02-347-7730  |  Claude Integration for Thai Enterprises Contact

Claude Integration · Pillar 03

Integrate Claude Into
Your Business Systems

Connect Claude API to your ERP / Intranet / Helpdesk / Document Management + configure SSO/SAML + design RAG & workflow + establish data governance aligned with PDPA — by a team that has implemented enterprise systems for 25 years

Integration Services

6 service types to choose from

Pick one or combine — we recommend starting with a small pilot scope, then expanding. Below these are 13 advanced capabilities that take knowing the model, your back-office systems, and the rules together.

ERP & Business System Integration

Connect Claude to ERP (including Saeree ERP), CRM, Accounting, HR via Claude API + custom workflows aligned with your business process

  • Claude API integration
  • Workflow automation
  • Reporting & analytics
  • Approval workflow + AI assist

MCP Server — Connect Claude to Internal Systems

Build an MCP Server so Claude can query and act on your internal systems directly — ERP, procurement, inventory, HR, document management — under each user's existing permissions, with no data copied outside the system

  • Tool scope design per system
  • Permissions inherited from existing roles
  • Audit trail on every call
  • Tested before go-live + on-premise deployment available

RAG & Knowledge Base

Design RAG architecture so Claude can answer questions about your organization-specific knowledge — SOPs, HR policy, product catalog — without fine-tuning

  • Vector DB setup (pgvector / Pinecone / Weaviate)
  • Document ingestion pipeline
  • Retrieval tuning
  • Citation + audit trail

SSO / SAML / SCIM Setup

Configure Claude Enterprise to integrate with your identity provider — Azure AD / Okta / Google Workspace + SCIM auto-provisioning

  • SAML 2.0 configuration
  • SCIM 2.0 provisioning
  • Role / group mapping
  • Audit log + compliance evidence

Data Governance & PDPA

Establish data governance aligned with Thailand's PDPA Section 40 + Anthropic DPA + SCC + AWS Bedrock APAC per regulator requirements

  • DPA review & alignment
  • Data classification policy
  • ZDR addendum facilitation
  • Bedrock Thailand region (ap-southeast-7) for in-country data at rest

Managed AI Service — Ongoing Care

A monthly or annual care contract after go-live — because an integration on day one is not the same as the same integration six months later: processes change, new models ship, and spend needs controlling

  • Usage monitoring + cost control
  • Prompt / workflow tuning as processes change
  • Migration when Anthropic ships a new model
  • Seat / role administration + management usage reports
Advanced Capability

13 things that take knowing the model, your systems, and the rules

The six services above are the backbone of an integration — connect it, and people can use it. This group is another level. Each item needs three things at once: how the model actually behaves, the back-office systems holding the real data, and the rules a Thai auditor will hold you to. Miss any one of the three and the work stalls halfway.

01

Making the AI run a process, not just answer questions

Moving from one-off question-and-answer to work that follows your organization's own steps — with people still in control at the points that matter

Agent Skills for your organization

We turn your working standards into skills Claude applies the same way for everyone — your ministry's official letter format, the structure your executives expect in a proposal, the costing method you actually use, the checklist that runs before a document goes out

  • Captured from the people doing the work, not from the manual
  • Same output format every time, regardless of who asked
  • Fix the skill once and everyone gets the new version
The hard partThe knowledge that has to go in lives in the heads of people who have done the job for years — it is in no manual. Someone has to sit with them, pull it out as steps a machine can follow, then test it repeatedly until the output is consistent.

Multi-agent — splitting long work to run in parallel

Work too long for a single pass gets split into sub-tasks that run at the same time and are merged at the end — reviewing bids from several vendors simultaneously, or checking a contract section by section and reporting the clauses to watch

  • Designing where to split and how results merge back
  • Routing read-heavy sub-tasks to a cheaper model
  • A spending ceiling per unit of work
The hard partYou have to decide where to split, what each agent receives, and how results merge without contradicting each other. More importantly, more agents means more tokens — set no ceiling at design time and the cost only becomes visible when the bill arrives.

Claude Code for your development team

Setting your in-house developers up to use Claude Code on real code with real boundaries — permission rules for which files it may touch, hooks that stop it before anything prohibited, MCP access to internal systems, plus work on legacy code and migrations

  • Organization-wide permission rules and hooks
  • Review of legacy code and the migrations nobody wants to touch
  • Training so the team ships work, not code no one dares merge
The hard partInstalling it takes minutes. Setting rules a whole team shares is a different problem — we use this toolchain on Saeree ERP's own source code every day, so we know which fences to put up first.

