AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
Directors remain responsible for what their company does, including what its AI agents do on its behalf. In the UK, the Companies Act 2006 requires directors to exercise reasonable care, skill and diligence, so a board using agents should set their mandates, review their records and exceptions regularly, and be able to show it did.
Delegation is not abdication
Company law has always let directors delegate work to staff, advisers and systems. What it does not allow is delegation without supervision. When a company gives an AI agent authority to pay suppliers, answer customers or prepare filings, the directors are still answerable for the outcome. The question a court, regulator or shareholder would ask is not "did the software make the mistake?" but "did the directors take reasonable care in how they set it up and watched it?"
This article describes UK company law in general terms. It is not legal advice, and other countries have similar but different duties.
The duties that apply
- Section 174, Companies Act 2006: a director must exercise reasonable care, skill and diligence. The standard is that of a reasonably diligent person with the general knowledge, skill and experience reasonably expected of someone in that role, and also the knowledge and experience the director actually has.
- Section 172: a director must act in the way they consider, in good faith, would be most likely to promote the success of the company for the benefit of its members, having regard to matters including the interests of employees, relationships with suppliers and customers, and the company's reputation for high standards of business conduct.
- Accounting records: GOV.UK guidance notes that a company must keep accounting records and that directors can be fined or disqualified if it does not. Records produced by agents are part of those records.
Nothing here is specific to AI. That is the point: the existing duties already cover it.
What reasonable care looks like with agents
| Area | What the board should be able to show |
|---|---|
| Authority | A written mandate for each agent, with ceilings, approved by a director |
| Competence | Why the board was satisfied the agent was fit to act, such as testing or certification |
| Supervision | Regular review of exceptions, overrides and refusals |
| Records | A log of every action with its source, kept for the required period |
| Response | A plan to pause an agent and handle an error, and evidence it was used when needed |
A monthly review any board can run
For a small company, this can be one agenda item and twenty minutes.
- Mandates. Have any ceilings or permissions changed? Who approved the change?
- Decisions above the ceiling. How many reached a person, how long did they wait, and were any approved without review?
- Overrides and refusals. How often did people change the agent's proposal, and what did refusals reveal about gaps in policy?
- Incidents. Any payment reversed, customer complaint or data issue traced to an agent, and what was done?
- Changes underneath. Any new model, data source or system that should trigger re-testing?
- Minutes. Record that the review took place and any decisions made.
Our guide to monitoring AI agents sets out the numbers that make this review quick.
Worked example (illustrative)
A two-director company in Bristol with £1.8m turnover uses agents for finance, sales and support. At its monthly meeting the directors note that the finance agent's payment ceiling was raised from £2,000 to £3,000 in August with both directors' approval, that 14 payments above the ceiling were approved and one rejected for a mismatched invoice, and that the support agent's refusals pointed to a missing returns policy for trade customers. They minute an action to write that policy. If something later went wrong, these minutes would help show the directors were exercising care.
Sole directors and owner-managers
Where one person is the only director, the duties are the same. The review can be done alone, but it should still be written down. A short monthly note is far better evidence than memory. If the business has an accountant, sharing the agent's record with them at year-end gives an independent check.
Questions directors should ask before agents go live
- What exactly is this agent allowed to do, and what is its ceiling?
- How was it tested, and what happens when its model, mandate or data changes?
- Who in the company owns it day to day, and who can change its limits?
- How do we pause it, and how quickly?
- What will we see each month to know it is working as intended?
Writing the answers down before go-live, and approving them as a board, is itself evidence of care. It also gives the monthly review a fixed baseline to compare against.
Where Pryme fits
Pryme Business is designed around the evidence a board needs. Each agent works inside a mandate with a ceiling; above it, a person decides. Every action is recorded with its source. The Chief of Staff reads finance, sales, customer and compliance as one business and brings directors only the decisions they must make, with a morning brief, while the Compliance agent keeps the obligations register. For the decisions that should never leave a person, see human in the loop: finance decisions a person should make.
Questions people ask
Are directors liable for mistakes made by AI agents?
The company is usually responsible to third parties, and directors can face consequences if they failed in their duties, for example by not taking reasonable care in setting up or supervising the agents. Each case depends on its facts.
Does using a certified AI agent satisfy a director's duty of care?
It helps show care in choosing the agent, but supervision is still needed. Directors should still set mandates, review exceptions and keep records.
Should AI agents be discussed at board meetings?
If agents act with real authority over money, customers or filings, yes. A short monthly review of mandates, exceptions and incidents, recorded in the minutes, is proportionate for most small companies.
Do the same duties apply outside the UK?
Most company law systems have similar duties of care and loyalty for directors, though the wording and standards differ. Check the law where your company is incorporated.
Sources
- Companies Act 2006, section 174: duty to exercise reasonable care, skill and diligence · accessed Oct 2026
- Companies Act 2006, section 172: duty to promote the success of the company · accessed Oct 2026
- GOV.UK: Company and accounting records - how long to keep them · accessed Oct 2026
- NIST: AI Risk Management Framework · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.