Finance agents that keep the ledger in-house.
Invoices, vendor records, and customer balances are the last data a finance team wants on someone else's servers. Trelium runs in your data center or private cloud, so agents work through AP, AR, and reconciliation inside the network, with a person approving every exception.
ERP
Mail server
File shares
Identity
TreliumTrusted by teams that move fast
Why finance teams self-host.
Finance data carries more risk than most, and the people who review it ask harder questions.
- 1
Financial records are a fraud target
Vendor records, bank details, and customer balances are exactly what attackers go after. Keeping them on infrastructure you control means one fewer place they live.
- 2
Auditors want every entry explained
Each entry has to trace back to a source document and an approver. An audit store you own keeps that evidence under your own retention policy.
- 3
The close can't wait on a vendor
On-prem upgrades follow your change calendar, so nothing about the agents changes in the middle of month-end unless your team signs off.
Agents work where the books live.
Trelium runs on the same network as your accounting system. Agents read invoices there, and every entry they make is recorded in an audit store you own.
- 1Connectors
- Talk to your ERP, databases, mail server, and file shares over the internal network. None of them gets exposed to the internet.
- 2Agent runtime
- Does the actual work, from reading a PO attachment to posting the sales order, on servers you operate.
- 3Data and audit store
- Run history, source documents, and audit logs are written to your storage and kept as long as your retention policy says.
- 4Admin and identity
- People sign in through your identity provider. Roles and approvals work the same way they do in Trelium Cloud.
Your systems
- Accounting system
- AP inbox
- File shares
- Identity provider
TreliumSelf-hosted on your servers- 1Connectors
- 2Agent runtime
- 3Data and audit store
- 4Admin console
Finance work agents take on first.
Each one handles the routine volume and hands exceptions to your team with the context they need to decide.
Accounts payable
Records each payable from the approved bill through to the cleared payment, so AP always knows where a bill stands.
See the agentInvoice matching and AP
Supplier invoices arrive by email. The agent matches each one to its sales order, creates the bill, and flags anything that doesn't line up.
See the agentInvoice reconciliation
Checks invoices for duplicates, tax issues, and mismatches, and flags them before month-end instead of after.
See the agentAR inbox
Handles routine billing requests from customers and escalates payment exceptions to your team with the context attached.
See the agent
What your controller and auditors will ask about.
Finance agents touch the books, so the controls are built around approvals, separate roles, and evidence for every entry. Read the security overview.
Approvals
Nothing posts without sign-off
Require a person to approve a bill or a payment record before the agent writes it to your accounting system.
Identity
Segregation of duties
The person who builds an agent doesn't have to be the person who approves what it posts, so finance keeps its separation of duties.
Audit
Evidence for every entry
Each entry is logged with the source document, the decision the agent made, and who approved it, ready for your auditors.
Data location
Data stays in your perimeter
Invoices, vendor records, and customer balances stay on infrastructure you control.
Model training
Never used to train AI
Nothing processed through Trelium, including invoices and vendor records, is used to train, fine-tune, or improve any model.
For procurement and legal
- SOC 2 Type II
- Audit in progress
- Vendor risk packet
- Ready to share on request
- DPA and MSA
- Available for legal review
- Trust Center
- trust.trelium.com ↗
Three places to run it.
It usually comes down to one question: can this data leave your network? If not, self-host. If it can, Trelium Cloud means there is nothing to install.
Self-hosted
Your data center
Hardware you own
- Best for
- ERPs and file shares that live on your own hardware
- Data location
- Inside your network
- Operated by
- Your IT team, with our engineers
- Upgrades
- Scheduled with your change windows
- Platform
- Full platform, next to your ERP and file shares
Self-hosted
Your private cloud
Your cloud account
- Best for
- Teams that already run their workloads in a cloud account
- Data location
- Inside your network
- Operated by
- Your IT team, with our engineers
- Upgrades
- Scheduled with your change windows
- Platform
- Full platform, under your cloud security policies and logging
Managed
Trelium Cloud
Operated by Trelium
- Best for
- Data that is allowed to sit in a US or EU region
- Data location
- US or EU region
- Operated by
- Trelium
- Upgrades
- Rolled out automatically
- Platform
- Full platform. Move on-prem later without rebuilding agents
What your IT team will need.
This is the checklist our engineers go through with you during scoping, before anything gets installed.
- Infrastructure
- Servers in your data center or private cloud. How many depends on how many agents you plan to run, so we size it together.
- Storage
- Persistent storage for run history, source documents, and audit logs.
- Network access
- Internal routes from Trelium to each system an agent works in: your ERP, mail server, file shares, and anything else in scope.
- Model access
- A model endpoint your security team has approved. If you don't have one yet, we'll go through the options against your data policies.
- Identity
- A SAML identity provider, such as Okta, Google Workspace, or Microsoft Entra.
- Your team
- Someone from IT to own the install and upgrades, and one person who owns each workflow you automate.
Bring the network diagram to the call.
Thirty minutes with our engineers. We'll go through where Trelium sits in your network, what it connects to, and how model access works. Bring your IT and security leads.
Questions from finance and IT.
Trelium works with ERPs like SAP and Oracle and finance tools like NetSuite and QuickBooks. Where a system has an API, Trelium connects to it directly. Where it doesn't, a browser agent can work through the approved web interface instead.
Only if you let them. You can require a person to approve a bill, a payment record, or any other entry before the agent writes it.
The agent stops and sends it to a person with the difference called out, such as a freight charge over the PO. Nothing is posted until someone decides.
Yes. Building agents, running them, and approving their work are separate roles, so the same person doesn't have to do all three.
Yes. Every input, decision, and action is logged, so any entry can be traced back to the document that started it and the person who approved it.
Inside your network. Invoices, vendor records, run history, and audit logs are stored on infrastructure you control, in your data center or private cloud.
Not without your sign-off. On-prem upgrades are scheduled with your team on your change calendar, never pushed automatically.
No. Nothing processed through Trelium, including invoices, vendor records, and customer balances, is used to train, fine-tune, or improve any AI model, by Trelium or any third party.