Choose a suitable task to start with
Start with a frequent, well-defined task whose outcome is easy to review, such as preparing drafts for common questions. Traditional automation is a better fit when inputs, rules, and outcomes are defined; when the work requires interpreting text or producing a contextual response, generative AI can help with that part.
Before connecting tools, map the current process: note what happens at each step, what information it uses, and where interpretation or drafting is involved. For an initial trial, choose a task whose result can be checked, rather than automating the entire process at once.
Rule out tasks that involve sensitive decisions, broad access to personal data, or irreversible actions. The initial goal is not end-to-end automation, but identifying a small segment whose outcome can be checked. If you cannot describe what counts as an acceptable response, you do not yet have a clear standard for evaluating the workflow.
Separate rules from generation
Break the work into steps and assign each one to the appropriate tool. Fixed rules can detect an incoming message, save a record, or route it to a particular inbox. Generative AI can summarize the text, identify its likely topic, or prepare a natural-language reply. Leave predictable execution to rules and reserve the model for interpretation or drafting.
A workflow might receive a query, use generative AI to identify its likely topic or prepare a draft, and rely on fixed rules for defined actions such as routing or saving a record. Assign each step to the tool suited to it: rules handle predictable execution, while the model can assist with interpreting text or drafting.
Generated output can vary even when an input resembles an earlier one. So do not rely on the model to repeat the same wording every time, or use its text as an automatic instruction without validation. Keep rule-based actions separate from generated text, and review model output before using it to guide a consequential action.
Design a first version with human review
Constrain the model's task with clear instructions: specify what it should extract, what tone to use, what information it must not invent, and what to do when it lacks enough data. You can request clear fields—for example, topic, summary, draft, and questions—to organize the response. Check the content against the original information before relying on it.
Keep human review before sending a reply, changing an important record, or activating another process. A person can check whether the draft answers the question and adds unsupported details before deciding whether to use it. The model can help prepare text; a person decides what to communicate.
Generated output can vary, so review drafts before using them and compare them with the information the task is meant to address. If the result is incomplete or does not fit the request, revise it or handle the case manually instead of relying on the draft as a final answer.
Test the workflow before using it in real operations
Test the workflow with varied fictional examples, without information about customers or colleagues. Include clear queries, ambiguous messages, out-of-scope requests, contradictory details, and cases that should not receive an automatic answer. The purpose is to see how the workflow handles exceptions, not merely to confirm that it works on an ideal example.
Record the expected results and compare them with what the system produces: category, summary, draft, and whether it stops or routes the case. Review errors and omissions separately; a well-written answer may contain invented details, while a concise answer may have lost an important point. Adjust the instructions and rules, then repeat the cases that failed earlier.
Keep sending and external changes disabled during testing. Compare the system's results with expected results, including whether the category, summary, and draft are suitable for the case. Adjust the instructions and rules where needed, then repeat cases that produced errors or omissions.
Minimize data and permissions
Send the model only the information it needs to perform the task. If a draft can be prepared without a name, email address, postal address, or other identifiers, exclude or replace them before processing the text. Check that the tool and organizational policies permit the information you plan to use, especially before entering confidential or sensitive data.
Connect only the applications the workflow requires and grant limited permissions. A task that drafts replies does not necessarily need permission to send messages, delete records, or access an entire folder. Where possible, separate draft generation from the final action, and check who can view inputs, outputs, and execution logs.
Before using confidential information, check that the tool's terms and the organization's policies allow it. Do not paste sensitive data into a personal or unauthorized service for a test. If connectors, agents, or external sources are involved, also consider that incoming content may contain deceptive instructions: the workflow should treat it as information to analyze, not as commands that change its rules or permissions.
Measure the results and decide when to stop
Compare the assisted process with the manual one over a period of time and across an equivalent set of cases. Count the time spent preparing, reviewing, and correcting—not just how long the model takes to generate text. Net savings include oversight work: if reviewing and repairing drafts takes longer than writing them, the workflow is not serving its purpose.
Track simple indicators: the share of drafts accepted without changes, corrections required, significant errors, cases routed for review, and total time per request. Separate failures that better instructions might fix from those that require changing the scope or abandoning the use case. Do not treat greater speed as a substitute for quality, safety, or the satisfaction of people affected.
Set in advance when to pause the workflow—for example, if significant errors increase, unauthorized data appears, or it is no longer possible to review before action. Keep a manual route and assign a person responsible for restarting the system. A useful automation must also be stoppable without disrupting everyday work.
Example: preparing a draft for a common query
Suppose a small team receives repeated questions about schedules, procedures, or published requirements. A rule can detect an incoming message and create a review task; AI can summarize the question and draft a proposed reply using only reference information approved by the team. The reply remains a draft; it is not sent automatically.
The person responsible checks that the draft answers the question, adds no nonexistent conditions, and reveals no information about someone else. If the query includes an exception, requests advice, or does not match the reference information, they can edit it or route it elsewhere. The model helps prepare the text; a person decides what to communicate and sends it.
At first, limit the example to a few questions with known answers and non-sensitive content. Note the changes reviewers make and the cases that need routing. If the system confuses topics or introduces unsupported information, narrow the scope or return to manual replies; do not broaden permissions to compensate for a poorly defined task.