Spend Controller
Reviews Meta and Google pacing, delivery health and budget pressure without changing bids or budgets.
One assistant adapts to each person’s role, permissions and departments. Focused specialists bring deeper context to paid media, publishing, finance and operational decisions.
Your assistant
Composed for your role and access
Three accounts need review. I checked spend pacing, publishing commitments and finance signals within your allowed clients.
Live context
Role scoped
Auditable
Department depth
Specialists do not invent a second system of record. They read the XeroFlow work, clients and permissions already available to the person asking.
Reviews Meta and Google pacing, delivery health and budget pressure without changing bids or budgets.
Reviews publishing commitments and prepares editable plans without scheduling or publishing a post.
Surfaces advisor reports, recommendations and tenant-scoped budget alerts without touching Xero or invoices.
Connects signals across spend, publishing and finance to highlight operational conflicts and priorities.
Personal composition
The personal assistant combines role, department membership, connected clients and explicit permissions before it chooses what context or specialist to use.
Role, team and department membership shape the assistant’s focus.
Tenant, client and permission boundaries are enforced in code.
The current task, client or conversation supplies immediate context.
Drafts remain drafts until an authorised person confirms the next step.
Built for trust
The model can reason about work, but it cannot grant itself access. Authority, scope and confirmation are decided outside the prompt and checked again at every boundary.
Start with the client, task or decision in plain language.
XeroFlow derives the exact tenants, clients and tools the caller may use.
The assistant gathers allowed context and prepares an answer or editable proposal.
Consequential work stays behind existing approval and action controls.
Model requests can narrow signed authority, never broaden it.
Correlation, status, latency and tool counts are logged without prompt content.
App and Worker gates can independently stop Think turns without removing the rest of XeroFlow.
Powered by Cloudflare Workers AI, Project Think and Durable Objects. Turns are bounded, tool access is allowlisted, reasoning is suppressed from responses, and operational telemetry excludes prompts, secrets and raw identity data.
Start with governed assistance
Ask, analyse and draft across the work your agency already runs in XeroFlow. People review the result and stay responsible for every consequential action.