H&P Exec AI Data Platform

We designed and built a secure Model Context Protocol (MCP) platform for executive search firm H&P Exec. It gives their team secure, controlled access to Bullhorn and Xero from Claude, with personal data masked, per-person permissions and a full audit trail.

The Opportunity

H&P Exec is an executive search firm whose most valuable asset is the knowledge in its Bullhorn database: candidate histories, consultant notes and years of market intelligence. Its team wanted to put that knowledge to work with AI assistants like Claude, but the data sat outside those tools, and the one-off integrations they had tried were fragile, costly to run and confined to a single chat.

The brief was to connect that data to AI properly: securely, with GDPR in mind, and without candidates’ personal information reaching an external AI provider by default.

Asking Claude questions of live Bullhorn and Xero data
Changes are previewed, then written only when the user confirms

What We Built

We designed and built a multi-user MCP platform: an AI gateway between H&P Exec’s systems and the AI tools its team already uses. Staff sign in with their Microsoft account, connect Claude through a single secure link, and can then search, report on and update their Bullhorn and Xero data in plain English.

The platform gives Claude 38 purpose-built tools. On the recruitment side, staff can search across candidate notes, ask read-only questions of their Bullhorn data, from candidates and job orders to placements, and look up live records. On the finance side, they cover Xero invoices, bills and bank transactions, plus profit and loss, balance sheet and trial balance reports.

An admin dashboard lets H&P Exec decide who has access, which records each person can see, which tools they can use and what is masked. Bullhorn and Xero logins stay securely on the platform and are never shared with the AI, and the platform is hosted in London on Google Cloud.

The admin dashboard: who sees what, what is masked and which tools each person can use
Every AI action, reveal and admin change in the audit log

Safe by Design

Every safeguard is enforced by the platform rather than by asking the AI to behave.

Personal data masked by default. Names, emails and phone numbers are anonymised before results leave the platform. Staff can only reveal personal details if they have been given permission, and every reveal is logged.

The right access for each person. Each person only sees the records they’re allowed to, such as their own candidates or specific clients. These rules are enforced on the data itself, so they apply to every search and question, whatever the AI asks for.

Read-only by default. Questions of Bullhorn data can only read it, never change it, and access to Xero finance data is read-only.

Human-in-the-loop writes. Changes such as adding a note or updating a candidate’s status follow a preview-then-confirm step. The AI shows exactly what will change, and nothing is written until the user confirms. Bulk changes stay switched off unless an admin turns them on, and are limited in size.

A full audit trail. Every AI action, reveal and admin change is recorded in a permanent log that can’t be edited, so 100% of AI activity is audited.

Results

H&P Exec’s data is now available to its team inside the AI tools they already use, under rules the business controls. The platform handles around 1,700 AI requests a month and saves 58 staff hours a month, as consultants ask complex questions of years of recruitment and finance data instead of compiling reports by hand. Leadership keeps oversight of who can see what, with an auditable record of how AI is used.

Because the platform is built to connect more systems over time, Xero was added as a second one without rebuilding it. That makes it a foundation for H&P Exec’s wider AI strategy, not just a single integration.

58

Staff hours saved a month

38

AI tools across Bullhorn and Xero

~1,700

AI requests a month