AI agents, what they are and what they do for your company
What an AI agent is, the types that exist, what companies actually use them for, what goes wrong and what to ask before you hire anyone.
What you will see in this guide
01 · The short answer
What an AI agent is
An AI agent is a program that understands what you ask of it and works out on its own what to do about it. Inside it carries a language model, which is the part that understands, plus a list of actions someone has authorized, like checking a calendar, searching a manual or filing a record.
What sets it apart from an old-style bot is who decides the answer. The bot’s answer was written before anyone asked. The agent’s is decided in the moment, from whatever it was asked.
And the difference that matters inside a company is what it works on. A general-purpose assistant stops at what it ships with. A company agent goes into your systems, with the permissions of the person using it, and inside the limits you approve.
Where generative AI ends and agentic AI begins
Search around this subject and you will run into two labels the market never bothers to explain. Generative AI produces content, anything from a paragraph to a piece of code. Agentic AI uses those same models to act: it decides the steps, calls the tools it needs, checks what comes back and finishes the task.
The shortest example we have. Generative drafts the email. Agentic writes it, checks the calendars of the people invited and sends the invitation.
That extra capability brings an extra need for control. It is the reason the rest of this guide talks so much about measurement. A system that only writes gets corrected by reading it before you send it. One that acts has already touched your systems by the time anyone notices.
02 · Types and uses
Types of AI agents
Not all agents decide the same way, and that accounts for much of the price difference, both what one costs to build and, above all, what it costs to keep running. Three categories will place almost anything you are offered.
- The reactive kind. Answers the same way to the same situation every time, following fixed rules. A thermostat that turns the heating on when the temperature drops. Cheap and predictable, though it only ever serves what someone worked out in advance.
- The planning kind. Takes a goal and works out the steps to get there itself, redoing them when something goes sideways. Ask it for a quote and it checks the catalog, looks at stock and flags a missing part. This is what gets sold today as an AI agent, ours included.
- The learning kind. Would improve by itself, from its own experience, with nobody touching it again. It is the one that turns up most in promises and least in production.
When they tell you it learns on its own
That third kind deserves a warning of its own, because “it learns from your data” is one of the most repeated phrases in this industry and it almost never means what it sounds like. An agent in production does not improve on its own. It improves when a person changes its instructions, tidies the data or adds cases to the test suite. Somebody always carries that change out.
If you are told it learns on its own, these are the three questions worth asking: what exactly changes, who carries it out, and how anyone checks that nothing else got worse. They work just as well put to the supplier who is going to build the thing as asked of yourself, to understand better what is being built.
Where an agent fits among the ways to automate
Almost any proposal you receive fits one of these five shapes. It is worth knowing which one you are being sold, because what really drives the cost of testing it, watching it and fixing it when it breaks is the shape, more than the type of agent inside. The first two carry no agent at all. The last three are what the market calls agentic AI.
- A fixed flow with no model. Steps run in a set order and rules decide the branches. Your ERP and your integration platform already do this, and it is the cheapest thing that works.
- A fixed flow with model checkpoints. The same dependable flow, with the model called only at the two or three points where something has to be read or interpreted. It is the most common shape in real company systems today, and the first one we consider.
- An agent. It gets a goal, a closed set of actions and its limits. From there it decides which action comes next as it goes. It earns its keep when the route genuinely changes with every case.
- An agent inside a flow. The route stays fixed on the outside and one of its steps hands control to an agent, which resolves that stretch and hands it back. It gives room where cases arrive messy and keeps everything else predictable.
- Several agents with an orchestrator. A single front door reads the request and sends it to the right specialist. It is the right answer when the domains really are different, which is exactly why we use it in our plant assistant. For anything else it is the wrong one, because every agent you add brings its own build, its own tests and its own monitoring.
What companies actually use AI agents for
“It works for everything” is the answer that helps nobody. In practice, almost everything running inside a company today falls into a handful of uses. These five are the ones that come up most.
They all share the same shape. Somebody had to read something and then act on a company system. If your case is missing one of those halves, there is almost always a cheaper way to solve it than an agent.
- Reading documents that arrive in no fixed format. Invoices, delivery notes, contracts, job sheets. Every sender uses its own template, so somebody ends up keying them in one by one. We have this running on utility bills.
- Asking your own data a question without knowing how to query it. Somebody asks in their own words and gets the figure back, without opening a dashboard or learning to write a query. We have this running over WhatsApp.
