Developer referenceOperations, finance, product, and data teams

Connect business data to AI

Let teams query internal business data in natural language within permission, audit, and data boundaries

ARCHITECTURE

Five-stage workflow

01Unify read-only access to databases, documents, and business APIs
02Apply row- and column-level access by user identity
03Turn questions into constrained queries or tool calls
04Return answers with sources and calculation definitions
05Audit sensitive access, failed queries, and exports
STACK

Recommended components

Start with one component per capability and replace it only when evaluation data shows a clear gap.

DELIVERY

From proof of concept to production

  1. 01Define the user journey, input and output schemas, permission boundaries, and success metrics.
  2. 02Build one end-to-end happy path with the smallest viable tool stack and a fixed evaluation set.
  3. 03Add authentication, timeouts, retries, fallbacks, audit logs, and human review for risky actions.
  4. 04Release to a limited audience, measure quality, latency, and cost, then expand with evidence.
CODE SAMPLE

Framework-neutral orchestration skeleton

TypeScript
type WorkflowInput = { request: string; userId: string };
type StageAdapter = (context: unknown) => Promise<unknown>;

const stages = [
  "Unify read-only access to databases, documents, and business APIs",
  "Apply row- and column-level access by user identity",
  "Turn questions into constrained queries or tool calls",
  "Return answers with sources and calculation definitions",
  "Audit sensitive access, failed queries, and exports"
];
const selectedTools = [
  "LangChain.js",
  "Hugging Face",
  "REST Countries"
];

export async function runWorkflow(input: WorkflowInput, adapters: Record<string, StageAdapter>) {
  let context: unknown = { ...input, selectedTools };

  for (const stage of stages) {
    const adapter = adapters[stage];
    if (!adapter) throw new Error(`Missing adapter: ${stage}`);
    context = await adapter(context);
  }

  return context;
}

Implement each adapter on the server with the selected component’s official SDK or API. Never expose provider credentials in browser code.

LAUNCH CHECK

Production checklist

  • ✓Every stage has a defined owner, input, output, timeout, and failure state.
  • ✓Credentials and sensitive data stay server-side with least-privilege access.
  • ✓Model output is validated before it reaches a database, user, or external action.
  • ✓Sources, tool calls, prompts, versions, and human decisions are traceable.
  • ✓A fixed evaluation set covers normal, ambiguous, adversarial, and unavailable-tool cases.
  • ✓The workflow has a visible fallback and a manual recovery path.