Human approval gates inside automated work

Designing exactly where a person must sign off before the AI writes anything into a live system, with a screen that shows the approver what will change, on what grounds, and citing which source document

  • A before/after comparison screen ahead of any write
  • Supporting reasons that link back to the source
  • A record of who approved what, and when
The hard partNot every step deserves a gate. Too many and people abandon the system because doing it manually is faster; too few and you carry real risk. Drawing that line correctly requires knowing the department's actual business process.
02

Accuracy, safety, and being able to prove it later

The group that decides whether your organization dares point this at real data — and whether it can answer an auditor

A sensitive-data checkpoint — write the rule, let the system enforce it

We place a checkpoint between your internal systems and Claude that inspects every payload before it leaves. When it finds something your organization has ruled out of bounds — national ID numbers, bank account numbers, individual salaries, classified documents, patient records — it either masks just that portion or refuses the request outright, tells the user why, and logs the event for your administrators.

  • We draft the data classification policy with you, then convert it into rules the system genuinely enforces — not a document that sits on a shelf
  • Thai data formats that off-the-shelf foreign tooling does not recognize — 13-digit national ID with its check digit, tax ID, vehicle registration, official document numbers
  • Rules that differ by role — HR may query salary data; everyone else sees it masked
  • A monthly report showing administrators what was attempted and how often it was blocked
The hard partA prohibition written in a policy and a prohibition the system enforces are not the same thing. While it stays text in a document, it depends on whether a user remembers it on a day they are in a hurry. This checkpoint has to sit at the tool layer where data actually passes through — and that layer is code somebody has to write, maintain, and re-test as data formats change.

Row-level and column-level permissions

A tool exposed to Claude does not expose the whole table. Access is narrowed to which rows this specific user may see — their own department, the fiscal years they are responsible for — and which columns stay hidden

  • Existing ERP permissions re-enforced at the tool layer
  • The model sees only permitted results, never the whole database
  • Every call logged with the user and the scope granted
The hard partThe existing ERP permission set has to be carried across and enforced identically — not rewritten as a second, parallel set of rules, because the day the two drift apart is the day someone sees what they should not. We wrote Saeree ERP's permission model ourselves, so we know where to map from.

An answer-quality test set (evals)

We build a set of real questions from your work with known-correct answers, then re-run it every time a prompt changes, a model version changes, or documents are added — so you can compare scores against the previous round instead of guessing

  • Built from questions your users genuinely ask
  • Run before every change, with a numeric comparison
  • The test set is handed over for you to keep using
The hard partA test set is the only thing that tells you whether a change actually improved anything or merely felt like it did. But judging which answers are correct takes people who know the subject matter — it is not something IT finishes alone, so this step tends to get deferred, even though it is the earliest warning that quality is slipping.

Defending against instructions hidden in documents

A document, email, or web page the AI reads may contain text written specifically to make it do something it should not. We separate incoming content from instructions, keep tool scope narrow, and test the system the way an attacker would before it goes live

  • Incoming data kept in a separate layer from instructions
  • Tight limits on what each tool is able to do
  • Testing with documents that deliberately embed instructions
The hard partThis class of weakness never shows up in normal testing. Everything works correctly right up until someone deliberately feeds in a document carrying hidden instructions — which means you need someone who knows the attack patterns testing before launch, not after. see our article on hidden instructions in business systems

Designing the evidence auditors will ask for

We agree at design time what gets produced the day an auditor asks — who asked what and when, which data the model saw, which document an answer cited, and who approved writing it into the system

  • The evidence list is fixed before any code is written
  • Answers trace back to a source document or record
  • Report formats an auditor can accept without manual rework
The hard partDesign this late and the logs you happen to have will not answer an auditor's questions — and you cannot go back and collect what was never recorded. We work to the ISO/IEC 29110 framework we have held for ten years running.
03

Legacy systems that resist connection, and costs that need controlling

The two issues that most often derail an AI project — the data sits in something you cannot connect to, and the bill outgrows the budget

Connecting legacy systems with no API

The data you need usually sits in a system with no way in — written years ago, its original developers long gone, or offering screens and nothing behind them. We build the intermediate layer that does the job

  • Read-only direct database access that leaves the system untouched
  • Reading the export files the system already produces on a schedule
  • Wrapping the legacy system in a layer that does expose an API
The hard partIt means reading the schema of a system whose documentation is incomplete and whose authors have left, then judging which tables hold live data and which are leftovers nobody deleted. That takes having taken business systems apart before — which is what we have done for 25 years.

Cutting cost without cutting quality

AI cost tracks the volume of data moving in and out, and that volume comes down substantially through design rather than through using the system less

  • Ordering prompts so the portion that repeats every time can be reused instead of resent
  • Moving work that does not need an immediate answer to batch processing, which Anthropic bills at half the standard rate
  • Matching model tier to task difficulty instead of sending every question to the top model
The hard partFirst you have to measure where the tokens are actually going, then know which edits break reuse for the entire block. Get that wrong and nothing raises an error — the system behaves exactly as before, and you find out when you see the bill.

