S-03 / 06

00 AI agents

AI agents that work inside your inbox, WhatsApp and CRM. A person approves what matters.

An AI agent reads what arrives, works out what it is, does the next step in your systems and hands anything unusual to a person. Where AI automation runs on a trigger over internal work, an agent talks to your customers or your staff across channels and decides which system to touch. We build them into the CRM, inbox, WhatsApp, team chat, shared drives and databases your team already runs. Scoped access, a designed failure route and monitoring come with the build.

Proof of concept
Two to four weeks
Your records
Stay in your systems
Access
Scoped tokens, no shared logins
Quote
Fixed, after a discovery call
Fig. 01 · One agent System, access, agent, action
One AI agent path Your system keeps the record. A scoped token is the only way in. The agent reads what arrives and decides, then updates the record, replies or tells a person. When a step fails or the agent is unsure it retries and then holds the item in an exception queue for a person. Monitoring watches runs, failures, cost and alerts. YOUR SYSTEM keeps the record ACCESS THE AGENT reads, decides THE ACTION reply or update A PERSON unsure or risky MONITORING · RUNS, FAILURES, COST, ALERTS SCOPED TOKENRETRY, THEN HOLD
One AI agent path Your system keeps the record. A scoped token is the only way in. The agent reads what arrives and decides, then updates the record, replies or tells a person. When a step fails or the agent is unsure it retries and then holds the item in an exception queue for a person. Monitoring watches runs, failures, cost and alerts. YOUR SYSTEM keeps the record ACCESS THE AGENT reads, decides THE ACTION reply or update A PERSON unsure or risky MONITORING · EVERY RUN SCOPED TOKENRETRY, THEN HOLD
One agent's path. Your system keeps the record, a scoped token is the only way in, the agent reads and decides, and every run is monitored. When a step fails or the agent is unsure, it retries and then holds the item for a person, never failing in silence.

01 What it means

An agent reads, decides and acts inside the tools you already use.

An AI agent is software that reads what arrives, works out what it is, does the next step in your own systems and hands anything unusual to a person. A chatbot answers a question and stops. An agent also updates the record or routes the request to the right person.

Most businesses already have the information. It sits in inboxes, CRMs, chat tools, PDFs, spreadsheets, call notes, shared drives and databases. What is missing is something that understands what each item means and what should happen next, so a person spends the day reading and forwarding. An agent does that reading and forwarding inside the tools you already pay for, with limits on what it can touch.

Once an agent has settled in, you stop noticing it. The right fields appear in the CRM. The right person gets the right summary. The risky case gets escalated. The log shows what happened. Nobody has to ask which inbox has the truth.

02 What it can do

Five jobs we design agents for. Each one starts from a real handoff.

  • Website chat, WhatsApp, email

    Answer enquiries

    A customer writes in. The agent works out what they are asking and sends the reply from wording you have approved where that is safe, or drafts it for a person to send.

    Approved wording and an exception queue

  • After each conversation

    Write the conversation into the CRM

    When a chat or message thread ends, the agent matches the contact, writes the lead and a short summary into the CRM and creates the follow-up task.

    Your CRM stays the record

  • Website chat and WhatsApp

    Route messages across channels

    Enquiries from your website chat and WhatsApp reach one backend, sorted the same way, with consent recorded and the right person sent a short summary.

    One log across every channel

  • Anything unusual

    Hand over to a person

    When the agent is unsure or the case is sensitive, it stops and passes the whole conversation to a named person, so the customer never has to repeat themselves.

    A named owner for every handover

  • Property, healthcare, regulated services

    Handle specialist work

    Regulated and specialist work needs routing that follows your rules and a clear audit trail. We design for both from the first day.

    Audit trail from day one

Answers that have to come from your own policies and files are an AI knowledge base, which has its own page. Reading paperwork, tidying records in batches, internal triage, filing and chasing are AI automation. If what you need is a whole app, or a CRM across several locations, rather than an agent inside your existing tools, see custom software. These are jobs we design to, not a list of claims: the case we document in full is below, and every case we can describe in detail is on the case studies page.

03 How we build

Four layers, in this order. Every time.

  1. 01 · Where the truth lives

    We find out where the truth lives

    Which system owns each field, which records can be trusted and where your staff decide things by hand today. Your own system stays in charge. The agent works around it.

  2. 02 · Access

    We scope every login

    Scoped tokens, OAuth where it fits, least privilege and a named owner for each one, so the agent never depends on a shared personal login.

  3. 03 · When it fails

    We design the failure route

    Retries, fallbacks, checks on the data and a place for exceptions on every important route. Quiet failure is not acceptable in production.

  4. 04 · Watching

    We watch it run

    Run status, cost, failed records, speed and the business events that show whether the agent is actually saving time.

