Zentriq for Business Central

Two products, separately installable. PunchOut: Chrome extension + BC mini app, captures e-commerce carts into a draft you review in Business Central. Agent: BC extension, in-product AI chat, and document capture (upload vendor invoices & documents, AI-extracted into BC drafts). SaaS, multi-tenant, GDPR + Swiss nFADP compliant.

1 · Architecture, PunchOut (browser → BC direct)

Cart data stays in your browser and goes straight to your own Business Central tenant, using secure delegated access via your Microsoft sign-in, where it becomes a draft you review and post yourself. Zentriq's backend only meters credits, it never receives your cart contents.

┌──────────────┐        ┌──────────────┐
│  Your        │ ─────▶  │  Your BC     │
│  browser     │ (cart   │  tenant      │
│  (cart data) │  data)  │  (draft)     │
└──────┬───────┘        └──────────────┘
       │
       └── credit metering only ──▶ Zentriq backend (EU)
                                    (no cart contents)

2 · Architecture, Agent (BC → Zentriq → AI)

Your request goes to Zentriq's EU backend, which reads only the BC records a query needs (scoped by your own BC permissions) and calls our AI provider for inference. Conversations are stored in an EU-hosted, encrypted managed database so you can resume them. The AI provider retains nothing and never trains on your data.

┌──────────────┐        ┌──────────────────┐
│  BC user     │ ─────▶  │ Zentriq backend  │
│  (browser)   │         │ (EU)             │
└──────────────┘         └────────┬─────────┘
                                  │
                  ┌───────────────┼───────────────┐
                  ▼               ▼               ▼
          ┌──────────────┐ ┌─────────────┐ ┌──────────────┐
          │ AI provider  │ │ Your BC     │ │ EU database  │
          │ (EU)         │ │ tenant      │ │ (encrypted)  │
          │ ZERO RETAIN  │ │             │ │              │
          └──────────────┘ └─────────────┘ └──────────────┘

3 · What Zentriq Accesses

4 · Encryption (both products)

5 · Microsoft sign-in, access requested

Zentriq uses secure delegated access via your Microsoft sign-in, we never see or store your password. We request only:

• Sign-in, basic identity (account email + tenant)
• Business Central access, read and write BC data on the user's behalf, scoped by their own BC permissions

Your BC permissions are the ultimate gate, Zentriq cannot exceed what the user's own BC account is allowed to do. Access is least-privilege by design: each task reads only the records it needs, and any write is a draft you review and post yourself. Nothing more.