Does the AI Act apply to your company even if you only use tools?
A short quiz — Who wants to be a millionaire style. You see your score first, then the control system.
Nexus Business
The first host where the core runs the whole working day.
Work, documents, commercial, finance, quality and AI governance stop being six licences that never speak. One record, one identity, one agentic interface that prepares the write and then waits for a person to Confirm.
BUSINESS
Agentic interface
Most workplace AI answers a question and leaves you to copy the answer somewhere else.
The agentic interface is not a chat box parked in a corner. Ask for your open tasks, a diary window, a quality record, a classification or a commercial chart, and the copilot states its plan, calls the registers it is allowed to call, and shows you the write in full before it exists.
Then it stops. You review. You Confirm. Only then is the record written — with the rights of the person who is signed in, never a service account named AI. A deputy may research all day; it may not commit anything on its own.
Because the loop runs inside the product, an administrator can see who asked, which mind answered, what it cost in tokens, and which write followed — and export the whole trail. That is what turns AI from a rumour in a team chat into a line item a board can govern.
Plan stated before tools runTools query tenant data, not a copyConfirm on every writeWho asked · which model · what it costDomain copilots: Work, Diary, Drive, CRM, Management, Insights, QMS, AI Act, Admin
Work
Status meetings exist because nobody trusts a shared picture of today.
Projects, tasks, milestones, hours, presence and calendar are one payload — the same on the phone as on the web. The Work and Diary copilots assign a batch, book the window you described and close the task, then hold the write until you Confirm. Managers stop chasing “did you finish it?” in chat.
Drive
Email attachments are how versions die.
Drive is the working copy: version history with rollback, in-browser Word, Excel and PowerPoint, governed sharing down the folder tree, and QMS status on the official document. Drop the file once — the Knowledge Engine ingests it, so the next person who asks gets the file retrieved instead of a folder to hunt.
Management
Commercial and delivery fail when the client in CRM is not the client on the invoice.
One record for clients, suppliers, employees and teams, with forms, quotes and Insights in the same hub. Quotes carry a client PDF and a public accept-or-refuse link that feeds the project budget. Leadership asks the operating numbers in language; Insights renders the view as a report artifact instead of a canned dashboard that ignores the question.
Finance
Accounts payable should not be a typing pool.
Drop the supplier PDF. The model reads supplier, number, dates, lines, VAT and spend classification, and matches the supplier you already have. You review the extraction and Confirm — then the purchase invoice exists. Cash movements import from CAMT statements and allocate against invoices; customer PDFs already speak three languages.
CRM
A CRM that does not become delivery is theatre.
The same client records as Management run the cycle from prospect to customer: queue, kanban pipeline, activities with mail sync, care cases, renewals on a sixty-day horizon and campaigns with merge-field templates. Mark an opportunity Won and a Work project is created — nobody re-types the deal into a tool sales will never open again.
Quality
Quality systems die in parallel SharePoints.
ISO 9001 as living registers inside the same company as the work: controlled documents that are Drive files with status and revision, equipment evidence, risks with linked tasks, competence and training, suppliers, non-conformities, audits and management reviews that pull their inputs automatically. A finding can become a task; audit week becomes a walk through registers you already keep.
Security and tenancy
Lists and writes stay inside the company boundary.
A group runs several companies from one login and still keeps separate books, separate registers and separate numbering. The core never invents a second identity: it acts as the person already signed in, so a file the user cannot open is a file the model cannot quote. That is the difference between a copilot you can put in front of an auditor and a copilot you have to apologise for.
EU AI Act — control you can show
We do not certify that you comply. We make “we had a chatbot” an insufficient story.