04 What we check

Six checks before an agent touches real customers.

  1. C-01

    Your system stays in charge

    The CRM, database, inbox or document store still owns the record. The agent reads, classifies, suggests and routes around it. An AI step never becomes the secret source of truth.

  2. C-02

    Access is scoped, never shared

    Each token can read, write or delete only what the job needs, with a named owner and a renewal rule. No shared passwords, no personal logins.

  3. C-03

    The platform can carry it

    Can we read and write the fields the business needs? Are webhooks available, or do we need controlled polling? Will the rate limits survive a normal day? We find out before the budget is committed.

  4. C-04

    The failure state is designed

    Every agent eventually meets a timeout, a malformed record, a revoked token or a changed API response. We decide what happens before that day, and failed records can be replayed without duplicates.

  5. C-05

    A person sees what matters

    Low confidence, sensitive output or anything that could affect a customer goes to a person with enough context to decide quickly.

  6. C-06

    The cost is visible

    We estimate volume before launch and track usage after it. A useful agent should not surprise the business with quiet per-message or per-document costs.

05 Where agents stop

Four times we will tell you not to build one.

  • The manual work takes twenty minutes a week. The first useful threshold is repeated work with a visible cost.
  • The agent would be your core product and need constant development. A strong in-house team that owns it day to day is the better answer.
  • It is a quick, low-risk internal handoff. A no-code tool is good enough until authentication, data protection and monitoring start to matter.
  • The only way in is brittle screen scraping, a shared personal login or an unsupported private endpoint. That is not a foundation for a customer-facing process.

When none of these apply, and you need a production result without hiring a full internal team first, that is the work we do: discovery, build, documentation, monitoring and a handover someone else can operate. If you are not sure which side of the line you are on, that is what our AI consultancy is for. We look at how the work runs and tell you straight.

06 Before we talk

You do not need a specification. Tell us three things.

  1. 01 · What arrives

    Where does it land?

    The enquiries, messages or documents that keep coming in: the shared inbox, WhatsApp, the website form, a shared drive.

  2. 02 · What happens next

    Who handles it today?

    Who reads each one, what they look up, and where they type the answer or the details afterwards.

  3. 03 · What goes wrong

    What slips when you are busy?

    What gets answered late, typed twice or missed altogether, and what you would hand over first if you could.

That is enough for us to draw the path and tell you whether an agent is the right answer or something simpler would do. If you are not sure which jobs are worth handing over, start with AI consultancy.

07 How we quote

Agent work, scoped and quoted after discovery.

  • 01

    Proof of concept

    Two to four weeks

    • One agent, one path.
    • Real test data and visible output.
    • Fixed quote before we start.
    • Recommendation for production scope.
  • 02

    Production agent

    Six to ten weeks

    • Multiple systems and business rules.
    • Auth, error handling and monitoring.
    • Documentation and staff handover.
    • Quoted fixed after discovery.
  • 03

    Managed support

    Rolling monthly

    • Monitoring and minor fixes.
    • Monthly review of failures.
    • Dependency and API-change support.
    • One named point of contact.

Each build is quoted as a fixed figure after discovery. Usage fees, hosting and third-party platform costs are itemised separately before launch.

08 Handover

Safe enough for someone else to operate.

We do not start by asking which model to use. We start by asking where the source of truth lives, who can read it, who can write to it and what happens if the output is wrong. That keeps the work grounded in the business process instead of the demo.

For regulated teams, that often means mapping personal data, checking whether a record holds sensitive information and deciding what should be logged. Some agents can store full prompts and outputs. Others should store only a status, the source record ID and a short audit note.

We design the monitoring path before launch too. A failed run should show which system failed, which records are affected, whether a retry is safe and who owns the next action. That is the difference between a managed agent and a hidden script.

We can run the agent for you on managed servers in the EU. How we run what we build.

10 Case

Two front doors, one backend. Documented in full.

A UK clinic had a website chat widget and a WhatsApp number feeding two separate inboxes. Both now reach one backend that sorts each enquiry, records consent and sends the right person a short summary.

CaseHealthcare servicesUK · anonymised

Channel routing

How we unified website chat and WhatsApp enquiries into one backend, with consistent classification, consent capture, team routing and conversation history.

Channel routing case study
  • 70%

    Enquiries triaged

    Sorted before human review.

  • 2

    Channels unified

    Website widget and WhatsApp routed into one backend.

Names redacted out of respect for our clients.

11 Questions

AI agents, answered plainly.

What an agent is, what it can touch, how we keep it safe and what it costs, answered the way we would on a call.

Q-01 What is an AI agent, in plain terms?