- Searching internal documentation and guiding a diagnosis. Manuals, procedures and a fault history that exist but that nobody finds in time. We have this running at an industrial plant.
- Qualifying inbound messages. Requests, leads, quote inquiries. The agent gathers what it takes to decide and hands it over in order. The person still decides. We have this running at a real estate agency.
- Answering and resolving requests outside office hours. Bookings, changes and cancellations at any hour, with the calendar kept up to date and a person behind it for anything urgent. We have this running in clinics, with our own product.
03 · What can go wrong
What it can do, and what it cannot
None of this is plug and play. The gap between a good result and a disappointment is almost always in the scope of the project. Too broad and the system risks being mediocre at everything and trusted for nothing. Too narrow and the wiring costs more than the work it saves. The projects that go well pick one task with a clear boundary around it, prove it, then widen it.
What these systems are genuinely good at is reading what arrives without a fixed shape, understanding a request written twenty different ways, following a procedure step by step and acting within a closed set of actions someone approved. That list is new, and it is why processes that survived every earlier wave of automation are in play now.
What they do not do is invent knowledge nobody wrote down, guarantee an outcome without code checking it first, or improve on their own while nobody measures. Part of our job is telling you when you do not need an agent. Sometimes a rule, a well-built form or a redesigned process is enough, because a model sitting on top of a broken or badly framed process only makes the mess arrive sooner.
Measured before every change, watched after
There is a risk almost nobody budgets for. A system with AI in it can get worse on its own, without anyone touching it. The provider updates the model without changing its name, your documentation grows and your data drifts. Chen, Zaharia and Zou, at Stanford and Berkeley, measured this on the same commercial model in March and in June of 2023. Its behavior changed so much that on one task accuracy went from 97.6% to 2.4%, with nothing touched on the customer side. Gartner forecast in June 2025 that more than 40% of agentic AI projects will be canceled before the end of 2027. In our experience those cancellations happen in the upkeep, not at launch, not in the launch.
Models are not deterministic, they do not always return the same thing, so checking one answer on one day guarantees nothing. The only discipline that works there is statistical and dull. Before any change ships, a suite of annotated, anonymized cases has to pass. If quality drops, the change does not go out.
After launch the watching does not stop. Every week we run a batch of scripted test conversations end to end against the live system. In the plant assistant, routing accuracy was measured on real cases and went from 72% to 91%. We also knew when to stop. Chasing a hundred percent ends with you tuning the tests until they pass rather than improving the system. In Wazzy, for instance, we started with an architecture of agents with tools at their disposal and have rebuilt it three times before landing on the one that genuinely raised the share of conversations that end well.
Numbers like these do not appear on their own. They exist because the system was built from the start to measure itself, with its test suite and its weekly watch inside the budget. When you evaluate any provider, ours included, ask for theirs. What it takes for a system to get past its sixth month has an article of its own.
04 · For your company
What the project looks like, first meeting to production
A project does not start with a platform that will do everything, it starts with a process that hurts and a figure that ought to move. And everything this guide describes, the tests before each change, the watching afterwards and the control over who sees what, goes into that first case from day one, because adding it later is the expensive version.
Our method has four named steps and each one hands over something you can hold.
- Explore. We work through the process and the data and tell you frankly whether we see a return. What comes out of this is a yes or a no.
- Prioritize. We pick the first case by pain and by figure rather than by spectacle. Out comes that case, with its number beside it.
- Implement. We build that bounded case and take it to production. Out comes a working system with its test suite in place.
- Optimize. We measure what it does with real users, so the decision about the next step comes from data rather than opinions.
How to tell if your company needs one
Not every task deserves an agent. This is the sieve we run before accepting a project, in that order. You can run it yourself with your list of processes in front of you.
- There is a task that needs judgment. Purely mechanical steps are cheaper with classic automation. If each case requires understanding something, reading a document, interpreting a request, that is where an agent earns its place.
- The information it needs exists and is reachable. An agent without reliable data answers with whatever seems most likely, which is exactly what hallucinating means. Sometimes the first real work is ordering the sources.
- A business figure should move: hours, requests handled, turnaround times. If nobody can name the number, there will be no way to know whether it worked, nor to defend it when renewal comes around.
- Someone inside will own it. An agent in production needs a person who reads the metrics and takes small decisions every month. Without an internal owner, the best system becomes an orphan.
