home/journal/Connecting AI to Microsoft 365, Google Workspace and your CRM

Connecting AI to Microsoft 365, Google Workspace and your CRM

What it takes to connect an AI assistant to Outlook, Teams, SharePoint, Gmail, Drive, HubSpot, Salesforce or Pennylane in a Monaco company: a dedicated identity, minimum permissions, a log, EU hosting, and your IT provider in the room. The practical checklist.

Ben Sylvester Strautmann · 3 October 2026 · 5 min

An assistant that cannot read your inbox and write to your CRM is a demo. Connecting it is most of the work, and it is where the security questions live. Here is the checklist we run every time.

One identity per tool, minimum rights

The assistant gets its own account in Microsoft 365 or Google Workspace, created by your administrator, with only the mailboxes, folders and calendars the task needs, read-only where the task allows. The same in the CRM and the accounting tool. We never hold your admin credentials; your administrator can revoke the assistant in one click. This is the single most important line in any proposal.

Secrets in a vault, actions in a log

Credentials live in a vault, never in code or in a document. Every action the assistant takes is logged with who, what, when and from which source document, and the log is yours. When an auditor, a client or the APDP asks what the system did with a given email, the answer is one search away.

Where the model runs

The text of an email has to reach a model to be read. We use providers under contracts that exclude training and retention, hosted in the EU by default, and for some clients models inside their own environment. Where that is, and under which terms, is written in the processing description we hand you. If a proposal cannot answer “where does the text go?”, it is not ready.

Your IT provider is part of the project

Most Monaco companies have an IT provider in the Principality or in Nice who holds the tenant. We ask for a contact on day one, list the permissions we need, and hand them the documentation at the end. Projects slip when this conversation happens in week four; they finish on time when it happens in week one.

Tools without an interface

An old ERP, a sector tool, a bank portal: some have no API. Exports and imports, email interfaces, or a small bridge you own usually solve it. We say in the quick-check note if a tool truly blocks a task, and what the alternative costs.

Two questions.

Does Copilot already do this?

Copilot helps a person draft inside Office. It does not run a process across tools on its own. The two coexist well; many clients have both.

Can we keep everything inside our own tenant?

Largely, yes, and for some clients entirely, with models run in their environment. It is a design choice we make in the note, with its cost.

Related.

Start with a 30-minute call. Keep what it finds.

You tell us where the hours go. We tell you which two or three tasks to automate first, in a short written note. Free, in English or French.

ben@bss.mc · a reply within one working day