GuidesHow-to
AI Business Automation Playbook: What to Automate
A department-level playbook for AI automation: prioritise by ROI and risk, design human gates, pick Zapier vs n8n vs code, and measure outcomes — not tool hype.

Brand marks are the property of their respective owners
Most “AI automation” roadmaps are product catalogues wearing a strategy hat. A real playbook answers three questions before it names a vendor: What is worth automating? What must never run without a human? Who owns the failure at 2am?
This is that playbook for operations-minded teams — deeper than AI automation for small business (the 30-day first-steps plan). Use the SMB guide to ship one boring win. Use this page to scale across departments without building a silent mess.
Tool spine: Zapier for glue most teams can edit; n8n when control and economics demand it (Zapier vs n8n, Make vs n8n, Zapier alternatives); ChatGPT / Claude for draft and classify steps with gates. Productivity context: complete AI productivity guide. Agent reality check: complete AI agents guide.
The operating principle
Automate work that is:
- Frequent — weekly or more (daily is better).
- Rule-shaped — a new hire could follow it in three sentences.
- Low blast radius if wrong — annoying, not existential.
- Already happening — you are paying humans to do it now.
- Observable — you can detect failure within a business day.
Deprioritise: nuanced complaints, pricing exceptions, legal/HR edge cases, “summarise the company every morning” dashboards nobody reads, and anything that invents a customer commitment.
From the productivity guide: automation only escapes review debt when the step is truly rule-based. The moment an LLM writes external copy and auto-sends it, you reintroduced review with worse optics.
Three layers (do not buy layer 3 first)
| Layer | Job | Examples | Default posture |
|---|---|---|---|
| Glue | When X in app A, do Y in app B | Zapier, Make, n8n, Workers | Start here |
| Assist | Draft, classify, extract | ChatGPT, Claude, model steps in Zapier | Human gate on outbound |
| Agents | Multi-step goals with tools | Vendor “AI employee” products | Narrow scope, heavy logging |
You do not need an agent platform to stop copying form rows into a CRM.
Risk classes (label every candidate)
| Class | Examples | Automation rule |
|---|---|---|
| R0 — Internal noise | Slack ping on new form, sheet append | Full auto + failure alert |
| R1 — Internal decisions support | Ticket triage tags, weekly metrics email of raw numbers | Full auto; no invented narrative |
| R2 — External draft | Reply draft, proposal outline | Auto-draft; human send |
| R3 — Money / access / legal | Refunds, price changes, contract sends, permission grants | Human decision; tools may prepare checklist only |
| R4 — Irreversible public | Social publish, press, marketplace listings | Queue + human publish; never pure auto from LLM |
If a stakeholder cannot name the risk class, the automation is not ready for design review.
ROI: a simple model that survives contact with finance
Monthly value ≈ (minutes saved per run × runs per month ÷ 60) × loaded hourly cost
Monthly cost ≈ tool subscription + model API + (maintainer hours × loaded hourly cost)
Net ≈ value − cost
| Signal | Meaning |
|---|---|
| Net positive, R0–R1 | Scale and document |
| Net positive, R2 | Keep human send; measure edit time too |
| Net negative | Delete or simplify |
| “Positive” but silent failures | Not positive — you are borrowing from future incidents |
Maintenance is not free. A Zap nobody understands is a liability. Budget 10–20% of the saved time for ownership, or the savings are fictional.
Time-to-value gates
| Horizon | Success looks like |
|---|---|
| Week 1 | One R0/R1 flow dual-run successfully |
| Day 30 | Measured hours saved; failure alerts proven |
| Quarter | Department catalogue with owners; no orphan credentials |
| Year | Hybrid platform strategy; retired vanity flows |
Ambitious multi-app “AI employees” that skip week 1 almost always fail in month one. Boring wins compound.
Platform choice (company view)
| Situation | Lean toward |
|---|---|
| Non-technical editors, huge SaaS catalogue, modest volume | Zapier |
| Task cost or deep branching hurts | n8n (Cloud or self-host) — comparison |
| Visual scenarios, hosted mid-path | Make — Make vs n8n |
| One scheduled job, eng ownership | Worker / cron |
| Residency / VPC requirements | n8n self-host + legal review |
| Still inventing the process | Neither — fix the process |
Pricing shapes: Zapier tasks (our review checked 2026-07-27: free small allowance + two-step only; Professional multi-step from about $19.99/mo annual framing). n8n: executions on Cloud or infra on self-host (n8n.io/pricing). Always model your volume; see Zapier alternatives.
Hard rule: shared credential vault standards beat five personal Zapier accounts on the company card.
Department playbooks
Each section lists Tier A (ship) and Tier C (govern heavily). Tier B sits between: useful after A is stable.
