[{"data":1,"prerenderedAt":1848},["ShallowReactive",2],{"site-nav-content":3,"hiring-banner-content":177,"blog:\u002Fblog\u002Fthe-ai-bill-the-board-cannot-explain":189,"blog-index-copy":723,"blog:\u002Fblog\u002Fthe-ai-bill-the-board-cannot-explain:surround":744,"site-cta-content":1829},{"header":4,"productNav":9,"nav":42,"footer":61,"askAI":132,"id":161,"title":162,"archived":163,"authors":164,"badge":164,"body":165,"date":164,"definedTerm":164,"department":164,"description":169,"extension":172,"eyebrow":164,"faqHeader":164,"faqs":164,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":173,"relatedHeading":164,"seo":174,"series":164,"sitemap":163,"status":164,"stem":175,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":176},{"productLabel":5,"loginLabel":6,"contactLabel":7,"contactSalesLabel":8},"Product","Log in","Contact","Get started for free",[10,14,18,22,26,30,34,38],{"label":11,"to":12,"description":13},"Overview","\u002Foverview","Seven layers. One closed loop.",{"label":15,"to":16,"description":17},"Conflux","\u002Fproduct\u002Fconflux","Where your team, workstreams, and agents meet.",{"label":19,"to":20,"description":21},"Agent Teams","\u002Fproduct\u002Fagent-teams","Specialist teams - governed from day one.",{"label":23,"to":24,"description":25},"Lifecycle Graph","\u002Fproduct\u002Flifecycle-graph","Intelligence that compounds across every interaction.",{"label":27,"to":28,"description":29},"Company Wiki","\u002Fproduct\u002Fwiki","Playbooks and policies where expertise stays.",{"label":31,"to":32,"description":33},"Workstreams","\u002Fproduct\u002Fworkstreams","From brief to signed-off deliverable on one canvas.",{"label":35,"to":36,"description":37},"Perception Console","\u002Fproduct\u002Fperception","Ask your whole business in plain English.",{"label":39,"to":40,"description":41},"Governance","\u002Fproduct\u002Fgovernance","Frontier AI you can actually sign off on.",[43,46,49,52,55,58],{"label":44,"to":45},"Models","\u002Fmodels",{"label":47,"to":48},"Pricing","\u002Fpricing",{"label":50,"to":51},"Integrations","\u002Fintegrations",{"label":53,"to":54},"Security","\u002Fsecurity",{"label":56,"to":57},"Partners","\u002Fpartners",{"label":59,"to":60},"Insights","\u002Fblog",{"productHeading":5,"companyHeading":62,"resourcesHeading":63,"legalHeading":64,"docsLabel":65,"docsUrl":66,"statementLines":67,"copyright":70,"companyLinks":71,"resourcesLinks":86,"legalLinks":102,"socialLinks":109,"bottomLinks":119},"Company","Resources","Legal","Docs","https:\u002F\u002Fdocs.gonimbus.ai",[68,69],"Stop training someone else's model.","Control your AI.","© 2026 Nimbus Intelligence, Inc. All rights reserved.",[72,73,74,75,76,78,81,84],{"label":47,"to":48},{"label":50,"to":51},{"label":53,"to":54},{"label":59,"to":60},{"label":77,"to":57},"Partner Program",{"label":79,"to":80},"Careers","\u002Fcareers",{"label":82,"to":83},"System status","\u002Fstatus",{"label":7,"to":85},"\u002Fcontact",[87,90,93,96,99],{"label":88,"to":89},"Glossary","\u002Fglossary",{"label":91,"to":92},"Compare","\u002Fcompare",{"label":94,"to":95},"Evaluate","\u002Fevaluate",{"label":97,"to":98},"Problems","\u002Fproblems",{"label":100,"to":101},"Use cases","\u002Fuse-cases",[103,106],{"label":104,"to":105},"Terms of Service","\u002Fterms",{"label":107,"to":108},"Privacy Policy","\u002Fprivacy",[110,113,116],{"label":111,"href":112},"LinkedIn","https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fgonimbusai\u002F",{"label":114,"href":115},"X","https:\u002F\u002Fx.com\u002Fgonimbusai",{"label":117,"href":118},"Instagram","https:\u002F\u002Fwww.instagram.com\u002Fgonimbus_ai\u002F",[120,122,124,127,128],{"label":121,"to":105},"Terms",{"label":123,"to":108},"Privacy",{"label":125,"to":126},"Compliance","\u002Fcompliance",{"label":82,"to":83},{"label":129,"to":130,"external":131},"LLMs.txt","\u002Fllms.txt",true,{"text":133,"prompt":134,"platforms":135},"Ask AI about Nimbus","I'm researching enterprise intelligence platforms and want to know how Nimbus combines perception, collaboration, and autonomous agents to drive strategic decision-making. Summarize the highlights from Nimbus's website: https:\u002F\u002Fgonimbus.ai",[136,141,146,151,156],{"name":137,"label":138,"icon":139,"hrefPrefix":140},"chatgpt","ChatGPT","simple-icons:openai","https:\u002F\u002Fchatgpt.com\u002F?prompt=",{"name":142,"label":143,"icon":144,"hrefPrefix":145},"perplexity","Perplexity","mdi:magnify","https:\u002F\u002Fwww.perplexity.ai\u002Fsearch\u002Fnew?q=",{"name":147,"label":148,"icon":149,"hrefPrefix":150},"grok","Grok","simple-icons:x","https:\u002F\u002Fx.com\u002Fi\u002Fgrok?text=",{"name":152,"label":153,"icon":154,"hrefPrefix":155},"claude","Claude","simple-icons:anthropic","https:\u002F\u002Fclaude.ai\u002Fnew?q=",{"name":157,"label":158,"icon":159,"hrefPrefix":160},"google-ai","Google AI","simple-icons:google","https:\u002F\u002Fwww.google.com\u002Fsearch?udm=50&aep=11&q=","content\u002Fshared\u002Fnav.md","Site navigation",false,null,{"type":166,"value":167,"toc":168},"minimark",[],{"title":169,"searchDepth":170,"depth":170,"links":171},"",2,[],"md","\u002Fshared\u002Fnav",{"title":162,"description":169},"shared\u002Fnav","Q7sDe7TuGEwhwUMamyeOxjvGlsUaF3Iay9VTW0KaE_U",{"enabled":163,"message":178,"linkLabel":79,"linkHref":80,"id":179,"title":180,"archived":163,"authors":164,"badge":164,"body":181,"date":164,"definedTerm":164,"department":164,"description":169,"extension":172,"eyebrow":164,"faqHeader":164,"faqs":164,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":185,"relatedHeading":164,"seo":186,"series":164,"sitemap":163,"status":164,"stem":187,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":188},"We're hiring! Join the team building the Sentient Enterprise.","content\u002Fshared\u002Fhiring.md","Hiring banner",{"type":166,"value":182,"toc":183},[],{"title":169,"searchDepth":170,"depth":170,"links":184},[],"\u002Fshared\u002Fhiring",{"title":180,"description":169},"shared\u002Fhiring","1zs3boivKda1e-b-hAyuNcmZSKjZUAXmecnwHVgcHzk",{"id":190,"title":191,"archived":163,"authors":192,"badge":197,"body":199,"date":698,"definedTerm":164,"department":164,"description":699,"extension":172,"eyebrow":164,"faqHeader":700,"faqs":703,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":163,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":713,"relatedHeading":164,"seo":714,"series":715,"sitemap":131,"status":164,"stem":716,"subhead":164,"tags":717,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":722},"content\u002Fblog\u002Fthe-ai-bill-the-board-cannot-explain.md","The Boardroom AI Dilemma: Spending Millions Without an Outcome",[193],{"name":194,"role":195,"to":196},"James Campbell","Co-Founder and CEO","https:\u002F\u002Fgonimbus.ai",{"label":198},"Thought Leadership",{"type":166,"value":200,"toc":689},[201,205,214,270,275,278,281,288,292,295,298,305,311,322,372,376,379,382,385,388,460,464,467,475,478,481,550,553,557,560,563,571,633,637,645,648,651,655],[202,203,204],"p",{},"Somewhere between the innovation slide and the cash-flow slide, the AI programme disappears. The board has been told that adoption is broad. The finance committee has been told that the bill is manageable. Neither statement is false. Together they are useless. A company can have assistants in every function and still be unable to say, in one sentence, which jobs consumed the money, which of those jobs changed a number that matters, and which of them should be stopped.",[202,206,207,208,213],{},"That gap is now a governance problem, not a tooling curiosity. ",[209,210,212],"a",{"href":211},"https:\u002F\u002Fwww.mckinsey.com\u002Fcapabilities\u002Fquantumblack\u002Four-insights\u002Fthe-state-of-ai","McKinsey’s State of AI survey"," found that 88 percent of respondents say their organisations use AI in at least one business function, up from 78 percent a year earlier, while nearly two-thirds remain in experimentation or piloting and only about a third have begun to scale. Use has become ordinary. Enterprise-level benefit has not. The invoice, meanwhile, does not wait for the operating model to catch up.",[215,216,217,233],"table",{},[218,219,220],"thead",{},[221,222,223,227,230],"tr",{},[224,225,226],"th",{},"What the board has been told",[224,228,229],{},"What is