Preparing Thai documents before they reach the model

Most of the work in a document project happens before the model ever sees anything — scans with no text layer, government forms built as tables, seals and signatures mixed into the body text

  • Converting scans to text with accuracy checks
  • Reading form and table structure into the right fields
  • Handling Buddhist vs Gregorian years, Thai numerals, and agency names written several ways
The hard partThe model reads Thai well. But if what reaches it is text extracted from a skewed scan and wrong from the start, the answer is wrong too and nothing flags it. The problem is not the model — it is the pipeline feeding it.

Usage reporting and cost allocation

Executives who approved the budget always ask the same question — who is actually using this, and is it worth it. We build the dashboard that answers it

  • Usage broken down by department, by person, and by type of work
  • Alerts when usage departs from normal, before it becomes a line on the bill
  • Costs allocated back against your own org chart and budget codes
The hard partThe usage data can be pulled, but it comes out per user account — unconnected to your org chart or budget codes. Allocating it the way your finance team actually works means mapping the two sides together first.

We did this work on our own operation first

Our support team uses an MCP Server we wrote ourselves, connected to the databases of the systems we maintain, for three real jobs every day — answering usage questions customers raise, checking how the system's business rules behave, and investigating reported bugs. Our developers use Claude Code against Saeree ERP's own source in the same way.

The reason we did it in that order is that wrong data in an ERP is hard to undo, and customers should not be the ones discovering our problems for us. We are past that stage now and ready to take this on for other organizations. What that period gave us is knowing which parts can be trusted and which parts need a person watching — and that is not something you can read in documentation.

Example Scope

Where connecting Claude actually pays off

Not every task deserves AI. The ones that pay off are the tasks where someone opens five screens to answer one question, or where the answer already sits in an internal document nobody can find

Procurement

Search regulations and TOR conditions · check document completeness before submission · compare multiple vendor quotations side by side in one table

Inventory

Ask about stock balances and issue history in plain language instead of paging through reports · surface mismatched items before a physical count

Accounting & Budget

Summarize remaining budget by project and funding source · flag unusual entries for review before period close, with people still making the call

Human Resources

Answer questions on leave rules, benefits, and internal procedures from your own documents — not from the model's general knowledge

Correspondence & Documents

Draft letters in your organization's format · summarize lengthy submissions · find prior cases related to the one on your desk

User Support

Answer product usage questions from manuals and past cases · verify system business rules — this is the category our own support team uses daily

Data Flow & Residency

Where the data goes — settle this before any code

The first question from IT and legal in almost every organization is whether data leaves the country. The answer depends on the route you pick, and that choice belongs at design time, not at go-live

Route Where inference runs What gets stored Fits
Claude API
direct from Anthropic
Routes globally by default · can be pinned to US-only infrastructure via the inference_geo parameter, billed at 1.1x the standard rate Conversation content is not retained by default · a Zero Data Retention arrangement can be requested from Anthropic · workspace-level storage is currently US-only Organizations comfortable with offshore processing that want new models and features the day they ship
Amazon Bedrock
Thailand region (ap-southeast-7)
Callable from the Thailand region since February 2026 · but via Global cross-Region inference, so processing may run in other AWS regions worldwide Data at rest — logs, knowledge bases, stored configuration — stays in the source region · AWS, not Anthropic, is the contractual data processor Organizations already on AWS, or bound by a requirement that stored data remain in-country
MCP Server
+ existing on-premise systems
Your ERP and databases stay in-house; Claude never connects to the database directly, only through the tools you expose The model sees only what a tool returns under that specific user's permissions — never the whole database · every call is logged for audit Organizations that must keep the data surface as narrow as possible and be able to say who asked what, when

Straight talk before you decide

No route keeps data entirely inside your organization. Claude is a cloud service; whichever path you take, the question and the material used to answer it are sent to the model. What you can genuinely design is what leaves, where and how long it is stored, and how far back you can audit

That is a different story from Saeree ERP, which runs on your own servers with data that never leaves. The two cannot be described in the same sentence — anyone claiming an AI integration keeps your data 100% in-house is leaving something out

How We Work

5 phases — Discovery to Go-Live

Following the ISO/IEC 29110 standard that Grand Linux has been certified for 10 consecutive years — transparent, with documentation delivered to the customer at every phase

