The security review was meant to be routine. Instead, the CTO discovered that the revenue team was paying for four AI tools on company credit cards, two of which were sending CRM data to providers nobody had assessed. Meanwhile, the internal AI project that technology had promised sales six months earlier still had no users.
Both sides had a point. The CRO needed results this quarter and could not wait for a roadmap. The CTO needed something they could secure, maintain and explain to the board. Neither got what they wanted, and the company spent money twice.
Most GTM AI decisions involve exactly these two people: the revenue leader who wants the time back, and the technology leader who has to trust what runs. Good decisions answer both.
Why the decision usually goes wrong
It is framed as a technology choice. "Should we build on our own models or buy a platform?" is the wrong first question. The right one is "which workflow are we improving, and what does it need?" Lead routing, call summaries and renewal briefs have very different answers.
The two leaders carry different risks. Revenue carries the risk of being too slow: missed quarters, reps buried in admin. Technology carries the risk of being wrong: data leaks, unmaintainable systems, a vendor that disappears. A decision that ignores either risk gets overturned later.
Hidden costs are invisible at the start. Licences and engineering hours are easy to see. Evaluation, monitoring, model updates, prompt drift, integration upkeep and security reviews are not, and they are where most of the long-term cost lives.
Nobody owns the result. A tool bought by sales and a project run by engineering often end up with the same gap: no single person whose job is to check the output is good, notice when it drifts and decide what changes. Without that owner, quality slips quietly and the tool gets blamed.
What each leader needs to hear
The standoff usually comes from each side arguing for its own risk. It helps to name them out loud before talking about vendors.
What the CRO needs: a working result on one workflow this quarter, numbers that show it moved, and no long queue behind other engineering priorities. They also need to know the tool will not embarrass the team in front of customers.
What the CTO needs: to know where data goes, which model runs and where, who can change it, how quality is measured and what happens when something goes wrong. They also need to avoid inheriting a system nobody can maintain once the person who built it moves on.
Neither list is unreasonable. Most of the time both can be met; the problem is that they are rarely written down in the same place.
Buy, build or partner: the short version
Buy when the workflow is common and well served, such as call notes, email verification or meeting scheduling. Speed matters more than differentiation, and the vendor lets you keep your data and leave without a rebuild.
Build when the workflow is specific to how you sell, such as your scoring logic, routing rules or pricing guidance. You need control over data residency, models and evaluation, and you want the asset to compound inside your own stack.
Partner when you want to build but do not have the GTM engineering capacity yet, you need it working in weeks rather than quarters, and you want it handed over, documented, so your team owns it afterwards.
The map below puts those three answers on two axes that both leaders can agree on.
A decision both leaders can sign
When a workflow is on the table, walk it through three questions, in order. Each one is answerable in a meeting, and the answers make the trade-offs explicit rather than political.
Then agree the requirements both sides care about before anyone looks at vendors. A one-page brief is enough: the workflow, the number it should move, the data it needs, where that data may and may not go, who reviews its output, and how quality will be measured.
What it really costs over two years
The cheapest option in month one is rarely the cheapest in month twenty-four. Take a mid-market team automating lead scoring and routing. A typical shape of total cost looks like this, with assumptions you should replace with your own:
- Buy: platform licences and setup. Low upfront cost, but the logic is generic and you pay per seat for as long as you use it.
- Build in-house: two engineers for part of a year, then ongoing maintenance, evaluation and model updates. Full control, but the slowest to value and the highest running cost.
- Partner, then own: a fixed-price build in weeks, then light internal ownership. You keep the asset, without carrying a team to create it.
Total cost over two years (replace with your numbers)
The numbers will differ for every team. What rarely differs is where the surprises are: maintenance and evaluation. Ask every option how those are handled, and who pays for them.
The costs that most often get left out of the first estimate:
- Evaluation. Someone has to build a set of real examples and check the output against them every time the prompt, model or data changes. Without it you are guessing whether quality went up or down.
- Model updates. Providers change and retire models. Each change needs testing, and sometimes rework of prompts that relied on how the old model behaved.
- Integration upkeep. CRM fields get renamed, APIs change and permissions expire. Every connection is a small, permanent maintenance job.
- Security and compliance reviews. A new tool touching customer data needs assessment, and so does every material change to it.
- Review time. The people approving output are part of the cost. A workflow that saves reps four hours but needs three hours of checking is not a win yet.
What a good partner engagement looks like
If you go the partner route, insist on a short, fixed scope with a handover built in. You should own the code, the prompts, the evaluation set and the documentation at the end, and be able to run it without the partner.
A handover is more than a code repository. At the end you should have a runbook that explains how the workflow works, how to change the rules, how to rerun the evaluation, what to check when output looks wrong and who on your team owns each part. If your engineers cannot make a small change on their own in the final week, the handover is not finished.
Questions to ask any vendor or partner
These questions separate the options that will still be safe and useful in two years from the ones that will not. If the answers are vague, the risk lands on your team later.
- Where does our data go, and is it used to train anything?get it in the contract, not the sales deck
- How is quality measured, and can we see the results?an evaluation set built from your real cases
- Which model provider and region does it run on?and can it be changed without a rebuild?
- What is logged, and who can see it?every action an agent takes should be traceable
- Who reviews output before it reaches a customer?and how is that enforced?
- Who owns the code, prompts and evaluations?especially for the logic that makes you win
- What happens if we stop working together?data export, handover, notice period
Where AI agents help, and where people decide
Whichever route you choose, the operating model should be the same: agents read, combine, draft and flag; people approve what reaches a customer and own the decisions. That principle makes the CTO's job easier (every action is reviewable and logged) and the CRO's results more durable (quality holds up as volume grows).
It also gives both leaders a shared way to widen what the agent does. Track how often a reviewer changes the agent's output. When that edit rate stays low for a few weeks on a narrow task, such as internal summaries or CRM updates, let the agent do that task without review. Keep anything that reaches a customer under review for longer. Autonomy then becomes a decision made on evidence, not a debate.
Where to start this week
- List the GTM AI tools already in use, including the ones on credit cards. You cannot decide well without knowing what is running, what data each one touches and who is paying for it.
- Pick one workflow both leaders care about, and write the one-page brief together, in the same room, in one sitting.
- Walk it through the three questions above, and agree the route, the pilot and the number that decides it before anyone books a demo.
If the answer is "partner, then own", that is exactly how our AI agent programs work: a monthly price, a first agent live within weeks, a person reviewing every output, and a full handover so your team owns what we build.
Put this playbook to work
Book a call and we will apply it to your organisation with your teams.