true",[224,231,232],{},"What is still missing",[234,235,236,248,259],"tbody",{},[221,237,238,242,245],{},[239,240,241],"td",{},"Adoption is broad",[239,243,244],{},"88 percent use AI in at least one function, up from 78 percent",[239,246,247],{},"Which jobs consumed the money",[221,249,250,253,256],{},[239,251,252],{},"The bill is manageable",[239,254,255],{},"A seat price can be forecast from headcount",[239,257,258],{},"Which of those jobs changed a number that matters",[221,260,261,264,267],{},[239,262,263],{},"The programme is progressing",[239,265,266],{},"Nearly two-thirds are still experimenting or piloting. About a third have begun to scale",[239,268,269],{},"Which jobs should be stopped",[271,272,274],"h2",{"id":273},"a-seat-licence-is-not-a-cost-system","A seat licence is not a cost system",[202,276,277],{},"The first distortion is the way vendors price the easy part. A per-user subscription looks like software the company already knows how to buy. It sits next to email and document tools. Procurement can compare it with last year’s collaboration suite. The board can be told that the cost is predictable because the headcount is predictable.",[202,279,280],{},"Production work does not behave like a seat. A quiet analyst and a team running overnight document review do not consume the same inference, the same tool calls, or the same human review. Seat maths hides that difference until a finance partner asks why a “flat” subscription produced a variable cloud bill, a professional-services overrun, and a second product bought because the first one could not write back to the system of record. By then the original business case has been replaced by a stack.",[202,282,283,287],{},[209,284,286],{"href":285},"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fworklab\u002Fwork-trend-index\u002Fai-at-work-is-here-now-comes-the-hard-part","Microsoft and LinkedIn’s Work Trend Index"," makes the organisational version of the same point: 75 percent of knowledge workers use generative AI at work and 78 percent of those users bring their own tools. Seventy-nine percent of leaders say their company needs AI to stay competitive, while 60 percent worry that leadership lacks a plan to implement it. Employees are already spending — time, and often a personal subscription — outside the ledger the board approved. The official bill is therefore a lower bound.",[271,289,291],{"id":290},"what-the-board-pack-actually-contains","What the board pack actually contains",[202,293,294],{},"Open a typical pack and the AI section is a narrative: a pilot count, a logo slide, a sentence about productivity. Sometimes a savings claim inherited from a vendor’s case study. What is missing is the thing a capital committee already requires of a plant, a warehouse system, or a sales-compensation change: a unit of work, an owner, and a stop.",[202,296,297],{},"Without those, three failures follow.",[202,299,300,304],{},[301,302,303],"strong",{},"Double counting."," Marketing books the hours an assistant saved drafting campaigns. Operations books the same hours because the campaign brief came out of a shared workspace. Finance adds both to an “AI ROI” appendix. The company congratulates itself on a saving that was never cash.",[202,306,307,310],{},[301,308,309],{},"Invisible rework."," A fluent draft that a manager rewrites is not free. It is labour moved from creation to inspection, often done by a more expensive person, and almost never coded as AI cost. If the inspection fails — a wrong price, a wrong clause, a wrong customer commitment — the cost leaves the AI budget entirely and lands in refunds, credits, or legal.",[202,312,313,316,317,321],{},[301,314,315],{},"The shadow bill."," Personal accounts, departmental credit cards, and “temporary” API keys do not appear in the enterprise agreement. ",[209,318,320],{"href":319},"https:\u002F\u002Fnewsroom.ibm.com\u002F2025-07-30-ibm-report-13-of-organizations-reported-breaches-of-ai-models-or-applications,-97-of-which-reported-lacking-proper-ai-access-controls","IBM’s Cost of a Data Breach research"," found that one in five organisations studied reported a breach involving shadow AI, and that high levels of shadow AI were associated with about $670,000 in higher average breach costs. Only 37 percent had policies to manage AI or detect unsanctioned use. A board that has never seen the shadow bill is not conservative. It is uninformed.",[215,323,324,337],{},[218,325,326],{},[221,327,328,331,334],{},[224,329,330],{},"Failure",[224,332,333],{},"How it gets into the pack",[224,335,336],{},"Where the money actually sits",[234,338,339,350,361],{},[221,340,341,344,347],{},[239,342,343],{},"Double counting",[239,345,346],{},"Marketing and operations both book the same hours. Finance adds them",[239,348,349],{},"A saving that was never cash",[221,351,352,355,358],{},[239,353,354],{},"Invisible rework",[239,356,357],{},"The draft looks free. A more expensive person rewrites it",[239,359,360],{},"Inspection, then refunds, credits, or legal if the inspection fails",[221,362,363,366,369],{},[239,364,365],{},"The shadow bill",[239,367,368],{},"Personal accounts, departmental cards, temporary API keys",[239,370,371],{},"Outside the enterprise agreement. About $670,000 on the breach cost where shadow use is high. Only 37 percent can detect it",[271,373,375],{"id":374},"questions-for-a-serious-finance-review","Questions for a serious finance review",[202,377,378],{},"A useful review does not start with the model catalogue. It starts with jobs.",[202,380,381],{},"Which named processes were allowed to use an assistant this quarter? Not “marketing,” but the weekly price-exception memo, the vendor-onboarding pack, the customer-email queue. Who owns each process, and who is allowed to let an output leave the building? What was the ceiling, in money or in steps, and how many runs stopped because the ceiling was hit? A stop is a fact. “We are exploring” is not.",[202,383,384],{},"Then the attribution question: can finance join the inference, the tool calls, and the human approval to the same job identifier that already exists for cost centres? If the answer is a spreadsheet assembled the night before the committee, the company does not have an AI cost system. It has a recollection.",[202,386,387],{},"Then the substitution question: did the spend replace a contractor, a bureau, an outsourced review — or did it sit on top of all three? Leaders are right to be suspicious of savings that do not show up as a cancelled purchase order. McKinsey’s survey is blunt about the distance between use and scale: most organisations have not embedded AI deeply enough into workflows to realise material enterprise-level benefits. A bill that arrives before the workflow changes is not an investment. It is a pilot with a standing order.",[215,389,390,403],{},[218,391,392],{},[221,393,394,397,400],{},[224,395,396],{},"Ask this",[224,398,399],{},"A serious answer",[224,401,402],{},"Not an answer",[234,404,405,416,427,438,449],{},[221,406,407,410,413],{},[239,408,409],{},"Which named processes used an assistant?",[239,411,412],{},"The weekly price-exception memo, the vendor-onboarding pack, the customer-email queue",[239,414,415],{},"“Marketing”",[221,417,418,421,424],{},[239,419,420],{},"Who owns it, and who may let an output leave?",[239,422,423],{},"Two names",[239,425,426],{},"A platform team",[221,428,429,432,435],{},[239,430,431],{},"What was the ceiling, and how many runs stopped?",[239,433,434],{},"A number of stops",[239,436,437],{},"“We are exploring”",[221,439,440,443,446],{},[239,441,442],{},"Can finance join inference, tool calls, and approval to a cost-centre job?",[239,444,445],{},"The same identifier the ledger already uses",[239,447,448],{},"A spreadsheet assembled the night before",[221,450,451,454,457],{},[239,452,453],{},"Did the spend replace a contractor, a bureau, or an outsourced review?",[239,455,456],{},"A cancelled purchase order",[239,458,459],{},"A vendor case study sitting on top of all three",[271,461,463],{"id":462},"what-to-put-in-front-of-the-committee-next-quarter","What to put in front of the committee next quarter",[202,465,466],{},"Pick five jobs, not fifty tools. For each, name the owner, the system of record that