An AI agent is software that reads what arrives, works out what it is, does the next step in your own systems and hands anything unusual to a person. A chatbot answers a question and stops, while an agent also updates the record or routes the request to the right person. A typical one reads an enquiry from your website or WhatsApp, pulls out the useful details, replies from approved wording or drafts a reply for a person, writes the record into your CRM and flags anything it is unsure about. It has limits on what it can touch, a log of what it did and a person to escalate to.

Q-02 Can it answer our WhatsApp and website enquiries?

Yes. We built this for a UK healthcare services clinic: website chat and WhatsApp now reach one backend, each enquiry is sorted by what it is, consent is recorded and the right person gets a short summary with the conversation attached (the channel routing case). Where a question is routine and safe, an agent can answer from wording you have approved. Where it is not, it hands over to a person, and every conversation is logged.

Q-03 Can it update our CRM?

Yes, provided the CRM lets us write the fields we need, and we check that before any budget is committed. After a conversation, the agent matches the contact, writes the details and a short summary and creates the follow-up task. Your CRM stays the source of truth, and the log shows exactly what the agent changed.

Q-04 Will customers know they are talking to an AI?

They can, and we usually recommend it, because an agent that says what it is earns more trust than one that pretends. You decide the wording and the point at which a person takes over. We build the handoff so the customer does not have to repeat themselves, because the person receives the whole conversation.

Q-05 How do you stop it doing something wrong?

Three ways. It is scoped to the tools and fields the job needs, and nothing more. It answers only from approved wording or your own documents, and holds anything it is not confident about for a person. Every action is logged, with alerts on failures, so a mistake is caught and traced quickly.

Q-06 How do you connect to our systems?

Through the connections each system officially supports: OAuth where the platform offers it, scoped tokens with a named owner and a renewal rule, and webhooks where the source system supports them reliably, with controlled polling where it does not. Common ones are CRM platforms, email, WhatsApp providers, team chat, shared drives, databases, spreadsheets, website forms, booking tools and custom APIs. What matters more than the name is whether the platform lets us read and write the fields you need and has rate limits that survive a normal day. We check that before any budget is committed, and we will say no if the platform is too closed or unstable. We do not build on screen scraping, shared personal logins or unsupported private endpoints.

Q-07 How do you handle data security?

We start with an audit of where your data lives and who can reach it, then design the agent so credentials stay protected, data movement is logged and sensitive content only reaches the systems that need it. Each token is scoped to what the job needs, with a named owner and a renewal rule. We also decide upfront what gets logged: for some agents the full prompts and outputs, for others only a status, the record ID and a short audit note.

Q-08 Can an AI agent be used under UK GDPR?

Yes, if it is designed with data minimisation, lawful basis, retention, access control and deletion routes from the start. We map which personal data each route carries, keep it to what the task needs and document how long prompts, outputs and logs are kept. For higher-risk uses we recommend a DPIA before production. Built in the UK. Hosted on managed servers in the EU, under UK GDPR.

Q-09 How quickly can you build a first version?

A focused proof of concept usually takes two to four weeks: one agent, one path, real test data and output you can see. Production agents with several systems, business rules, monitoring, error handling and documentation usually take six to ten weeks. We build in that order on purpose, so you see the first path working before you commit to the full scope.

Q-10 How much does an AI agent cost?

It is quoted as a fixed figure after a discovery call, because it depends on how many systems we connect, how much each platform lets us do and how much judgement the route carries. We do not publish a rate card, because a number on a website is priced to the website, not to your process. A proof of concept takes two to four weeks and a production agent six to ten. Usage fees, hosting and third-party platform costs are itemised separately before launch, so nothing arrives as a surprise.

Q-11 How do you monitor an agent once it is live?

We track trigger volume, failed runs, retry count, processing time, cost and the business events that matter. Alerts go to the people who can fix the problem, and they say which system failed, which records are affected, whether a retry is safe and who owns the next action. Failed records can be replayed without creating duplicates.

Q-12 Can you look after it after launch?

Yes. Managed support is a rolling monthly engagement covering monitoring, minor fixes, dependency changes and a monthly review of failures or missed cases. When a platform changes its API, we handle the update. If you would rather run it yourself, the handover pack covers owners, credential scope, retention, failure routes and how changes are tested.

Q-13 Can one agent serve several channels or teams?

Yes, where the job is routing. One agent can take enquiries from your website chat and WhatsApp into a single backend, sort them the same way and send each to the right person, with every message logged (the channel routing case). If you need a full CRM across several locations, with a pipeline and permissions for each, that is a build on our custom software page.

12 Enquiry

Want an agent working in your inbox, WhatsApp or CRM?

Tell us what arrives, where it lands and what should happen next. We come back with first questions or a discovery call slot.

Let's see if we're the right fit.

Pick a time that suits you. Thirty minutes, no preparation needed.

HAVING TROUBLE? Open the calendar in a new tab