AI mandate
Zylio AI mandate: what our agents are allowed to do, and what they will never do
The Zylio AI mandate is the scope of action given to our agents on your side. They read your procurement documents, check every invoiced line against your agreements, quantify the discrepancy and build the file with its evidence. They never decide: no write into the ERP, no payment, no supplier contacted, no action without your approval. They investigate; you decide.
Allowed
What the mandate allows: read, check, quantify, prove
Each agent carries part of the mandate. None of them steps outside it.
Read
Capture collects and reads your documents (invoices, contracts, price schedules, orders, receipts, credit notes) in every format, and extracts every line while linking it to the exact place it was read.
Compare
Compare puts supplier offers on the same grid (same units, same scopes, same terms) and isolates what is not comparable.
Check
Compliance places every invoiced line next to the framework contract, the price schedule, the amendment, discount tiers and indexation clauses, and quantifies the discrepancy.
Match
Matching matches order, receipt and invoice at line level, with your tolerances; Exception handles what fits no standard circuit.
Link and answer
Graph links every price to its contract and its evidence; Insight answers a question asked in plain language, every figure opening onto the lines that make it up.
Record
Each agent records what it did, in the order it did it: who, what, how much, when. The audit trail is complete, time-stamped and exportable.
Forbidden
What the mandate forbids, without exception
The mandate stops where the decision begins. A Zylio agent does not approve an invoice, does not block a payment, does not release a settlement, posts no entry and changes no data in your ERP: not a supplier record, not a price, not a status. It contacts no supplier: the claim file is built with its evidence, but you decide whether to send it, and you send it. Nothing is committed without your explicit approval.
The mandate also forbids what happens out of your sight. Your data is never used to train a model and is never shared between customers. No calculation is hidden: every discrepancy is traced to its source, and whatever matches no rule is raised with its reason instead of being dropped silently. An agent that does not know says it does not know; it does not estimate, it declares the data missing.
We do not touch the ERP
Read-only. No write, no add-on, no development in the core of your system.
We commit to nothing without approval
No invoice approved, no payment triggered, no claim sent without a human decision.
We contact no supplier
The file is ready and enforceable, with the clause and the line. The supplier relationship stays yours.
Mechanism
Investigate, never decide: what an investigation file looks like
Take an invoice where one line exceeds the negotiated price. The agent does not reject it. It builds a file: the invoiced line, the contract clause that sets the price, the amendment if any, the discount tier reached this quarter, the history of what this supplier invoiced for the same reference, each element linked to the document, page and line it comes from. The discrepancy is quantified, its reason qualified, and the file reaches the person you designated.
That person decides: block, claim, approve with full knowledge, or correct the rule if the agent was wrong. Their decision is recorded next to the investigation. And because the rules are applied deterministically, the same case produces the same investigation today as in six months, which makes the human decision defensible in front of a statutory auditor, a supplier or a committee.
Zylio never decides in your place. It investigates; you decide.
Control
How you verify that the mandate is respected
The mandate is not a promise: it can be verified. The access given to the agents is limited to reading the agreed scope (an export, a technical role, a mailbox) and you can revoke it at any time without telling us. The audit trail shows you what was read, through which channel, on which date, and what each agent did with it. It is exportable, for your internal control as for an external audit.
The platform is hosted in France, certified ISO 27001 and SOC 2 Type II, encrypted end to end, with SSO and multi-factor authentication. These guarantees frame the mandate; they do not replace it. What protects you first is that an agent that cannot write cannot make a mistake in your place, and that a file in which every line cites its source cannot hide an error for long.
Hosting, certifications, encryption, access management and audit trail.
Commitment
A mandate signed by the founders, applied to Zylio as well
This mandate is signed by the three founders of Zylio, Tarik Aitakkaouali, Bertrand Dumast and Younes Samir, and binds every agent delivered as well as every evolution of the product. It also applies to Zylio internally: our own teams work with AI and automation every day, under the same rule. What can be investigated by an agent is; what commits someone remains a human decision.
The team, the mission, the awards and the supporters.
Nothing is lost. Everything can be checked, everything can be proven.
- The contract clause and the invoice line, highlighted side by side.
- Every extracted value stays linked to the exact place in the document where it was read.
- The same case produces the same decision, today as in six months: the rules are applied deterministically.
- No discrepancy is set aside in silence. Anything that matches no rule is raised, with its reason.
- The agent records what it did, in the order it did it: who, what, how much, when.
Frequently asked questions
Can a Zylio agent block an invoice or a payment?
No. It builds the file (quantified discrepancy, reason, contract clause and invoice line side by side) and hands it to the person you designated. Blocking, claiming or approving is decided and executed in your tool, by a human. No write, no payment, ever.
What happens when an agent gets it wrong?
The error is visible, because every value is linked to the document and line it comes from. You correct it at the level of the rule or the tolerance, and the correction applies deterministically to every identical case. Nothing was committed in the meantime, since the agent has no right to decide.
Is our data used to train Zylio models?
Never. Your data is used only to investigate your own files, is never shared between customers and is used to train no model. It stays hosted in France, encrypted, and you can revoke read access at any time. What the agents learn from your rules and tolerances stays in your account, and leaves with you if you leave.
Can the mandate be widened if we want it to be?
The boundaries of the mandate (no write into the ERP, nothing without approval, no supplier contacted) are not negotiable, because they protect your decision. What is settled with you is the scope of investigation: purchasing categories, suppliers, tolerances, rules, and the people who receive the files.
Measurable impact in every environment
More than 5 million procurement documents analysed
Between 1 and 7% of margin recovered
on the scope analysed
From 15 to 45% of time given back to teams, per FTE
depending on the scope and on data maturity
Zylio fits into your existing ecosystem.
The ERP runs the process. Zylio handles the exception and recovers the value that escapes it: invoices without a purchase order, line-by-line price discrepancies, duplicates and overbilling, off-contract spend.
Your data under high security.
Zylio meets the most demanding standards, and nothing is committed without your approval.
- Certifications
- Hosting
- Encryption
- Access
Going further
- The Zylio AI agentsCapture, Compare, Compliance, Matching, Exception, Graph, Insight: what each one investigates.
- ERP integrationsHow the agents read your ERP without writing into it, vendor by vendor.
- Security and complianceHosting in France, ISO 27001, SOC 2 Type II, full audit trail.
- See an investigation file in a demoA real case, a discrepancy, its evidence, and the decision that comes back to you.
See what this looks like on your own data
Twenty minutes, on a spend category of your choosing. We show you what the agents detect, with the evidence behind it.
- No commitment, on your own data
- Result in 3 weeks
- 20 minutes, no sales pitch
- Your data stays hosted in France
- No change of tool or process