may be read, the class of change that may be proposed, and the person who must sign before anything is written. Put a ceiling on the run. Record the refusals. If a job cannot name those four things, it is not ready for production spend, however impressive the demo.",[202,468,469,470,474],{},"Separate the sanctioned path from the personal one. ",[209,471,473],{"href":472},"https:\u002F\u002Fwww.cnbc.com\u002F2023\u002F05\u002F02\u002Fsamsung-bans-use-of-ai-like-chatgpt-for-staff-after-misuse-of-chatbot.html","Samsung’s decision"," to restrict generative tools on company machines, after staff uploaded sensitive material, is the blunt version. The durable version is a path employees will actually use, because a ban that people route around on their phones is a policy and not a control. Microsoft’s finding that most AI users already bring their own tools is the evidence. The official system has to be good enough that the personal subscription is no longer the path of least resistance.",[202,476,477],{},"Report the bill in the language of work. Not “AI spend versus last year,” but spend and stops by job, with the human owner beside the number. A director can challenge a job. A director cannot challenge a platform abstraction.",[202,479,480],{},"Finally, retire claims you cannot reconstruct. If the business case says a function will run with fewer contractors, show the contractor line. If it says customer commitments are faster, show the refusal rate and the complaint rate beside the cycle time. Speed without those companions is how a fluent assistant becomes a liability the finance committee meets later, under a different heading.",[215,482,483,508],{},[218,484,485],{},[221,486,487,490,493,496,499,502,505],{},[224,488,489],{},"Job",[224,491,492],{},"Owner",[224,494,495],{},"System that may be read",[224,497,498],{},"Change that may be proposed",[224,500,501],{},"Who signs before anything is written",[224,503,504],{},"Ceiling",[224,506,507],{},"Refusals this month",[234,509,510,533],{},[221,511,512,515,518,521,524,527,530],{},[239,513,514],{},"One sentence a customer would recognise",[239,516,517],{},"A person",[239,519,520],{},"Named",[239,522,523],{},"A class, not “whatever the model suggests”",[239,525,526],{},"A person, before it leaves",[239,528,529],{},"Money or steps. A hit stops the run",[239,531,532],{},"A number. Zero means you bought fluency without a control",[221,534,535,538,540,542,544,546,548],{},[239,536,537],{},"Four more, then stop",[239,539],{},[239,541],{},[239,543],{},[239,545],{},[239,547],{},[239,549],{},[202,551,552],{},"A blank cell means the job is not ready for production spend.",[271,554,556],{"id":555},"one-invoice-read-properly","One invoice, read properly",[202,558,559],{},"Pull last month’s invoice for the largest assistant the company pays for. Do not start with the total. Start with the lines. If the lines are only seats, or only tokens, you do not yet have a bill you can explain. You have a consumption total. Ask the owner — if there is one — to map the largest lines to jobs: which team, which work, which system of record was read, whether anything was sent or posted, what ceiling would have stopped it. The lines that cannot be mapped are the lines to freeze at renewal. A freeze is a management act. A variance explanation that says “adoption was strong” is not.",[202,561,562],{},"Then put the personal spend beside it. Expense reports, corporate cards, and the tools people buy because the official one was slow to arrive. Most people who use AI at work bring their own. Those subscriptions are small. The work done inside them is not on your invoice and not in your log. The board does not need a lecture on shadow IT. It needs two numbers: sanctioned spend you can tie to a job, and a pulse on unsanctioned use that touches customers, code, or unpublished figures. The breach research is why the second number matters: incidents involving shadow AI were common in the studied set, and heavy shadow use lined up with higher cost.",[202,564,565,566,570],{},"Finally, match the invoice to the claim. If a business case said contractors would fall, show the contractor line. If it said the assistant does not invent policy, show a refusal from the month you are paying for. A month with spend and no refusals is a month you bought fluency without a control. ",[209,567,569],{"href":568},"https:\u002F\u002Fwww.sec.gov\u002Fnewsroom\u002Fpress-releases\u002F2024-36","Public companies and regulated advisers have already been sanctioned"," for describing capabilities they could not demonstrate. A private board should want the same demonstration before it approves the renewal. The demonstration fits on a page: five jobs, five owners, spend, stops, and one result against a baseline. Widespread use is not that page. The page is how use becomes something a director can govern.",[215,572,573,583],{},[218,574,575],{},[221,576,577,580],{},[224,578,579],{},"Start here",[224,581,582],{},"Freeze at renewal if",[234,584,585,593,601,609,617,625],{},[221,586,587,590],{},[239,588,589],{},"The largest lines, not the total",[239,591,592],{},"They are only seats or tokens, and nobody can name the job",[221,594,595,598],{},[239,596,597],{},"Team, work, system of record read, whether anything was sent or posted, the ceiling",[239,599,600],{},"The owner cannot map the line",[221,602,603,606],{},[239,604,605],{},"Sanctioned spend tied to a job",[239,607,608],{},"The only figure is a platform total",[221,610,611,614],{},[239,612,613],{},"A pulse on unsanctioned use that touches customers, code, or unpublished figures",[239,615,616],{},"You have the enterprise invoice and not the personal one. The official bill is a lower bound",[221,618,619,622],{},[239,620,621],{},"The contractor line, if the case said contractors would fall",[239,623,624],{},"The case is still in the pack and the line did not move",[221,626,627,630],{},[239,628,629],{},"One refusal from the month you are paying for",[239,631,632],{},"Spend with no refusals",[271,634,636],{"id":635},"a-call-to-finance-chairs-and-chief-financial-officers","A call to finance chairs and chief financial officers",[202,638,639,640,644],{},"The board does not need another vision deck. It needs an AI bill it can explain to itself: which jobs, which owners, which ceilings, which stops, which claims have been withdrawn because the evidence was not there. ",[209,641,643],{"href":642},"https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fai-risk-management-framework","NIST’s AI Risk Management Framework"," puts the same idea in public language — govern, map, measure, manage — but the framework does not close the books. Finance does.",[202,646,647],{},"Companies that keep treating AI as a seat product will keep approving spend they cannot attribute and discovering risk they did not budget. Companies that attach the spend to named work will find that the interesting argument is no longer whether to “do AI.” It is which jobs are worth the next increment of money, and which should be turned off. That is a conversation boards already know how to have. The work now is to make the AI programme fit it.",[649,650],"hr",{},[271,652,654],{"id":653},"references","References",[656,657,658,664,669,674,679,684],"ul",{},[659,660,661],"li",{},[209,662,663],{"href":211},"McKinsey, The State of AI: Global Survey 2025",[659,665,666],{},[209,667,668],{"href":285},"Microsoft and LinkedIn, 2024 Work Trend Index",[659,670,671],{},[209,672,673],{"href":319},"IBM, Cost of a Data Breach research release, 30 July 2025",[659,675,676],{},[209,677,678],{"href":568},"U.S. SEC, charges regarding false AI statements, 18 March 2024",[659,680,681],{},[209,682,683],{"href":472},"CNBC, Samsung restricts generative AI tools after misuse",[659,685,686],{},[209,687,688],{"href":642},"NIST AI Risk Management Framework",{"title":169,"searchDepth":170,"depth":170,"links":690},[691,692,693,694,695,696,697],{"id":273,"depth":170,"text":274},{"id":290,"depth":170,"text":291},{"id":374,"depth":170,"text":375},{"id":462,"depth":170,"text":463},{"id":555,"depth":170,"text":556},{"id":635,"depth":170,"text":636},{"id":653,"depth":170,"text":654},"2026-09-22","Why boards struggle to tie soaring API invoices to specific business outcomes, and how