 days, built from the record, never by AI.
What an AI should never do in your books
- Make a payment.
- File or amend a return.
- Post into a closed period.
- Change bank or supplier payment details as a side effect.
- Approve its own change, or turn on auto-approve by default.
Questions to ask any AI ERP vendor
- Where is the change built: on a copy or on live?
- What is checked, and is it computed from my data or from rules in general?
- Who approves, and can the agent approve itself?
- What is recorded, and can my CA read it?
- How do I undo, and is the undo written by AI?
Questions people ask
Yes. AI can draft ERPNext customisations such as fields, validation rules, workflows and reports. It should build them on a copy and wait for a named person’s approval before anything reaches live books.
It is expected to, sometimes. With a copy, checks, a named approver and a 30-day undo, a wrong change can’t reach live books without approval and can’t stay there.
No. A model may produce a write intent; it may never produce an allow. Approval belongs to a named person.