Artificial intelligence in automation adds capabilities such as interpreting documents and generating text to automated workflows, extending automation beyond predefined rules (automation concepts). Use it for steps that require interpretation, while keeping explicit business rules and action permissions under separate control. Start by defining what the system may recommend, what it may change, and who handles work it cannot complete.

Key takeaways

  • Choose the smallest process boundary that includes a useful result and an accountable owner.
  • Separate AI interpretation from business rules, approval, and permission to change records.
  • Test uncertain outcomes and interrupted actions before granting recurring write access.
  • Approve expansion only when the operating team can handle exceptions and maintain the system.

What does AI add to business process automation?

Business process automation coordinates a workflow from start to finish, while robotic process automation reproduces interactions with digital systems (automation definitions). For planning purposes, distinguish the overall process from its individual tasks. An invoice approval process, for example, should have a defined endpoint beyond extracting fields from a document.

AI can extract invoice information, compare it with purchase-order information, and identify discrepancies (document-processing examples). In a proposed design, keep those interpretations separate from the rules governing approval and payment. Require the system to present the source document and unresolved differences before anyone authorizes a consequential change.

When mapping a workflow that will use AI, describe each step with a verb and an object: extract invoice fields, check supplier identity, request approval, record the decision. Avoid describing the whole process as one AI task. Specify which steps require interpretation and which should follow an explicit rule.

To decide where AI belongs in a business process, introduce it only where an agreed rule cannot adequately express the task. If a required field is empty, route it through a rule. If a description needs interpretation, test whether AI can produce a useful proposal with enough evidence for review.

Choose the process by its action boundary

Before choosing an AI automation platform, write an action boundary: the exact records the system may read, the changes it may propose, and the changes it may execute. Make the boundary specific enough that IT can configure permissions and operations can explain it to a reviewer. A request to assist finance is too broad to define those permissions. Preparing invoice coding proposals without changing supplier records or releasing payments gives the team a usable starting scope.

Compsia designs, deploys, and operates custom AI production systems, with data, actions, owners, controls, acceptance tests, and operating limits defined for each system. Our explanation of what an AI business layer is provides the context for that approach. For your own selection process, require a written scope before comparing tools.

Apply these selection checks to each proposed process:

  • Name the completed business result and the record that proves completion.
  • Identify the authoritative source for each material field.
  • Assign an owner who can resolve exceptions and change the procedure.
  • Define prohibited actions alongside permitted actions.
  • Specify the manual route when automation is unavailable.

Use a two-part release decision. First, decide whether the AI output is acceptable for the task. Separately, decide whether the surrounding system is permitted to act on that output. Do not grant write access merely because a reviewer likes the generated answer.

Keep the initial release narrower when a mistaken action would be difficult to reverse. Permit drafts or proposals until the team has tested the approval and recovery paths. If existing software already meets the requirements, choose that route rather than commissioning a custom system.

Implement the workflow with owners and release evidence

Use a release record as the working document for implementation. Include the process boundary, source and destination systems, action permissions, test results, unresolved limitations, and operating owners. Keep it current when changing models, prompts, integrations, or business rules.

1. Record the existing process and its exceptions

Ask the process owner to walk through completed work and unresolved work. Document how the team recognizes an acceptable result, who approves it, and what happens when required information is missing. Establish a baseline using completion, rework, exception handling, and unresolved cases, with definitions the team can apply consistently.

Do not use activity alone as the success measure. Require a completed business record or an explicitly assigned exception. Keep incomplete work visible rather than counting it as processed.

2. Assign decision rights before configuration

Give operations ownership of the process result and exception procedure. Give IT ownership of integration credentials, access configuration, and technical recovery. Ask risk or privacy reviewers to approve the relevant data handling and action boundaries, and name an operator responsible for daily monitoring and escalation.

Assign one accountable person to each responsibility, even when several teams contribute. Record who can suspend processing and who can authorize a restart. Use the same owner map during acceptance and ongoing operation.

3. Separate proposal, validation, approval, and execution

Require AI-generated proposals to use a defined output structure. Validate mandatory fields and business rules before presenting an action for approval. Configure consequential writes so that approval applies to the exact proposed change, rather than a general instruction to continue.

Before execution, check that the underlying record still matches the version reviewed. If material information has changed, return the item for review. Use a safe permission model for AI write access to structure the questions your technical team must answer.

4. Test failure behavior alongside successful work

Build acceptance cases for missing documents, conflicting values, unauthorized requests, unavailable connected systems, and interrupted execution. Define the expected response before running each case. Require evidence that the system stops, routes, or recovers as specified.