to implement job-level AI cost attribution.",{"eyebrow":701,"title":702},"Short answers","Spend the board can attribute",[704,707,710],{"question":705,"answer":706},"Why can boards not explain the AI bill?","Usage is everywhere and the invoice is not tied to a job, a team, or an outcome.",{"question":708,"answer":709},"What should finance be able to say?","Which work consumed the spend, what the ceiling was, and what would have been refused if the ceiling had been hit.",{"question":711,"answer":712},"Is a seat price that explanation?","No. A seat describes a login. It does not describe the run.","\u002Fblog\u002Fthe-ai-bill-the-board-cannot-explain",{"title":191,"description":699},"insight","blog\u002Fthe-ai-bill-the-board-cannot-explain",[718,719,720,721],"thought-leadership","enterprise-ai","finance","governance","eDcWOg3g9KIgpuuE88NBGZVEEteWXNu4SbHlbbKo66Y",{"hero":724,"id":726,"title":727,"archived":163,"authors":164,"badge":164,"body":728,"date":164,"definedTerm":164,"department":164,"description":732,"extension":172,"eyebrow":733,"faqHeader":164,"faqs":164,"footerBand":734,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":60,"relatedHeading":740,"seo":741,"series":164,"sitemap":131,"status":164,"stem":742,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":743},{"filename":725},"u2221455217_Flat_design_of_a_futuristic_minimalist_landscape__5d589295-cdea-4ea9-a262-be766881accf_1.png","content\u002Fblog\u002Findex.md","Exploring the future of intelligence.",{"type":166,"value":729,"toc":730},[],{"title":169,"searchDepth":170,"depth":170,"links":731},[],"Deep dives into pre-cognitive intelligence, sentient enterprises, and the evolving landscape of AI-driven business transformation.","Latest Research",{"headline":735,"description":736,"primaryLabel":737,"primaryTo":738,"secondaryLabel":739,"secondaryTo":12},"Stay at the frontier.","Subscribe for product updates and new insights.","Subscribe","\u002Fnewsletter","Explore the platform","More research",{"title":727,"description":732},"blog\u002Findex","BFSWGYO9bcTlaulivKYWyg08_DJHsdGg3OC6g_CG1Hw",[745,1367],{"id":746,"title":747,"archived":163,"authors":748,"badge":751,"body":752,"date":698,"definedTerm":164,"department":164,"description":1347,"extension":172,"eyebrow":164,"faqHeader":1348,"faqs":1350,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":163,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":1360,"relatedHeading":164,"seo":1361,"series":715,"sitemap":131,"status":164,"stem":1362,"subhead":164,"tags":1363,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":1366},"content\u002Fblog\u002Fthe-financial-mechanics-of-ai-workloads.md","The Financial Mechanics of AI: Accounting for Compute over Seats",[749],{"name":750,"to":196},"Nimbus Research",{"label":198},{"type":166,"value":753,"toc":1337},[754,757,760,766,770,773,776,787,849,853,861,864,867,875,958,962,965,971,977,983,989,1050,1056,1060,1063,1066,1069,1076,1137,1141,1144,1151,1154,1165,1219,1223,1226,1229,1232,1294,1298,1301,1304,1306,1308],[202,755,756],{},"Procurement knows how to buy a login. A person, a month, a price that moves when headcount moves. The comparison set is email, documents, a CRM seat. Finance can forecast it. The board can be told the cost is predictable because the workforce is predictable.",[202,758,759],{},"Agent work does not behave like a login. One analyst might ask three questions. A workstream might read a contract set, call a ledger, draft, get refused, draft again, and stop before anyone posts a journal — or it might not stop, and the meter continues. Two customers with the same headcount will consume wildly different inference once one of them lets runs touch real volume. The seat was the easy line. The workload is the bill that arrives as a variance, an overage, or a second product bought because the first could not be capped.",[202,761,762,765],{},[209,763,764],{"href":211},"McKinsey’s 2025 survey"," is why this matters now rather than later. Eighty-eight percent of organisations use AI in at least one function. Nearly two-thirds have not scaled it. The invoice does not wait for the operating model. Companies are paying seat prices for a pattern of use that is still a pilot, and they cannot say which jobs consumed the money. A unit of work is how the bill becomes something a finance committee can approve, cap, and stop.",[271,767,769],{"id":768},"why-the-seat-breaks","Why the seat breaks",[202,771,772],{},"A seat assumes the costly thing is the person being entitled to open the application. For a chat window used a few times a day, that assumption roughly holds, which is why the first wave of enterprise assistants was sold that way. It stops holding when the entitled actor is a run that can loop.",[202,774,775],{},"Loops multiply cost without multiplying headcount. A simulation that tries several treatments of a revenue line, a swarm that reviews a queue overnight, a retry that calls a tool again because the first response was malformed: none of these appear as a new employee. They appear as inference, retrieval, and orchestration. If the contract only knows seats, those units are either bundled until they are not, or they spill into a cloud invoice nobody mapped to a job. Finance then meets the programme as a surprise. Surprises are how standing orders survive reviews that should have killed them.",[202,777,778,779,782,783,786],{},"There is a second distortion. Seats are bought for people. A large share of actual use is not on the enterprise seat at all. ",[209,780,781],{"href":285},"Seventy-eight percent of AI users bring their own tools",". Those subscriptions are small. The work done inside them is off the ledger the board approved, and off the log. The official seat bill is a lower bound on both spend and risk. ",[209,784,785],{"href":319},"IBM’s 2025 figures"," put a cost on the shadow path: one in five studied breaches involved shadow AI, and high shadow use was associated with about $670,000 in higher average breach cost. A seat true-up will not show that number. A workload view at least tells you which sanctioned jobs exist, so the unsanctioned ones are the residual rather than the whole practice.",[215,788,789,799],{},[218,790,791],{},[221,792,793,796],{},[224,794,795],{},"Seat",[224,797,798],{},"Workload",[234,800,801,809,817,825,833,841],{},[221,802,803,806],{},[239,804,805],{},"Forecast from headcount",[239,807,808],{},"Forecast from jobs and their ceilings",[221,810,811,814],{},[239,812,813],{},"One person, one login, roughly similar use",[239,815,816],{},"A quiet user and an overnight review are different orders of cost",[221,818,819,822],{},[239,820,821],{},"Overage is a surprise or a true-up",[239,823,824],{},"Quoted work pauses. More units are a pack or a commitment you choose",[221,826,827,830],{},[239,828,829],{},"“Adoption” is the success metric",[239,831,832],{},"A stopped run is a success metric",[221,834,835,838],{},[239,836,837],{},"Shadow subscriptions sit outside the true-up",[239,839,840],{},"Unsanctioned use is visible as work that never hit a job identifier",[221,842,843,846],{},[239,844,845],{},"The business case is a vendor calculator",[239,847,848],{},"The business case names a job, a baseline, and a cancelled cost",[271,850,852],{"id":851},"the-unit-is-the-run-not-the-chair","The unit is the run, not the chair",[202,854,855,856,860],{},"Nimbus meters use in Nimbus Token Units. An NTU is a prepaid unit of completed work: analysis that retrieves or calls tools, governed runs, reports, writes, index jobs. It is a work credit. It is not a raw count of the tokens a model vendor bills wholesale, and it is not a fraction of a seat. Lightweight questions that do not retrieve or call tools can sit outside that meter; the moment the work becomes a run against company data, it draws the pool. Current plan figures, and the line between the two, belong on the ",[209,857,859],{"href":858},"\u002Fpricing\u002F","pricing"," page. They will move. The mechanic is what finance should understand when the price changes.",[202,862,863],{},"The pool is organisational. Operators share one allowance for the period. A quiet login does not trap a private bundle the close cannot use, and a busy login does not receive a larger bundle merely because a