FINANCE
Nightly Statistical Anomaly Scan on the Day's Expense Submissions
Runs once a night, scores every report submitted that day against each employee's historical spend baseline in Snowflake.
How it runs
The automated pipeline, trigger to output.
- TriggerNightly schedule after submission cutoff
- ActionQuery day's reports + 12-month baselinesSnowflake
- LogicCompute per-report z-score and tag outliers
- LogicRank by anomaly score, collapse clean reports
- ActionPost ranked anomaly digest to finance SlackSlack
- OutputWrite scored results to Snowflake audit tableSnowflake
What it does
Replaces gut-feel spot checks with a statistical sweep. Each night it pulls the day's submissions, compares every employee's totals and category mix against their own rolling baseline, and computes an outlier score. The result is a single ranked digest that tells finance exactly which handful of reports to actually open.
When to use it
Use this when you cannot review every report in real time but want a reliable daily triage of the unusual ones — sudden spend spikes, new merchant categories, or end-of-quarter dumps. Best for finance teams that batch their review.
How it works
- 1A nightly schedule triggers after the submission cutoff.
- 2A Snowflake query returns the day's reports plus each submitter's 12-month spend baseline by category.
- 3A logic step computes a per-report z-score and tags spikes, off-pattern categories, and round-number clusters.
- 4Reports are ranked by outlier score and the clean majority is collapsed into a count.
- 5A Slack message posts the ranked digest to the finance channel with deep links to the top flagged reports.
- 6The full scored result set is written back to a Snowflake audit table.
Set it up
What you configure once, before turning it on.
- 1Connect SnowflakeWarehouses, queries, shares.
- 2Connect SlackChannels, DMs, threads, mentions.
- 3Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 4Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 5Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More Finance workflows
Expense Submission Webhook Instant Triage and Routing
Receives each expense submission via webhook the instant it's filed, classifies it as in-policy, needs-review, or hard-violation, and routes it to auto-approval.
Monthly Vendor Spend Anomaly Brief for Finance Leads
Once a month, an agent analyzes the full expense ledger for vendor and category spend anomalies, drafts a narrative brief with the top outliers and likely causes.
Accrual Chase Board in Monday with Per-Owner Tasks
On a schedule it reads open uncoded expenses from Snowflake and creates or updates a Monday item per department owner.
Detect Annual-to-Monthly Downgrade Refunds Owed
Catches subscriptions switched from an annual term to monthly partway through the prepaid year, computes the unused prepaid balance owed back.
Detect Mid-Cycle Plan Change Mischarges and Queue Credit Memos
Listens for Stripe subscription plan changes, recomputes the correct prorated amount.
Overdue Accrual Escalation Emails to Owners and Managers
On a schedule it flags uncoded spend that has stayed open past the chase deadline and emails each delinquent owner via Gmail.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.

Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.
