Most SAP Business One systems are set up carefully once, at go-live, and rarely checked again. After that, dozens of people add items, customers, users and tax codes, and nobody reviews the setup as a whole.
The drift stays invisible in daily work. Invoices still print and payments still post. It shows up later, as a GST notice, a back-dated entry in a closed year, or a payment nobody approved.
So we asked AI to check one. We gave it a single read-only prompt covering finance, GST, masters and security. The audit report came back in about eight minutes, with a health score of 40 out of 100. The video above is that run, start to finish.
We ran the audit on OEC Computers India, SAP’s standard demo company, so no customer data was involved. TEKAI connected Claude to that SAP Business One system through MCP (Model Context Protocol), and every check ran as a read-only query.
This is the prompt from the video, word for word. To run it on your own system, replace TEKAI-DEMO with the name of your TEKAI connection.
Connect to TEKAI-DEMO. You are TEKAI, an expert SAP Business One configuration auditor. Perform a complete configuration audit of the connected SAP Business One company database.
RULES
- Use read-only SELECT queries only. Never create, update or delete anything.
- Work area by area, in the order below. After each area, show a table:
Check | Status (PASS / WARNING / FAIL) | What you found (with counts and examples) | Business impact | Recommended fix
- Keep explanations short and in plain business English.
AREA 1 – FINANCE & G/L
- Posting periods: old periods still unlocked; next fiscal year created or not.
- G/L account determination: blank accounts for sales, purchase, inventory, COGS, price variance, exchange differences.
- Chart of accounts: duplicate account names; active accounts unused for 2+ years; journal entries posted directly to control accounts.
- Currencies: missing exchange rates for foreign currencies used in the last 90 days.
AREA 2 – GST / TAX
- Items missing HSN/SAC code or tax code.
- Customers/vendors with missing or invalid-format GSTIN, or missing state.
- Bill-to/ship-to addresses missing state or GSTIN.
- Invoices in the last 90 days where IGST vs CGST/SGST does not match the ship-to state.
- Inactive tax codes still used in recent documents.
- E-invoice readiness: B2B invoices missing IRN details.
AREA 3 – MASTERS & INVENTORY
- Duplicate business partners (same name, GSTIN, phone or email).
- Items with no item group, default warehouse or UoM.
- Items with negative stock; inconsistent valuation methods within the same item group.
- Inactive warehouses that still hold stock.
- Items and BPs still active but with no transactions for 2+ years.
- Price lists not updated in over 12 months.
AREA 4 – ADMIN & SECURITY
- Active users not logged in for 90+ days; users with superuser rights.
- Sales orders, purchase orders and outgoing payments with no approval procedure.
- Document numbering series: duplicates, or past-year series still set as default.
- Key general settings: negative inventory allowed, posting without tax code, decimal settings.
FINAL SUMMARY
1. Overall Configuration Health Score out of 100, plus a score for each area.
2. Top 5 critical issues in priority order, with the fix for each.
3. The 3 scariest findings, one line each, in plain English for a business owner.
4. A fix roadmap: Quick wins (this week) / This month / Next quarter.
5. Create a branded audit report document with all findings, tables, the health score and the roadmap.
If any check cannot be run because a table or field is not available, mark it "NOT CHECKED" with the reason and continue.Outside India, swap Area 2 for your own country’s tax checks, such as VAT codes and tax registration numbers.
GST and tax was the weakest area by far, at 8 out of 100. Finance and masters sat in the mid-50s, and admin and security scored 40.
| Area | Score | Main findings |
|---|---|---|
| Finance & G/L | 56/100 | All 224 monthly posting periods back to February 2008 are still open. 539 recent entries were back-dated, some as far as December 2017. G/L account determination runs on near-empty defaults, and 339 of 379 active postable accounts have had no postings in two years. |
| GST & tax | 8/100 | All 151 items lack an HSN code. 29 of 30 Indian customers and all 9 Indian vendors have no GSTIN, and 3 of the 4 location GSTINs are defective. The GST18 code is built on the old VAT tax type, so no invoice in the last 90 days shows CGST, SGST or IGST. |
| Masters & inventory | 57/100 | Stock control is sound: no negative balance in 5,593 movements since 2012. Item set-up is thin: 132 of 151 items sit in one catch-all group, and 149 have no unit of measure. |
| Admin & security | 40/100 | All 43 users are unlocked, 38 have been idle for 90 days or more, and 11 have superuser rights. ₹1.65 crore of sales orders, purchase orders and payments went through in 90 days with no approval. |
Daily posting works, but the GST setup, period locking and access control would not hold up in a tax or statutory audit. All 26 checks ran, and the audit ranked five issues to fix first:
The report then set out a three-phase fix roadmap, each phase closed by a gate:
One more line, “Can I have all this in presentation”, turned the audit into a 15-slide TEKAI-branded deck: the verdict, the findings by area, the five priorities and the roadmap. It was ready to present, or to download as PowerPoint or PDF, about three minutes later.
Some of these gaps come from the demo company’s bulk-loaded data. The 539 back-dated entries, for example, were created on four days in August and September 2026 by the demo user “manager”. In a live company, each finding would still be a real exposure.
| Finding | What it can cost a live business |
|---|---|
| Tax codes built on VAT, with no CGST, SGST or IGST split | Invoices that don’t match GST returns, and B2B customers who can’t claim input tax credit cleanly |
| Missing GSTINs and HSN codes | Wrong place-of-supply tax, e-invoices that fail validation, and mismatches in GST returns |
| Posting periods open back to 2008 | Anyone with posting rights can change figures in years already closed and filed |
| 11 superusers and idle accounts left open | Full access to every module for people who don’t need it, through logins nobody watches |
| No approvals on orders and payments | Purchases and payments released with no second check |
You need a TEKAI connection, the AI you already use and about ten minutes.
Prefer to have it done for you? Ask TEKROI to run this audit on your system.
Does the audit change anything in SAP Business One?
No. The prompt allows only read-only SELECT queries, and in this run nothing was created, changed or deleted.
How long does it take?
About eight minutes for the 26-check audit report in this run, and about three more for the slide deck.
Which AI does it need?
We used Claude. TEKAI connects through MCP, so it works with the AI you already use rather than locking you to one model.
Is 40 out of 100 a real company’s score?
No. It is SAP’s demo company, OEC Computers India, and some gaps come from its bulk-loaded test data.
Can the AI fix the issues as well?
This audit is read-only by design. Fixes belong with your SAP Business One consultant, made in SAP Business One and tested first.
Does it work outside India?
Yes. Areas 1, 3 and 4 apply anywhere; replace Area 2 with your country’s tax checks.
TEKROI Private Limited is an official SAP Business One partner (SAP PartnerEdge — Sell & Service), with 350+ implementations across India, Nepal, the Middle East and Africa. SAP and SAP Business One are trademarks of SAP SE.