seat was added. On the published plans, extra seats entitle more people to start work. They do not enlarge the NTU pool. Capacity is a separate decision: a higher allowance, a commitment, or a pack bought with eyes open. That split is the point. Headcount and workload are different budgets. Binding them back together is how the seat model hides the bill.",[202,865,866],{},"High-commitment work shows a quote and a ceiling before anyone confirms it. The operator sees the units this brief is expected to consume, and the point at which the run will halt. A failed run does not book units. A successful retry books the quoted work once. Near the top of the pool, quoted work pauses until someone adds capacity or the period resets. The pause is the control. A meter that continues and invoices is a different product, and it should be bought as that product, on purpose.",[202,868,869,870,874],{},"The unit also gives procurement a question the seat never did. What does this job cost in units, and what happens at the ceiling? A product that continues and bills is a different risk from a product that stops and records the stop. Put the stop in the order. A warning is a suggestion. ",[209,871,873],{"href":872},"\u002Fblog\u002Fwhat-is-ai-token-economics\u002F","The same discipline applies to any meter sold as intelligence",": if you cannot join the unit to a job identifier you already use for cost centres, you have a recollection, not a cost system.",[215,876,877,890],{},[218,878,879],{},[221,880,881,884,887],{},[224,882,883],{},"Question",[224,885,886],{},"Seat answer",[224,888,889],{},"NTU answer",[234,891,892,903,914,925,936,947],{},[221,893,894,897,900],{},[239,895,896],{},"What are we buying?",[239,898,899],{},"The right to log in",[239,901,902],{},"Units consumed when runs execute, pooled across operators",[221,904,905,908,911],{},[239,906,907],{},"Who can starve whom?",[239,909,910],{},"A quiet seat hoards its bundle",[239,912,913],{},"The pool follows the job, inside a ceiling",[221,915,916,919,922],{},[239,917,918],{},"What happens when use spikes?",[239,920,921],{},"A surprise, or a true-up after the fact",[239,923,924],{},"Quoted work pauses until you add capacity on purpose",[221,926,927,930,933],{},[239,928,929],{},"Can we stop a runaway job?",[239,931,932],{},"Not if the seat is simply “on”",[239,934,935],{},"A workspace or run cap halts execution and leaves a record",[221,937,938,941,944],{},[239,939,940],{},"What do we show the board?",[239,942,943],{},"Licences versus last year",[239,945,946],{},"Units, stops, and the job they belonged to",[221,948,949,952,955],{},[239,950,951],{},"What does another seat buy?",[239,953,954],{},"Another login, and often a vague sense of more capacity",[239,956,957],{},"Another person who may start work. The pool stays the pool until you change it",[271,959,961],{"id":960},"what-the-unit-is-counting","What the unit is counting",[202,963,964],{},"A finance partner should be able to say, without a vendor engineer in the room, which activities draw the meter. Four do, in practice.",[202,966,967,970],{},[301,968,969],{},"Model work that is actually a job."," A short question with no company context is cheap and often unmetered. A pass that reads a contract set, drafts against a policy, and revises after a refusal is the workload. The unit collapses that activity into something a cost centre can hold. It does not pretend that every prompt costs the same.",[202,972,973,976],{},[301,974,975],{},"Tool calls."," Each reach into a ledger, a file store, or a ticket system is work, and it is also a place the run can loop. A malformed response that is retried is a second call. The ceiling is what stops “retry until it looks right” from becoming an unbounded invoice. If the connector can write, the retry is no longer only a cost. It is a second side effect, which is why the quote and the release belong together.",[202,978,979,982],{},[301,980,981],{},"Retrieval and indexing."," Grounding a run in the current playbook and the current records has a cost the first time the corpus is prepared, and a smaller cost when the same job runs again against material the workspace already holds. That is the economic content of “context that compounds.” The first forecast pack pays to assemble the sources. A later pack, on the same workstream, should be able to start from the chain and the playbook version rather than from a blank paste. Treat any specific decline in the quote as a design aim you can watch on your own usage, not as a saving a brochure has already booked.",[202,984,985,988],{},[301,986,987],{},"Orchestration."," Splitting a brief across specialist passes costs more than a single window, and it is often the correct spend. You are buying a finance pass that cannot send mail and a policy pass that cannot invent a clause. The unit makes that choice visible. A single generalist prompt can look thrifty on the meter and expensive in concessions. Attribute both the units and the outcome, or the cheap run will win every review and lose on the customer sentence.",[215,990,991,1004],{},[218,992,993],{},[221,994,995,998,1001],{},[224,996,997],{},"Activity",[224,999,1000],{},"Why it belongs on the meter",[224,1002,1003],{},"What a ceiling is for",[234,1005,1006,1017,1028,1039],{},[221,1007,1008,1011,1014],{},[239,1009,1010],{},"A governed run against company data",[239,1012,1013],{},"This is the workload that replaces a seat’s fiction of “similar use”",[239,1015,1016],{},"Halt a brief that would otherwise loop",[221,1018,1019,1022,1025],{},[239,1020,1021],{},"Tool calls",[239,1023,1024],{},"External systems are where cost and side effects accumulate",[239,1026,1027],{},"Stop a retry from becoming a second write",[221,1029,1030,1033,1036],{},[239,1031,1032],{},"Indexing and retrieval",[239,1034,1035],{},"The first assembly of sources is real work",[239,1037,1038],{},"Keep corpus jobs inside a period allowance",[221,1040,1041,1044,1047],{},[239,1042,1043],{},"Specialist orchestration",[239,1045,1046],{},"Separation of mandates is worth paying for",[239,1048,1049],{},"Prevent a swarm from spending past the job’s value",[202,1051,1052,1055],{},[209,1053,1054],{"href":872},"The same questions apply to any meter sold as intelligence",". If the unit cannot be joined to a job identifier you already use for cost centres, you have a recollection. If failed work is billed the same as finished work, you will hesitate to stop a bad run. If another seat silently buys more inference, you are back to forecasting cost from headcount.",[271,1057,1059],{"id":1058},"caps-before-the-swarm-starts","Caps before the swarm starts",[202,1061,1062],{},"Financial control that arrives in the monthly invoice is archaeology. The run has finished. The money is spent. The review explains. Caps move the decision to before the long job starts, which is the only moment a finance partner can still say no.",[202,1064,1065],{},"Three levels are enough. A workspace pool is the budget for a team’s runs this period. A workstream estimate is what this brief is expected to consume before specialists start, shown to the operator in units rather than discovered afterwards. A hard stop is the point at which the run halts even if the model would like another pass. Soft warnings exist for people who are watching. They are not the control. The control is the halt, recorded, so “we explored” cannot be confused with “we overran.”",[202,1067,1068],{},"Approval gates belong next to the cap when the run is allowed to cause a side effect or to spend past a threshold a manager cares about. A simulation that only drafts can be cheap to retry. A simulation that is about to post, send, or pay is no longer a metering question. It is a release question. The person who releases it should see the cost and the payload together. Splitting them — finance sees the bill next month, operations sees the sentence now — is how both miss the decision.",[202,1070,1071,1072,1075],{},"This is ordinary commitment control applied to a new meter. You would not let a plant order materials with no purchase-order limit because the vendor’s interface was conversational. Do not let a swarm do it because the interface is a brief. ",[209,1073,1074],{"href":642},"NIST’s govern-and-measure language"," is