The short answer
When choosing an AI automation approach, a business should first establish whether the workflow is worth automating, which delivery path fits it, and whether a provider can demonstrate that the system works with real samples, has a clear human-review boundary, and can recover from failure.
An acceptable project should describe the current workflow, the boundary between system and human decisions, the way people use the system, recovery after an exception, data permissions, acceptance samples, and the scope of ongoing support. A demo, a proposal, or an unqualified accuracy claim does not establish that a system can operate in day-to-day business work.
Scope and limits
This checklist is for small and medium-sized businesses preparing to buy or improve a repetitive operational workflow. It can support an initial choice of approach, conversations with providers, and project acceptance. It does not replace a business's own legal, compliance, security, or procurement review. It also cannot set a fixed price or timeline without understanding the real systems, data, and accountable people involved.
AI automation does not mean a workflow can operate without people. Payments, external messages, public publication, customer commitments, and other high-risk actions still need a named owner, an authorization method, and a route for human takeover.
Start with the workflow, not the technology
A workflow is more likely to benefit from an automation assessment when several of these conditions are present.
- It is frequent and repetitive, requiring people to copy, organize, classify, or enter information again and again.
- The rules are relatively stable, while inputs are spread across spreadsheets, email, chat, documents, or several business systems.
- AI can help with unstructured material, while an accountable person still reviews consequential results.
- Missing inputs, timeouts, format changes, or external-system failures occur often enough that the process needs a record and a way to resume.
- The current outcome is difficult to trace, so the business owner cannot readily see where work stopped or who handled it.
If the work is infrequent, each decision depends heavily on situational judgment, or the underlying data and responsibilities are not yet defined, mapping the process usually comes before building a system. A useful assessment can conclude that automation is not suitable yet.
Choosing among SaaS, RPA, and a custom system
| Approach | Usually fits when | Main advantage | Confirm before purchasing |
|---|---|---|---|
| SaaS | The workflow is standard and the business can use the product's existing fields, permissions, and operating model | It can go live quickly, with product capability and pricing that are comparatively clear | Where data is stored, export options, permission granularity, how data is handled after cancellation, and whether essential functions require an additional plan |
| RPA | The user interface is stable, the rules are clear, and the work mainly involves clicking, copying, downloading, and entering data | It can connect some repetitive actions without changing the underlying system | How interface changes are maintained, failure recovery, credential handling, concurrency limits, and the human-takeover entry point |
| Custom system | The workflow crosses several systems or includes unstructured information, complex states, human collaboration, or special permissions | Inputs, states, review, and recovery can be designed around the real workflow | Deliverables, ownership of source code or the system, deployment method, acceptance with real samples, exception paths, and ongoing maintenance scope |
These paths can be combined. A working system may use an established SaaS product as a foundation, connect business systems through APIs, and use RPA for a small number of steps that cannot otherwise be connected. The decision rests on whether the workflow can be completed reliably at an acceptable cost.
What kind of provider to look for
The label “AI company” does not identify a provider's responsibility. Different providers are accountable for different parts of the work.
- Product vendors fit situations where the need closely matches an existing product. Check the product boundary, data and permissions, integration capability, and exit path.
- RPA implementation providers fit rule-based workflows that depend mainly on user-interface actions. Check maintenance, credential security, and failure recovery.
- Custom system delivery providers fit workflows that cross systems, use unstructured information, or require complex human collaboration. Check whether one delivery chain is responsible for diagnosis, implementation, and operational acceptance.
- Consulting or solution teams can help clarify direction. When the goal is a running system, the business still needs to establish who will develop, deploy, handle failures, and complete final acceptance.
A business does not need one provider to cover every technology, but it does need to know who owns each part and who responds when an interface fails, data is abnormal, or a model output cannot be trusted.
Seven questions to ask a provider
1. Can the provider reconstruct the real workflow?
The provider should be able to explain where input comes from, who handles it, where the result is written, which exceptions occur most often, and how the current owner knows the work is complete. Repeating the name of a requirement does not demonstrate an understanding of the workflow.
2. Is the boundary between AI and human decisions explicit?
AI can organize information, extract fields, suggest classifications, or produce a draft. Payments, external messages, public publication, and other high-risk actions should retain human authorization or a clear approval entry point. The provider should also explain how uncertain model output is passed to a person.