- It happens often enough. A flow that runs three times a month never pays for the watching it demands, however well built it is. Below that frequency the answer is almost always no.
The five-minute conversation that decides it
With a candidate process in mind, three questions separate the project that pays from the one that only makes a good slide. You answered the first two in the sieve above and here they get said out loud.
Before the three, one check. If the process came to mind because of how good it would look in a demo rather than because of what it is costing you, there is a trap waiting for you and it has a name, the shiny toy.
The first is about numbers. How many times a day does it happen, and how long does it take each time. Multiply the two and you have the minutes a day this project could save you at the very most, which is worth knowing before commissioning anything.
The second is about the kind of work. What does the person handling it today actually do, look or decide. If they only check that a field is where it should be, yours is a rules problem and the model is surplus. If they have to read, understand and choose between options that are not always the same, that is where agent territory starts.
The third is the one almost nobody asks and the one that saves the most money. What happens if the system gets it wrong one time in twenty. If the answer is that it is fixed in a minute, you can automate with light validation and move fast. If the answer is a wrongly issued invoice, a lost customer or a fine, the project is still viable but it changes shape, with more validation in code, more cases escalated to a person and a bigger budget. Error tolerance does not decide whether you do it, it decides what doing it properly costs.
Custom, off the shelf, or both
The build-or-buy question has an unhelpful reputation as a technology choice. It is a question of how standard your process really is. Where your process is standard, a proven product will beat a custom build on speed and price, and pretending otherwise would be selling you hours. Where your process carries your particular judgment, your data model and your exceptions, off-the-shelf tools flatten exactly what makes the process yours, and the subscription that looked cheap starts costing workarounds.
The pattern that works is unglamorous. Buy the standard pieces, the ticketing, the calendars, the accounting software, and build the thin layer of intelligence that reads, decides and connects them the way your operation actually runs. That layer is where agents live. It is small enough to afford and it is the part no vendor can ship in a box, because the box has never seen your business.
One caution from the buying side. If a proposal only makes sense with every process migrated onto someone’s platform, you are not buying automation, you are buying a dependency. Ask what remains yours the day the contract ends. Our answer is everything, repository, infrastructure and data, and it is in writing.
The mistakes we see most often
Projects rarely die of technology. They die of first-month decisions nobody revisited. These are the ones we run into most.
- Starting with the impressive case instead of the painful one, which is the shiny toy from a few sections back. Spectacle wins applause, the boring hour-eating process wins renewed budget.
- Buying the platform before the case. First one process in production with its figure, then the platform conversation, if it is still needed.
- Leaving measurement for the end. The test suite is built with the system, not after the scare. Adding it afterwards costs double and arrives late.
- No internal owner. An ownerless agent is an orphan within three months, metrics unread and small decisions untaken.
- Waiting for perfect data. Reachable is enough, and ordering it is usually the first phase of the project, worth more than any prompt tuning.
- Promising the committee the agent will run on its own from day one. It is the promise that sounds best in a meeting and the one paid for most dearly afterwards, because autonomy gets released little by little, on what the tests actually show.
What to ask any provider
With this guide read, these six questions let you see inside any proposal, ours included.
- Which infrastructure does it run on, and in whose name are the account and the repository.
- What exactly travels in each model call, shown for your case rather than in general.
- What stops the assistant from showing data to the wrong person, and does the answer live in code or in the model’s instructions.
- What does the system do when it does not know, and what trace does that “no” leave.
- Which test suite blocks a bad change, and what is watched weekly in production.
- Which business figure did your last project move, with a number rather than adjectives.
The European rules
If you deploy in Europe, two regulations frame the work. The GDPR governs the personal data inside the system, and the EU AI Act sorts systems by the risk of their use. Its transparency duties have applied since August 2026, while the Digital Omnibus of July 2026 pushed the heavy high-risk obligations to December 2027 and beyond. Neither forbids what this guide describes. Both reward the same architecture, records, oversight and restraint designed in from the start.
We keep a full page on each, written for the person who has to defend the project in front of legal.
The vocabulary, in eleven terms
The terms that will turn up in any proposal you receive, one line each.
- Language model (LLM). The engine that understands and produces text. It knows nothing about your company by itself.
- Context. What the model can read while it answers. It is the real limit of what it can know, and of what it could give away by mistake.
- Retrieval-augmented generation (RAG). A search that pulls fragments of your documentation and hands them to the model as context so it answers from there.