Also test an accepted action followed by a lost confirmation. Require the integration to establish whether the action occurred before attempting it again. Record the reconciliation procedure and the person responsible for using it.

5. Approve operation, not just deployment

Name the support owner, monitoring schedule, change procedure, and suspension criteria before launch. Specify how the team will review overrides, unresolved cases, and changes in output quality. Set explicit conditions for expanding access or adding another process.

Compsia's managed operation includes monitoring, maintenance, support, performance review, and controlled improvements. The scope of managed AI operations should be part of the buying decision. Ask for those responsibilities in writing, whether your team builds internally or commissions a system.

Work through an invoice exception before permitting payment

For an invoice intake process, define separate boundaries for preparing a proposal and authorizing a payment. Design the first release to extract proposed fields, retrieve the relevant purchase order, and prepare a review item. Keep payment authorization outside that release.

Require the review item to contain the source document, extracted values, matched records, and unresolved differences. If the supplier name differs from the purchase order, route the item to a named reviewer. Do not permit the system to resolve the difference by updating the supplier record.

Walk the same item through an interruption. After approval, suppose the destination accepts the accounting entry but the integration receives no confirmation. Define the expected behavior as checking the destination using a stable transaction identifier, then either recording completion or assigning reconciliation.

Use these acceptance checks for the pattern:

  • Missing purchase-order evidence produces an assigned exception.
  • Conflicting supplier information blocks the proposed write.
  • Approval identifies the exact record and proposed values.
  • A changed source record requires renewed review.
  • An uncertain execution result enters reconciliation before any retry.

Keep the measures equally specific. Count accepted entries, reviewer corrections, unresolved exceptions, and reconciliations separately. Expand the release only after the process owner accepts both the normal path and the exception procedure.

Decide how much human review the team can actually operate

A review requirement needs an operating design. Specify who receives each item, what evidence they inspect, what they may change, and how they reject or escalate it. Test the review procedure with the people expected to use it before accepting the release.

Set review requirements by action consequence and available evidence. For a draft that changes no business record, permit a lighter review where appropriate. For changes to payment instructions or access permissions, require attributable authorization and a clearly defined execution boundary.

Decide for each action how much permission to give the automation and where a person must have an opportunity to intervene. Do not replace those individual decisions with a blanket requirement to review everything or a blanket permission to proceed whenever a model expresses confidence.

A review of AI-driven automation identifies categorization, benchmarking, and ethical risk assessment as areas needing more unified treatment (research review). For your release decision, require task-specific evidence rather than treating a broad technology category as proof of suitability. Test the exact data, decisions, and actions within the proposed scope.

Before expanding, ask the process owner to accept the unresolved-work queue as well as the completed output. Set escalation rules for aging items and assign coverage for reviewer absence. If the team cannot operate that queue, narrow the automated scope or revise the process before adding volume.

Frequently asked questions

What is AI and automation?

Automation executes tasks or coordinates processes, while AI adds capabilities such as language processing, prediction, and content generation (AI and automation definitions). In an enterprise design, specify the AI task separately from the workflow that checks and acts on its output. Make permissions and operating ownership explicit for both.

What is the 30% rule for AI?

Do not use a 30% rule as a production acceptance threshold without defining what the percentage measures and why it fits the task. Ask whether the proposal concerns effort, output review, adoption, or something else. Set acceptance criteria around correctness, permitted actions, exception handling, and recovery rather than adopting an unexplained percentage.

What are the four types of automation?

For business-process planning, use four working categories: rule-based task automation, interface automation, process orchestration, and AI-assisted interpretation. Treat these as a planning aid, not a universal taxonomy. Classify each proposed step by its mechanism, then assess its permissions and failure behavior separately.

What are some real-life examples of automation?

Published examples include customer-support responses, invoice processing, and predictive equipment maintenance (automation examples). For a first enterprise release, select a bounded task such as preparing an invoice exception or drafting a response for review. Specify the completion evidence and prohibited actions before building it.

Choose one process for an operating review

Bring a process map, representative de-identified records, current exception rules, and the name of the accountable owner to an operating review. Decide whether the process needs a rule change, an existing software feature, or a custom AI production system. Use that decision to set the scope of the next step.

Review how Compsia designs, launches and operates a production system, then choose the process you want to examine. We look at how your team runs its core processes and show you what we would make more efficient.

Primary references

  1. Get started with automation 101 topicsUiPath
  2. Automation Using AI: 5 Real-World Examples and Best PracticesAppian
  3. A Review of AI-Driven Automation Technologies: Latest Taxonomies, Existing Challenges, and Future ProspectsComputers, Materials and Continua, Tech Science Press

Continue reading: AI Agent Write Access: A Safe Permission Model.