3. Is the deliverable a system or a demonstration?
Agree in advance on the operating entry point, deployment result, operating instructions, and ownership. Screen recordings, slides, prototypes, and a demonstration of an ideal path can help communication, but they do not replace a working delivery.
4. Are exceptions and recovery designed?
Ask what happens when an input is missing, an external interface fails, an account expires, a process times out, a submission is repeated, or a model result is unsuitable. The system should retain an exception record, a recovery point, and a way to retry or hand work back to a person.
5. How will data and permissions be handled?
Confirm which real samples are needed, where data is processed, which accounts and tokens are used, how long information is retained, and how it is backed up or deleted. Unless the relevant review or certification has taken place, ordinary technical measures should not be presented as a legal compliance conclusion or a security certification.
6. How will the project be accepted?
Acceptance should use real samples agreed by both parties and cover normal input, edge cases, and common exceptions. Record the expected result, actual result, human-review point, and recovery result. A single successful demonstration or a provider-reported metric is not enough.
7. What does ongoing support include?
Clarify ownership of the system, routine operation, defect fixes, changes to business rules, changes to third-party interfaces, and new requests. “Long-term support” does not define an unlimited promise without scope or time limits.
Standard deliverables and acceptance evidence
The scope can vary by project, but the following items form a complete delivery chain.
- The current workflow and system boundary.
- A running system and deployment result.
- Operating instructions and a human-review entry point.
- An exception record and recovery path.
- Real acceptance samples and a record of results.
- System handover, maintenance, and the scope of ongoing support.
SolveReal Systems maintains these stable facts on its enterprise services page. A project agreement still needs to confirm the business's particular systems, data, and acceptance scope. The website description is not an automatic quotation or a fixed service-level commitment.
Warning signs
- A provider promises “full automation” before learning the workflow.
- The presentation shows only model answers and omits system state, human review, and failure recovery.
- Unverifiable customer identities, accuracy rates, or improvement percentages stand in for real acceptance.
- The provider avoids questions about data location, account permissions, logs, retention, or deletion.
- An early prototype is presented as a production delivery, or post-launch ownership is not explained.
- Every problem is attributed to the model being insufficiently capable, while workflow, data, and responsibility boundaries remain unaddressed.
These signals do not automatically make a proposal unusable. They identify issues that should be written into the delivery scope and acceptance conditions instead of left to verbal understanding.
Preparing for an initial assessment
To make the first discussion more specific, prepare the following material.
- The workflow's starting point, endpoint, frequency, and responsible people.
- A set of de-identified or approved input, output, and exception samples.
- The current manual effort and the points where errors or backlogs occur most often.
- Decisions and high-risk actions that must retain human confirmation.
- Systems that need to connect, available interfaces, and deployment constraints.
- The observable outcomes the business will use to decide that the project is complete.
Review approved project facts to see how different workflows distinguish system processing, human review, and recovery boundaries. If you already have a specific workflow, submit the business question. An initial submission only helps determine whether further assessment is appropriate; it is not an automatic quote or a guaranteed meeting.
Acceptance checklist
- Real samples cover normal input, missing information, repeated submissions, and common exceptions.
- System output can be traced to the original input, processing state, and human modifications.
- Critical decisions and high-risk actions do not bypass human authorization.
- External interfaces, accounts, or model failures have a clear record, recovery point, and takeover method.
- The business can access the system, export results, and perform ordinary operations as agreed.
- Expected results, actual results, and failed items are recorded; acceptance does not rely on one demonstration.
- System ownership, permissions, data retention, maintenance, and change scope are clear.
Sources
- Artificial Intelligence Risk Management Framework 1.0, NIST
- Zero Trust Architecture, NIST SP 800-207
- Introduction to desktop flows, Microsoft Learn
- Get started with Power Automate approvals, Microsoft Learn
Next step
Choose one specific workflow and use a small set of approved real samples to assess its current state before deciding on SaaS, RPA, a custom system, or a combination. You can review enterprise AI workflow services, see related projects and delivery evidence, or submit a business question with the workflow, exception samples, and human-review requirements.