- Orchestrator. The piece that routes each request to the right agent or tool. In our plant assistant it routes between half a dozen specialists.
- Tool. Each specific action an agent can carry out: querying a database, booking an appointment, sending an email.
- Structured contract. The fixed format the model uses to hand over what it understood, so code can check it before anything happens. Proposals will call it structured output or function calling.
- Test suite. Real cases with the right answer written beside them, which every change has to pass before it ships. Most vendors call these evals.
- Telemetry. The measurements the system publishes about how it is running.
- Hallucination. A false answer with a flawless surface. You fight it with architecture, not by pleading with the model.
- RPA. Automation that imitates clicks and keystrokes on your existing screens. It works well as long as nothing changes and it is brittle the moment a screen moves. An agent attacks the same problem by understanding the content, which is why the two often coexist, each on its own ground.
- User identity. The credential that travels with every action, so the agent acts with that person’s permissions rather than with those of an account that can do everything.
What it costs, in short
A custom single-job build starts around €2,500, systems that touch several of your tools approach €10,000 and monthly operation runs between €150 and €500. Large multi-agent systems are quoted per project. What moves each figure, where the monthly fee goes and what you own at the end has its own guide, with the full detail.
We cover this in detail
- Data before promptsAn entire market sells prompt engineering. Our production experience says you gain more by organizing the data than by polishing the prompt.
- The symptom signature beats the fixDocumenting how a failure is recognized from the outside pays more than documenting how it was fixed. Three real signatures from an AI assistant in production.
- What your assistant does when a tool goes downA conversational assistant depends on systems that fail. The circuit breaker that protects the user, and the three lessons production taught us about it.
- Measure AI by profit, not by productivityProductivity is AI's comfortable metric, it always looks good and commits to nothing. We prefer the uncomfortable one, which concrete gain the system delivered.
Frequently asked questions about AI agents
Does an AI agent replace the team?
In our projects it replaces tasks, not jobs. The system absorbs the repetitive volume, the triage, the first reply, the typing, and people keep the part that needs judgment. At the real-estate agency we work with, the team stopped filtering requests and went back to scheduling visits, which is the work that produces revenue.
Is an AI agent the same thing as RPA?
No. RPA imitates clicks and keystrokes on screens and works well for identical processes that never change. An agent reads content, a different document every time, a request written any old way, and decides with rules. They often coexist, RPA moving the mechanical part and the model handling whatever requires interpretation.
Are “agentic AI” and “AI agent” the same thing?
In practice they are used interchangeably, and there is nothing wrong with that. “AI agent” names the piece that does the work and “agentic AI” names the category, the way of building systems that decide and act instead of only answering. If someone presents them to you as two different products, they are selling you the same thing twice.
What happens when the AI gets it wrong?
It will, sometimes, which is why the design assumes it. Wrong outputs get caught by validation layers before they act, uncertain cases fall to a human queue with the conversation attached, and every decision is recorded so it can be inspected afterwards. The promise is not zero errors. It is errors that are visible, contained and cheap.
Do we need to change our current systems?
Usually not. The point of an agent is to adapt to the systems you already run, reading from them and writing to them under your permissions. Our deployments run in a cloud account under your name and connect to what exists. When something does need to change, it is almost always the data being unreachable, not the systems being old.
Do we need perfect data first?
Reachable, not perfect. More is gained by ordering data and tools than by polishing instructions, and sometimes that ordering is the first phase of the project. What does not work is expecting the model to compensate for sources nobody can read, because it will fill the gaps with probability.
Is our data used to train models?
No. Calls to the model run under agreements and settings that exclude training on your content, and and you approve which provider we use. Our systems also run in a cloud account under your name, so the data never lives on our infrastructure.
What if the provider changes the model underneath?
It happens, unannounced. It is documented that the same commercial model can perform very differently months apart without changing its name. That is exactly why every system carries its test battery and its weekly batch of test conversations, which catch the change before your users do. And switching models is not always a configuration tweak, sometimes it means touching the system, so anyone promising otherwise is selling you a fantasy.
How long until production?
It depends on scope, and distrust anyone quoting a deadline before seeing your systems. What stays constant is the shape, a first bounded process that reaches production and gets measured, then growth from there. Projects that start with the total platform and leave measurement for last are the ones feeding the cancellation statistics.
Does an AI agent fit your company?
Tell us what you’re up against and we’ll reply within one business day. If we don’t think it will pay for itself, we’ll tell you.