the public version. The internal version is a ceiling that fires.",[215,1077,1078,1091],{},[218,1079,1080],{},[221,1081,1082,1085,1088],{},[224,1083,1084],{},"Gate",[224,1086,1087],{},"When it fires",[224,1089,1090],{},"What “fired” looks like in the pack",[234,1092,1093,1104,1115,1126],{},[221,1094,1095,1098,1101],{},[239,1096,1097],{},"Estimate before start",[239,1099,1100],{},"The operator sees expected units for this brief",[239,1102,1103],{},"A number, not “it depends”",[221,1105,1106,1109,1112],{},[239,1107,1108],{},"Workspace pool",[239,1110,1111],{},"The team’s period allowance is exhausted",[239,1113,1114],{},"New runs wait, or overage is explicitly on",[221,1116,1117,1120,1123],{},[239,1118,1119],{},"Hard stop on a run",[239,1121,1122],{},"The brief hits its own cap mid-flight",[239,1124,1125],{},"The run halts. The halt is stored",[221,1127,1128,1131,1134],{},[239,1129,1130],{},"Release on a write or a high spend",[239,1132,1133],{},"A person must see payload and cost",[239,1135,1136],{},"A name, or the action did not happen",[271,1138,1140],{"id":1139},"attribute-the-unit-to-a-signed-outcome","Attribute the unit to a signed outcome",[202,1142,1143],{},"Units are not a benefit. They are a cost. The benefit is a job that finished: a commentary a controller will sign, a claim answered against the current rule, a queue cleared without a rise in reopen rate. Roi that stops at “hours saved,” especially hours a vendor modelled, is the personal clock. The operating clock is elapsed time, quality, and a step you actually deleted, set against a baseline you froze before the run was allowed in.",[202,1145,1146,1147,1150],{},"Join them. For each workstream worth money, report units consumed, whether it stopped at a ceiling, whether a person released or refused the output, and what happened to the external measure you already trust — concessions, rework, a contractor line. A month of units and no refusals is a month you bought fluency without a control. A month of units and no movement in the job is a popular meter. ",[209,1148,1149],{"href":211},"Most organisations are still in that pattern",". The ones that leave it will be the ones whose finance team can point at five jobs and say what the units bought.",[202,1152,1153],{},"Do not book a saving from the meter. Book a saving when the job got shorter or cheaper against the baseline, the error rate did not worsen, and something left the calendar or the contractor list. Hold headcount claims until that cycle has happened. Taking the seat-count “efficiency” in the announcement is how the cost returns later as complaints and contractors under another name.",[202,1155,1156,1159,1160,1164],{},[209,1157,1158],{"href":568},"Public cases about describing a capability you cannot show"," are a useful constraint on the business case itself. “AI-driven savings” is a claim. If the evidence is a unit total and a survey of people who feel faster, say that, and do not say more. ",[209,1161,1163],{"href":1162},"https:\u002F\u002Fwww.ftc.gov\u002Fbusiness-guidance\u002Fblog\u002F2023\u002F02\u002Fkeep-your-ai-claims-check","The FTC’s instruction on AI claims"," is aimed at advertisers. It is also a sound rule for an internal pack.",[215,1166,1167,1177],{},[218,1168,1169],{},[221,1170,1171,1174],{},[224,1172,1173],{},"Show this",[224,1175,1176],{},"Do not show this as the result",[234,1178,1179,1187,1195,1203,1211],{},[221,1180,1181,1184],{},[239,1182,1183],{},"Units by workstream, and stops",[239,1185,1186],{},"A single platform total labelled “adoption”",[221,1188,1189,1192],{},[239,1190,1191],{},"Release or refusal beside the units",[239,1193,1194],{},"A month of spend with no refusal",[221,1196,1197,1200],{},[239,1198,1199],{},"Baseline versus outcome on the job",[239,1201,1202],{},"A vendor calculator of hours saved",[221,1204,1205,1208],{},[239,1206,1207],{},"The contractor or meeting that disappeared",[239,1209,1210],{},"A headcount reduction taken before the quality cycle",[221,1212,1213,1216],{},[239,1214,1215],{},"Overage, if you chose it, as a conscious rate",[239,1217,1218],{},"A cloud variance nobody can name",[271,1220,1222],{"id":1221},"one-recurring-pack-attributed","One recurring pack, attributed",[202,1224,1225],{},"Consider a commentary workstream finance already trusts enough to put in front of a controller. Before the first run, the operator sees a quote in units and a ceiling. The brief names the finish: a pack that cites the ledger and the playbook, and does not post. The run either completes inside the ceiling or halts and records the halt. Units book when the run succeeds. The person who will sign the pack is the person who releases it. Next month the same workstream runs again. The quote is visible again. If the workspace already holds the sources and the prior release, the quote can come down. You will see that on the usage record if it happens. You should not put a brochure’s illustration into the board pack as if it were your result.",[202,1227,1228],{},"The attribution line is short. Workstream name. Units booked. Whether it halted. Whether a person released or refused. The external measure you already track for that job: cycle time to a signed pack, number of restatements, a contractor day you did not buy. A quarter of those lines is a cost system. A quarter of platform-wide totals labelled “AI spend” is a variance with a new name.",[202,1230,1231],{},"Procurement’s schedule can require the mechanic without freezing a price that will move. Define the unit as completed work, not as a wholesale model token and not as a seat. State that the allowance is pooled at the organisation, and that seats do not increase it. State what happens near exhaustion: an alert, then a pause of quoted work, until someone adds capacity on purpose. State that a failed run does not book. State that usage can be exported by workstream, beside the release. A vendor that can only invoice seats, or can only invoice after the overrun, has not met the schedule. Pay them for a chat window if that is what you want. Do not pay them as if they had sold a workload you can stop.",[215,1233,1234,1244],{},[218,1235,1236],{},[221,1237,1238,1241],{},[224,1239,1240],{},"Put this in the order",[224,1242,1243],{},"The answer that counts",[234,1245,1246,1254,1262,1270,1278,1286],{},[221,1247,1248,1251],{},[239,1249,1250],{},"What is the unit?",[239,1252,1253],{},"Completed governed work, pooled, separate from the seat",[221,1255,1256,1259],{},[239,1257,1258],{},"What does a seat add?",[239,1260,1261],{},"A person who may start work. Not a larger inference budget",[221,1263,1264,1267],{},[239,1265,1266],{},"What happens before a long run?",[239,1268,1269],{},"A quote and a ceiling the operator can see",[221,1271,1272,1275],{},[239,1273,1274],{},"What happens if the run fails?",[239,1276,1277],{},"It does not book. A successful retry books once",[221,1279,1280,1283],{},[239,1281,1282],{},"What happens when the pool is exhausted?",[239,1284,1285],{},"Quoted work pauses. More capacity is a decision",[221,1287,1288,1291],{},[239,1289,1290],{},"What do we receive each month?",[239,1292,1293],{},"Units, halts, and releases by workstream",[271,1295,1297],{"id":1296},"a-call-to-chief-financial-officers","A call to chief financial officers",[202,1299,1300],{},"Keep the seat if you need to know how many people may start work. Do not let the seat be the cost system. Ask for the unit, the pool, the ceiling, and the stop. Ask which jobs consumed last month’s units and which of those jobs changed a number you already manage. Freeze the lines you cannot map.",[202,1302,1303],{},"The argument worth having is no longer whether the company will “do AI.” People already are. The argument is which jobs are worth the next increment of units, and which runs should halt. That is a finance conversation. The meter has to be built so the conversation can happen before the invoice, not after it.",[649,1305],{},[271,1307,654],{"id":653},[656,1309,1310,1314,1318,1323,1327,1332],{},[659,1311,1312],{},[209,1313,663],{"href":211},[659,1315,1316],{},[209,1317,668],{"href":285},[659,1319,1320],{},[209,1321,1322],{"href":319},"IBM newsroom, 30 July 2025",[659,1324,1325],{},[209,1326,688],{"href":642},[659,1328,1329],{},[209,1330,1331],{"href":568},"U.S. SEC