Every card on your desk is derived, not guessed.
A due date, a gap, an imbalance, a document that just arrived — every item the agent raises traces back to something already true in your books. Nothing here is a suggestion pulled from nowhere, and nothing is decided without a trail you can follow and undo.
The agent derives the work. You make the decisions.
Accounting has an advantage software never had: we know what is coming. A ledger has a calendar, invariants and expected paperwork — so the agent does not guess the to-do list, it computes it from what is already true in your books.
What is due?
Obligations
VAT201 · EMP201 · provisional tax · monthly close · year-end
What should be here and isn't?
Absences
A card spend with no receipt · a statement gap · an invoice past due with no inflow
What doesn't add up?
Books health
Trial balance out · suspense not zero · control accounts drifting from the sub-ledger
What just arrived?
Documents
Anything you drop in — classified, routed to its workflow, started
The brief is not a dashboard of numbers
It reads, in order: Needs you now · I'm working on it · Coming up · Done today. Every card carries exactly one kind of next step — approve, answer, upload, review — and the brief is derived on read, every time you open it, never a stored list waiting to go stale.
A view is a lens on the same product, not a capability.
Every view reads and writes the same set of books. Switching between them changes how much of the work you see at once — never what you are permitted to do.
Accountants and firms
The agent's own surface: what it needs from you, what it is doing, what is coming. One accountant can run many clients from it.
Owner-operators
The handful of things people actually do, one click from the top.
Teams used to popular accounting systems
The complete, auditable surface — sidebar, sub-menus, every page. Nothing is ever hidden behind the agent.
A Run — with a full trail, not a black box.
A Run is a parent action with ordered sub-actions, each carrying its own status, progress, actor, confidence and evidence. Every run still worth acting on reads from one card — Agent, Simple and Classic all read the same one.
Drop a bank statement and walk away
Four stages happen before you are asked a single question
A dropped stream degrades to polling, never a stuck spinner — and re-running a statement is a no-op, never a double post.
1Duplicate scan
Re-imports and overlapping statements are caught before a line is touched.
2Categorise
Account, counterparty and VAT treatment predicted from your own past decisions — accrued into a VAT201-shaped return, and it learns from every correction.
3Reconcile
Full, partial and batch payments matched to invoices and bills; over- and under-payments handled.
4Anomaly check
Spikes, dips and duplicate payments flagged for a human, never silently posted.
Undo is real and end-to-end
An undo request runs a preflight, then reverses every sub-action in one transaction — in reverse order — dispatching only to the same correction paths a human would use. Nothing is deleted; the trail stays.
Not everything can be undone
A run can only be undone if it recorded a way to undo itself. A manual action — like a sent email — cannot be unsent, so those handles are refused outright, not silently allowed to look reversible.
An agent can never do, or reveal, more than the principal it acts for.
Agent identity is a declared field carried on every run — a label for who acted, not a cryptographic credential. What actually limits the agent is the authority model below.
Confidence gated
Each tenant sets a lane per kind of work: the agent applies above the bar and asks below it.
Reversible, with a trail
Every agent action is a first-class run with evidence, an approve step and an undo.
Never a back door
The agent holds exactly the capabilities of the person it works for. A view is a lens, not a permission.
Protected accounts, a non-removable floor
Every equity account, plus VAT payable, Rounding and Suspense, sit behind a floor nothing can lower. The agent may not post to a protected account — a human must make this posting.
Delegation only ever narrows
A delegated principal's permissions are an intersection with their origin, never a union, anywhere in the authority code — so the agent can never end up with more reach than the person behind it.
Two independent guards, one save path
The decision and the boundary are checked separately. An agent-context save with no recorded, allowed decision fails at the save — the one path nothing routes around.
Reads are graded too
A run the member could not have performed themselves must not become visible just because an agent performed it.
One accountant, many clients, one Agent view.
The firm cockpit aggregates what the Brain already said about each client tenant — it does not derive anything new for the firm view. Every figure traces back to a single client's own brief. Sized for practices running up to forty client tenants from one seat.
Client health — four states, not three
On track
Nothing needs the client, on the Brain's own read.
Needs attention
Something needs a decision.
At risk
Something critical — an overdue obligation, or books that do not balance.
Not checked
The brief could not be read for this client — it never gets rounded up to on track.
Ready to take control of your finances?
Join businesses like yours who trust Recon Agent for their financial management.