1

Discovery

Understand use case, existing systems, constraints

  • Agreed scope note
  • System inventory + constraints found
2

Design

Architecture + data flow + security design

  • Architecture + data-flow document
  • Role-by-role permission map
3

Build

Integration code + test + UAT

  • Source code handed to your organization
  • Test results + UAT documentation
4

Train

Train users + admins, deliver manuals

  • User manual + administrator manual
  • Recommended internal usage policy
5

Go-Live + Support

Production cut-over + monitoring + tuning

  • Production deployment record
  • Post go-live care plan
Why Grand Linux

A team that understands both AI and business systems

Because Claude Integration isn't just "calling an API" — you need to understand business processes, compliance, and change management

Tier-1 Consultant · Ministry of Finance (No. 4162)

Eligible for government procurement contracts · renewed continuously 3 times (2018, 2021, 2024)

ISO/IEC 29110 · TÜV NORD · 10 years running

4 consecutive certificates (2015–2027) · Project Management + Software Implementation

25 years implementing systems for Thai organizations

Deep understanding of Thai business workflows — government, state enterprise, private sector

We built Saeree ERP ourselves

Deep understanding of business systems — not a new AI reseller

Frequently Asked

What IT and procurement always ask first

The questions that come up in every Discovery — answered from verifiable facts as of September 2026

Will our organization's data be used to train the model?

On commercial plans — Team, Enterprise, and the API — the default is that your data is not used for training, per Anthropic's published terms

One exception worth telling your users about: if someone gives thumbs-up or thumbs-down feedback on an answer, that entire conversation can be retained for up to five years and used to improve the model. Put this in your internal usage policy from day one

On consumer plans (Free / Pro / Max) the setting sits with each individual user and cannot be enforced centrally, which is why those plans do not belong anywhere near real organizational data

Can it all run on-premise inside our organization?

No. The Claude model itself is not available to install on your own servers — every route calls a cloud service

What can stay in-house is the MCP Server, the business systems, the databases, and the whole permission layer, which is what lets you control exactly which data leaves — see the route comparison above

Do we need to buy a Claude license first, and from whom?

Yes — either an API key for integration work, or Team / Enterprise seats for general users across the organization

We can handle procurement: Thai-language quotation, PO, tax invoice, and withholding tax under Thai regulations — see Claude procurement · Or, if you already hold the licenses, we can do the integration work alone

Can you integrate with an ERP other than Saeree?

Yes, provided the system offers a way in — a REST API, a readable database, or at minimum an export file that can be produced consistently

What we cannot answer in advance is how deep a given system will let us go; that needs a look at the real thing during Discovery. If it turns out not to be worth doing, we say so then rather than carrying it through to a quotation

How is this priced?

There is no off-the-shelf rate — scopes differ too much. But the cost always breaks into three parts, and we itemize all three before anything is signed

(1) License or API usage fees, which belong to Anthropic and vary with actual consumption · (2) the integration work, quoted as a project against the agreed scope · (3) ongoing care after go-live, billed monthly or annually

How do we know when the AI gets something wrong?

Better to design for it than to catch it later — answers must cite the source document or record, every data call is logged for audit, and anything hard to reverse is restricted to read-only

Work that writes into the real system always goes through human approval. We do not design AI that writes into an ERP unsupervised

Can you really stop certain data from reaching the AI?

Yes — provided it is enforced at the tool layer the data actually passes through, not at the model. We place a checkpoint ahead of every call to Claude; when it finds something your organization has ruled out of bounds, it masks that portion or refuses the request entirely, and logs the event for administrators to review.

What has to be clear up front is that this checkpoint works from rules written in advance. It catches what you have defined a pattern for — it is not a machine that infers intent. So the first step of this work is sitting down with you to decide what must never leave, then converting that into rules the system can enforce — see the sensitive-data checkpoint.

Do we need all 13 advanced capabilities?

No, and you should not try — most organizations start with the two or three that match their actual risk and workload.

For organizations holding a lot of sensitive data, we recommend starting with the data checkpoint and row/column permissions. For those already running for a while whose answers have started drifting, start with the answer-quality test set. During Discovery we tell you which ones to do first, and which are not yet warranted at your current scope.

Can we start small rather than commit organization-wide?

We recommend exactly that — a pilot on one measurable use case in a single department, then expand

You get to see whether people genuinely change how they work before committing a larger budget. Change management usually decides the outcome more than the technology does

Why an ongoing care contract? Can't this just be a project?

It can, and we will tell you upfront what happens next. The integration you ship today is not the same thing six months later — internal processes change, new models ship and behave differently, and growing usage shifts the cost profile

With nobody watching, what we typically see is a system that still runs while answer quality drifts quietly, until people stop using it on their own

Start your Claude Integration journey

Book a Discovery session with the Grand Linux team — free, no obligation · we deliver scope + budget + timeline within a week