press release 2024-36",[659,1333,1334],{},[209,1335,1336],{"href":1162},"U.S. FTC, Keep your AI claims in check",{"title":169,"searchDepth":170,"depth":170,"links":1338},[1339,1340,1341,1342,1343,1344,1345,1346],{"id":768,"depth":170,"text":769},{"id":851,"depth":170,"text":852},{"id":960,"depth":170,"text":961},{"id":1058,"depth":170,"text":1059},{"id":1139,"depth":170,"text":1140},{"id":1221,"depth":170,"text":1222},{"id":1296,"depth":170,"text":1297},{"id":653,"depth":170,"text":654},"How agentic AI shifts enterprise IT budgeting from per-seat SaaS headcount pricing to variable compute and tool-execution costs.",{"eyebrow":701,"title":1349},"A unit of work, with a ceiling",[1351,1354,1357],{"question":1352,"answer":1353},"Why does a seat price misdescribe an agent?","A seat is a person with a login. An agent run is compute, tool calls, and a job that may never map to a headcount line.",{"question":1355,"answer":1356},"How should the bill be shaped?","As a unit of work, with a ceiling, before it is a subscription.",{"question":1358,"answer":1359},"What should finance see before the run?","A quote for the job and a cap that stops it. Unlimited AI is not a control.","\u002Fblog\u002Fthe-financial-mechanics-of-ai-workloads",{"title":747,"description":1347},"blog\u002Fthe-financial-mechanics-of-ai-workloads",[718,720,1364,1365],"procurement","token-economics","SYkeMl_8eKvtn37lxnq2dvkKA-TGilDBuEC_pGQWLlA",{"id":1368,"title":1369,"archived":163,"authors":1370,"badge":1374,"body":1375,"date":698,"definedTerm":164,"department":164,"description":1810,"extension":172,"eyebrow":164,"faqHeader":1811,"faqs":1813,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":163,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":1823,"relatedHeading":164,"seo":1824,"series":715,"sitemap":131,"status":164,"stem":1825,"subhead":164,"tags":1826,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":1828},"content\u002Fblog\u002Fprocurement-is-buying-demos-and-inheriting-operating-risk.md","Why Buying AI Demos Leaves Enterprise Procurement Exposed",[1371],{"name":1372,"role":1373,"to":196},"Zac Radbone","Co-Founder and CCO",{"label":198},{"type":166,"value":1376,"toc":1801},[1377,1380,1383,1387,1390,1403,1406,1417,1478,1482,1493,1500,1561,1565,1568,1575,1578,1581,1584,1592,1654,1658,1661,1664,1667,1671,1674,1746,1750,1753,1756,1758,1760],[202,1378,1379],{},"Enterprise buying was built for products that sit still. A database has a capacity. A suite has a seat. A security review has a questionnaire that mostly stays true after signature. Generative systems do not sit still. The model behind the demo changes. The vendor’s subprocessors change. The customer’s own staff discover uses the statement of work never named. Procurement, which is supposed to be the adult in the buying process, is still scoring the demo.",[202,1381,1382],{},"The result is a contract that buys a capability and inherits an operating model by accident. The operating model — who may paste what, what is retained, whether a human must approve a customer-facing sentence, what happens when the vendor’s claim exceeds the product — is where the cost and the liability are. It is rarely the section with the weighting in the scorecard.",[271,1384,1386],{"id":1385},"what-the-scorecard-rewards","What the scorecard rewards",[202,1388,1389],{},"A typical AI procurement scores accuracy on a canned set, integration logos, price per seat, and a security packet. Those are not worthless. They are incomplete.",[202,1391,1392,1393,1397,1398,1402],{},"Accuracy on a canned set does not tell you what the system does with your stale policy. ",[209,1394,1396],{"href":1395},"https:\u002F\u002Fwww.cbc.ca\u002Fnews\u002Fcanada\u002Fbritish-columbia\u002Fair-canada-chatbot-lawsuit-1.7116416","Air Canada’s chatbot"," was not failing a benchmark. It was contradicting the company’s own bereavement rule, and ",[209,1399,1401],{"href":1400},"https:\u002F\u002Fwww.canlii.org\u002Fen\u002Fbc\u002Fbccrt\u002Fdoc\u002F2024\u002F2024bccrt149\u002F2024bccrt149.html","the tribunal"," held the company to the contradiction. A buyer who never ran the demo against their own live rule bought a spokesperson.",[202,1404,1405],{},"Price per seat hides the production meter. Two customers with the same headcount will consume wildly different inference once one of them lets the tool touch real volume. If the contract converts overages into a surprise, finance will meet the tool again as a variance, not as a project. Ask for the unit of work and the ceiling, and ask what the product does when the ceiling is hit. A product that continues and bills is a different risk from a product that stops and records the stop.",[202,1407,1408,1409,1412,1413,1416],{},"The security packet is a snapshot. ",[209,1410,1411],{"href":319},"IBM’s 2025 findings"," — 97 percent of organisations with an AI-related breach lacking access controls, shadow AI in one in five breaches — describe customers more than they describe vendors. A vendor can be certified and still be deployed, by you, without access control. Procurement’s job is to make the deployment conditions contractual: identity, least privilege, logging, a ban on training on your prompts unless you opt in in writing. ",[209,1414,1415],{"href":642},"NIST’s framework"," is a reasonable exhibit to attach. A logo on a slide is not.",[215,1418,1419,1432],{},[218,1420,1421],{},[221,1422,1423,1426,1429],{},[224,1424,1425],{},"What the scorecard weights",[224,1427,1428],{},"What it does not tell you",[224,1430,1431],{},"The test that belongs in the RFP",[234,1433,1434,1445,1456,1467],{},[221,1435,1436,1439,1442],{},[239,1437,1438],{},"Accuracy on a canned set",[239,1440,1441],{},"What the system does with your stale policy",[239,1443,1444],{},"Run it against the live rule. If it contradicts you, you are buying a spokesperson",[221,1446,1447,1450,1453],{},[239,1448,1449],{},"Integration logos",[239,1451,1452],{},"Whether a connector can write, and who can cut it off at 9 p.m.",[239,1454,1455],{},"Read versus write, an owner, and a kill switch",[221,1457,1458,1461,1464],{},[239,1459,1460],{},"Price per seat",[239,1462,1463],{},"The production meter once the tool touches real volume",[239,1465,1466],{},"Unit of work, ceiling, and whether hitting the ceiling stops or bills",[221,1468,1469,1472,1475],{},[239,1470,1471],{},"A security packet",[239,1473,1474],{},"How you will deploy it. Certified vendors are still deployed without access control",[239,1476,1477],{},"Identity, least privilege, logging, and no training on your prompts unless you opt in in writing",[271,1479,1481],{"id":1480},"claims-are-a-procurement-issue","Claims are a procurement issue",[202,1483,1484,1485,1488,1489,1492],{},"Vendors are under the same pressure as their customers to sound advanced. Some will overshoot. The ",[209,1486,1487],{"href":568},"SEC’s cases against Delphia and Global Predictions"," were about advisers, not software firms, but the pattern — “AI-driven” as an untrue statement of fact — is one a buyer should assume exists in the market. The ",[209,1490,1491],{"href":1162},"FTC has told advertisers"," to keep AI claims in check. Translate that into the RFP. Require the bidder to describe, for each headline claim, the feature that implements it today, not on the roadmap. Reserve a right to test that feature on your data before acceptance. If the claim is “human in the loop,” make them show the screen the human sees and the state in which the system is blocked without that human.",[202,1494,1495,1499],{},[209,1496,1498],{"href":1497},"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F81230.html","ISO\u002FIEC 42001"," certification, where a vendor has it, is a sign they run a management system. It is not a sign their sales deck is precise. Read the deck against the admin guide.",[215,1501,1502,1515],{},[218,1503,1504],{},[221,1505,1506,1509,1512],{},[224,1507,1508],{},"Headline claim",[224,1510,1511],{},"What you require before it scores",[224,1513,1514],{},"Fail",[234,1516,1517,1528,1539,1550],{},[221,1518,1519,1522,1525],{},[239,1520,1521],{},"“AI-driven,” “ensures,” “the first”",[239,1523,1524],{},"The feature that implements it today, not on the roadmap, tested on your data",[239,1526,1527],{},"The