Building an AI-Powered IT Support Platform
Prevvi Team
Client
Prevvi product engineering
Industry
Managed IT Services
What was delivered
- React and TypeScript web application
- Electron-based Windows agent
- Supabase backend and edge functions
- Offline troubleshooting playbooks
- Approved-action allowlists
- CI testing and Windows build pipeline
Most IT support tooling makes a choice: either a human reads every ticket, or a chatbot deflects users until they give up. Prevvi built an AI-assisted IT support platform to prove there is a third option, where AI handles guided troubleshooting with real endpoint context, and a human takes over the moment judgment is required. This is a look inside our own product engineering.
The challenge
AI support tools fail in two predictable ways. They hallucinate fixes for machines they cannot see, and they act without boundaries on machines they can. Designing around both failure modes shaped the entire architecture:
- The AI needed real context from the endpoint it was helping, not guesses from a chat window
- It needed hard limits on what it could do, defined in advance, not discovered in an incident report
- It needed to keep working when connectivity fails, because a broken network is precisely when IT support is needed
- And it needed a clean handoff to humans, because some problems should never be left to automation
What we built
The platform combines a web application, an endpoint agent, and a cloud backend:
- A React and TypeScript web application as the user and administrator surface, with user licensing built in
- An Electron-based Windows agent that runs on the endpoint, providing the AI with real machine context and the ability to run approved diagnostics and fixes
- A Supabase backend with edge functions and versioned database migrations
- Offline troubleshooting playbooks, so the agent can walk a user through common failures even with no connection to the cloud
- Approved-action allowlists: the agent can only execute actions that were explicitly pre-approved, and nothing else
- Email escalation paths that hand the conversation to a human with full context when the AI reaches its boundary
- Security assertions, CI testing, and a Windows build pipeline, so every release is tested and reproducible
How we approached it
Guardrails as architecture, not policy
The most important design decision was making the allowlist structural. The AI does not have a general shell on the endpoint with instructions to behave; it has a menu of vetted actions and physically cannot step outside it. Safety that depends on a model’s good judgment is a hope. Safety enforced by the execution layer is a guarantee.
Design for the disconnected case
Offline playbooks exist because IT support’s hardest moments are connectivity failures. The agent carries troubleshooting logic locally, so “the internet is down” is a solvable ticket instead of a dead end. Cloud features enhance the experience; they are not a dependency for the core one.
Humans are a feature, not a fallback
Escalation was designed as a first-class flow. When a problem crosses the AI’s boundary, the platform packages what it observed and what it tried, and hands the case to a person by email with context intact. The user never repeats themselves, and the human never starts cold.
What to look for in AI-assisted IT support
If you are evaluating AI support tooling for your own organization, the architecture questions matter more than the demo:
- Where does its context come from? An AI that cannot see the endpoint is guessing. An agent-based design grounds its advice in the machine’s actual state.
- What can it execute, and who decided? Look for explicit allowlists over open-ended remote execution. Ask to see the list.
- What happens offline? Support that requires healthy connectivity fails exactly when you need it.
- How does it hand off? A good escalation carries the full history to a human. A bad one makes the user start over.
- Is the pipeline disciplined? Versioned migrations, CI tests, and reproducible builds are what separate a product from a prototype.
The outcome
The platform delivers guided troubleshooting grounded in real endpoint context, constrained by allowlisted actions, resilient to lost connectivity, and backed by human escalation. Beyond the product itself, building it sharpened how Prevvi delivers AI in client environments: the same principles, bounded actions, real context, human oversight, run through our AI solutions and managed services work. For more on how we use AI day to day, see how Prevvi uses multi-agent AI orchestration.
Key takeaways
- Ground AI support in endpoint context; a chatbot without visibility is guessing.
- Enforce boundaries in the execution layer with allowlists, not in the prompt.
- Build for offline first; connectivity failures are the core support scenario.
- Treat human escalation as a designed feature with full context handoff.
Frequently asked questions
Yes, for a meaningful class of problems, if the AI has real endpoint context and bounded actions. Guided troubleshooting for common failures, diagnostics, and approved fixes work well. The failure mode to avoid is a chatbot with no visibility into the machine, which can only guess.
Only with structural guardrails. In this platform the agent can execute exclusively pre-approved, allowlisted actions; safety is enforced by the execution layer, not by prompt instructions. An AI with an open shell and behavioral guidelines is a hope, not a guarantee.
It escalates to a human with full context: what it observed, what it tried, and what changed. Escalation is designed as a feature, not a failure, so the user never repeats themselves and the technician never starts cold.
The endpoint agent carries offline troubleshooting playbooks locally, so it can walk a user through common failures, including connectivity failures, without reaching the cloud. Support that requires healthy connectivity fails at exactly the moment it is needed most.
Four architecture questions: where the AI's context comes from (agent-based beats chat-only), what it is allowed to execute and who approved that list, what works offline, and how it hands off to humans. Also check engineering discipline: versioned migrations, CI tests, and reproducible builds separate products from prototypes.
Have a similar project in mind?
Talk to a real engineer about your environment: no sales script, just straight answers on how we would approach it.