Sales and revenue ops
| Tier | Workflow | Risk | Notes |
|---|---|---|---|
| A | Form/demo request → CRM + Slack | R0 | No lead in email-only limbo |
| A | Stage change → checklist tasks for AE | R1 | Templates, not AI poetry |
| B | Enrichment from third-party APIs | R1–R2 | Privacy review; accuracy audit |
| B | AI draft follow-up from CRM fields | R2 | Human sends |
| C | Autonomous outbound sequences | R2–R4 | Easy to spam; brand risk |
AI fit: classify inbound intent; draft personalised first lines from real CRM fields only — never invent case studies the company does not have.
Marketing
| Tier | Workflow | Risk | Notes |
|---|---|---|---|
| A | UTM form → sheet + channel | R0 | Attribution hygiene |
| B | Brief → Claude/ChatGPT draft → human edit → CMS draft | R2 | No auto-publish |
| B | Asset resize pipeline (approved brand kit) | R1 | Canva may beat custom glue |
| C | Auto-post social from LLM | R4 | Queue only |
Same honesty bar as the writing guide: unreviewed AI copy does not ship.
Customer support
| Tier | Workflow | Risk | Notes |
|---|---|---|---|
| A | New ticket → AI topic/urgency → route queue | R1 | Low confidence → human |
| A | Macro attachment by tag | R1 | Fixed macros beat freeform AI |
| B | Draft reply from ticket + help centre excerpts | R2 | Human send |
| C | Auto-refund or policy exception | R3 | Checklist only |
Classification prompt shape (short):
Labels: billing, tech, sales, spam, other. Return JSON only: label, confidence high|medium|low, reason. If not high confidence, label other.
Finance and ops
| Tier | Workflow | Risk | Notes |
|---|---|---|---|
| A | Paid Stripe/order → ops channel + sheet | R0–R1 | Numbers only |
| A | Invoice PDF → folder + “needs coding” task | R1 | Payment execution stays human |
| B | Weekly metrics email from warehouse export | R1 | No invented narrative |
| C | Auto-pay vendors from email parse | R3 | Almost never worth full auto |
People / HR
| Tier | Workflow | Risk | Notes |
|---|---|---|---|
| A | Offer accepted → checklist + accounts tickets | R1 | Fixed steps |
| B | FAQ draft from handbook excerpts | R2 | Human review; handbook is source of truth |
| C | Performance or compensation bots | R3–R4 | Policy and trust; usually skip |
Product and engineering
| Tier | Workflow | Risk | Notes |
|---|---|---|---|
| A | Critical error → on-call channel | R0 | Glue, not AI |
| B | Release note draft from merged titles | R2 | Editor ships |
| C | Auto-merge or prod config from LLM | R3 | No |
Meetings and knowledge (cross-cutting)
Capture is not automation. Otter and peers create transcripts; workflow tools push confirmed actions to trackers. Consent and policy first — see meeting transcription and meeting assistants. Never auto-join sensitive rooms.
Design patterns that survive production
1. Dual-run before cutover
Manual or old path stays live until outputs match for a defined sample.
2. Failure is a feature
Every production flow notifies on error. “Green but wrong” needs sampling (spot-check CRM rows weekly).
3. Idempotency
Webhooks retry. Design for duplicates (unique keys, upserts).
4. Least privilege credentials
Integration users, not founder god-mode OAuth, wherever vendors allow.
5. Human gates as explicit steps
Do not hide approvals in “we’ll watch Slack.” Use a ticket state, form approve, or queue.
6. Document in five bullets
Trigger, happy path, failure path, owner, link to run history. Future-you is a stranger.
7. One AI step at a time
Classify or draft or extract — not a twelve-node agent fantasy on day one.
Governance without bureaucracy
| Artifact | Owner | Cadence |
|---|---|---|
| Automation catalogue (name, risk class, tool, owner) | Ops / IT partner | Monthly |
| Credential inventory | Security-minded owner | Quarterly rotation |
| Cost report (tasks/executions + model $) | Finance partner | Monthly |
| Kill list (unused / net-negative) | Same as catalogue | Monthly |
| Incident log (silent fails, bad sends) | On-call owner | Continuous |
Shadow IT rule: personal free Zapier on company data is still company risk. Provide an approved path so people stop inventing worse ones.
90-day rollout (beyond the SMB 30-day plan)
Days 1–30 — Foundation
- Inventory repeated work (interviews beat surveys).
- Score with frequency × clarity × inverse risk.
- Ship two R0/R1 flows with failure alerts.
- Pick primary platform (usually Zapier) and logging standard.
- Read SMB automation if the team has never shipped glue.
Days 31–60 — Assist layer
- Add one classification AI step with low-confidence human path.
- Add one draft path for support or sales with mandatory human send.
- Measure edit time; if humans rewrite 80%, fix prompts or kill the step.
- Start department catalogue.
Days 61–90 — Scale and fork
- Migrate or rebuild the worst cost offender (see Zapier vs n8n).
- Retire vanity automations.
- Train a second owner per critical flow.
- Present ROI and incident log to leadership — numbers, not vibes.
Free and paid stack honesty
| Need | Starting point | Watch-out |
|---|---|---|
| Glue | Zapier free / paid | Two-step free wall; task math |
| Draft/classify | ChatGPT / Claude free or team | Caps; never autopilot send |
| Meetings | Otter free caps | Consent; minute walls |
| Research for ops decisions | Perplexity | Click citations |
| Design assets | Canva | Brand kit discipline |
Deep free-tier walls: what free AI plans include, free tools for small business.
Do not stack five paid “AI employee” subscriptions in month one. One solid glue tier + one chat tool you already use beats a graveyard of trials.
Anti-patterns (kill these)
- Automating a broken process — you get faster garbage.
- No owner — orphan Zaps at ex-employee emails.
- Auto-send charm — LLMs invent policies under pressure.
- Dashboard theatre — daily AI summaries nobody reads.
- Replatforming for Twitter — migrate for measured pain only.
- Agent washing — multi-step glue renamed “agentic” in a deck.
- Ignoring model bills — workflow invoice ≠ OpenAI/Anthropic invoice.
RACI for automation (keep it light)
| Activity | Responsible | Accountable | Consulted | Informed |
|---|---|---|---|---|
| Propose a flow | Anyone closest to the pain | Dept lead | Ops/IT partner | Catalogue owner |
| Risk class assignment | Ops partner | Dept lead | Legal/security if R3+ | Builders |
| Build & test | Named builder | Dept lead | Systems owners | Support if customer-facing |
| Production approve | Ops partner | Dept lead | Security for credentials | Finance if new spend |
| Incident response | On-call owner | Dept lead | Builder | Affected teams |
| Quarterly kill review | Catalogue owner | Ops lead | Dept leads | Finance |
If “accountable” is a committee, nothing ships and nothing dies. One name per row.
Executive one-pager (what leadership needs)
Leaders do not need node graphs. They need:
- Hours returned per month on the top five flows (measured, not aspirational).
- Incident count (silent failures caught vs customer-visible misses).
- Spend — automation tools + model APIs + maintainer hours.
- Risk posture — how many R2/R3 flows exist and whether human gates are real.
- Concentration risk — single owner, single vendor, single integration user.
- Ask — budget for platform tier, training, or a migration pilot with explicit success criteria.
If the one-pager cannot be filled, you do not have a programme — you have hobbyist glue. That can still be valuable at small scale; call it what it is.
Change management (the part tool vendors skip)
People resist automation when it threatens expertise, exposes process chaos, or dumps review work on them without removing other work.
Practical moves:
- Automate the steps people hate, not the steps that define their craft.
- Publish before/after time samples so wins are visible.
- Train the editors, not only the first builder.
- Keep a human exception path for weird cases — total automation of edge cases creates shadow processes.
- Never surprise a customer-facing team with a bot that emails their book of business.
Meeting capture deserves a special callout: assistants that join calls without culture work create political incidents faster than they create productivity. Pair any meeting assistant rollout with consent scripts and default-off sensitive calendars.
Vendor evaluation scorecard (copy/paste)
Score 1–5 each; weight by your context:
| Criterion | Weight example | Zapier | Make | n8n | Code |
|---|---|---|---|---|---|
| Time to first reliable flow | High for SMBs | ||||
| Cost at projected volume | High at scale | ||||
| Non-technical editability | High if ops-owned | ||||
| Self-host / residency | High if required | ||||
| Connector coverage for your apps | High | ||||
| Observability & alerts | Always high | ||||
| AI step quality / control | Medium | ||||
| Vendor lock-in tolerance | Context |
Fill with evidence from a pilot, not from memory of a demo. Cross-check with Zapier alternatives and Zapier vs n8n.
Sample quarterly OKRs (illustrative)
Objective: Make automation a measured ops capability, not a side quest.
- KR1: 80% of production flows have a named owner and failure alert (catalogue audit).
- KR2: Three R0/R1 flows each show ≥4 hours/month measured savings net of maintenance.
- KR3: Zero R3 flows with unsupervised external side effects (audit).
- KR4: Model + automation spend forecast within 15% of actuals for the quarter.
Adjust numbers to company size. The point is measurability, not theatre OKRs.
Verdict checklist
Before any new automation ships, every item below must be true in writing:
- Risk class labelled R0–R4.
- Owner named (a human, not a channel).
- Failure alert configured and tested.
- ROI hypothesis written, even roughly.
- Human gate decided for anything R2 or higher.
- Dual-run plan for flows that touch customers or money.
- Docs — five bullets in the catalogue.
If any item is pretend, the automation is not production — it is a demo with credentials.