deck describes a roadmap. The admin guide does not",[221,1529,1530,1533,1536],{},[239,1531,1532],{},"“Human in the loop”",[239,1534,1535],{},"The screen the human sees, and the state in which the system is blocked without them",[239,1537,1538],{},"The human sees a digest the next morning",[221,1540,1541,1544,1547],{},[239,1542,1543],{},"“Will not invent policy”",[239,1545,1546],{},"A refusal, in your environment, on your stale document, on purpose",[239,1548,1549],{},"They cannot refuse. The claim is advertising",[221,1551,1552,1555,1558],{},[239,1553,1554],{},"A management-system certificate",[239,1556,1557],{},"Hygiene. Still read the deck against the admin guide",[239,1559,1560],{},"The certificate is asked to stand in for the afternoon you did not spend breaking the product",[271,1562,1564],{"id":1563},"what-a-good-pilot-contract-looks-like","What a good pilot contract looks like",[202,1566,1567],{},"Procurement’s leverage is highest before signature and almost gone after. Use it to buy a pilot that can fail, not a subscription that can only expand.",[202,1569,1570,1571,1574],{},"The pilot has a named job inside your company, not the vendor’s script. One team, one class of work, a frozen baseline from the month before: cycle time, error or reopen rate, and the concessions or rework you already measure. The vendor may help instrument the run. The vendor does not get to define success as “users liked it.” Liking is not a control. ",[209,1572,1573],{"href":211},"Most organisations are still piloting",". A pilot that cannot fail is how that sentence stays true for another year.",[202,1576,1577],{},"The pilot also has a ceiling. Spend, messages, and — if a write exists — the value of the write. Hitting the ceiling stops the run and pages a person. A ceiling that only sends a warning is a suggestion. Put the stop in the order form. Put the owner, a company employee, in the order form too. If the sponsor cannot name the owner, you do not have a deployment. You have a demo with a purchase order.",[202,1579,1580],{},"Demand the artefacts the demo skipped. Where an answer came from, shown to a non-specialist. What is retained, for how long, in which region. Whether prompts are used to improve a model, and how the enterprise agreement changes that default. How you export prompts, configurations, and logs. How fast a connector that can write can be cut off, and who can cut it off at 9 p.m. These are buying questions you already ask of systems that move money or personal data. The fact that the interface is a conversation does not retire them. A customer-facing answer has already been treated as the company’s answer. Buy the log before you buy the fluency.",[202,1582,1583],{},"Score claims against the documentation, not against the deck. If the proposal says the system will not invent policy, have the vendor show the refusal in your environment, on your stale document, on purpose. If they cannot refuse, the claim is advertising. Advertising claims about AI are already a regulatory subject. You do not need a novel clause. You need the refusal recorded in the pilot notes, and a warranty that matches what you saw. A management-system certificate can support the vendor’s hygiene. It cannot replace the afternoon you spent trying to make the product break.",[202,1585,1586,1587,1591],{},"Finally, price the labour you inherit. Someone must keep the cited policy current, review the class of output that can become a promise, and answer the screenshot. If that labour is not in the business case, send the business case back. Procurement is allowed to be the function that says the saving is not real yet. That is the job. A seat price times a headcount, with no unit of work and no reviewer, is how the company acquires a tool it cannot explain and a bill it cannot attribute. The SEC cases were about public descriptions. An internal description you cannot open is how you get there. The ",[209,1588,1590],{"href":1589},"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002F?uri=OJ:L_202401689","EU AI Act"," will make some of this documentary duty statutory for higher-risk uses. Buyers who wait for the statute to teach them the questions will pay for the lesson in a tender they cannot score.",[215,1593,1594,1604],{},[218,1595,1596],{},[221,1597,1598,1601],{},[224,1599,1600],{},"In the order form",[224,1602,1603],{},"If it is missing",[234,1605,1606,1614,1622,1630,1638,1646],{},[221,1607,1608,1611],{},[239,1609,1610],{},"One named job, one team, a baseline frozen last month",[239,1612,1613],{},"The vendor’s script will become the success metric",[221,1615,1616,1619],{},[239,1617,1618],{},"Cycle time, error or reopen rate, concessions or rework",[239,1620,1621],{},"“Users liked it” will be the result. Liking is not a control",[221,1623,1624,1627],{},[239,1625,1626],{},"A ceiling on spend, messages, and the value of any write. Hitting it stops the run",[239,1628,1629],{},"A warning is a suggestion. A product that continues and bills is a different contract",[221,1631,1632,1635],{},[239,1633,1634],{},"A company employee as owner",[239,1636,1637],{},"A demo with a purchase order",[221,1639,1640,1643],{},[239,1641,1642],{},"Retention, region, training default, export, and who can cut a write connector at 9 p.m.",[239,1644,1645],{},"You bought fluency and not the log",[221,1647,1648,1651],{},[239,1649,1650],{},"Labour: who updates the cited rule, who reads the sample, who answers the screenshot",[239,1652,1653],{},"The saving is not real yet. Send the business case back",[271,1655,1657],{"id":1656},"after-signature-the-scorecard-is-yours","After signature, the scorecard is yours",[202,1659,1660],{},"The contract does not operate the tool. In the first month, run the job you named, against the baseline you froze, and keep the refusal when the product invents a policy you do not have. If the vendor’s success manager wants to substitute a different job because it demos better, that is a no. You bought a job. A customer-facing answer remains yours when the job is live, which is why the first month is a legal event and not only an onboarding plan.",[202,1662,1663],{},"Hold the ceiling. If spend or writes blow through it, the run stops. A vendor that treats the ceiling as a notification has sold you a meter, not a control. Escalate that as a contract performance issue, not as a training issue. At the same time, name the internal labour: who updates the cited rule, who reads the sample, who answers the screenshot. If those names are vacant, pause rollout. A vacant name is how a purchase becomes the pile of tools surveys keep finding inside companies that have not scaled.",[202,1665,1666],{},"When the quarter ends, decide with the scorecard you wrote before you were charmed. Promote, narrow, or stop. Do not let a renewal auto-execute because the purchase order is easier to repeat than to revisit. If you stop, export the configuration and revoke the credentials in the same week. A stopped pilot with a live token is still a system. Claims in the proposal that the documentation does not support should already have been struck. If they survived into the contract, surviving them into the website is how a buying mistake becomes a public one.",[271,1668,1670],{"id":1669},"the-first-month-is-the-contract","The first month is the contract",[202,1672,1673],{},"Run the named job against the frozen baseline. Keep every refusal. If the vendor swaps in a prettier job, decline. Hold the ceiling as a stop, not a warning. If the internal owner of the cited rule is still unnamed, pause. At the quarter, promote, narrow, or stop, and if you stop, export the configuration and revoke the token the same week. A live token is not a cancelled pilot. Auto-renewal is how a demo becomes a permanent system nobody chose twice. Choose twice. A second signature is the point of having a scorecard. Without it, the renewal is inertia.",[215,1675,1676,1689],{},[218,1677,1678],{},[221,1679,1680,1683,1686],{},[224,1681,1682],{},"First month",[224,1684,1685],{},"Hold",[224,1687,1688],{},"Pause or stop",[234,1690,1691,1702,1713,1724,1735],{},[221,1692,1693,1696,1699],{},[239,1694,1695],{},"The job",[239,1697,1698],{},"The one named in the order form, against the frozen baseline",[239,1700,1701],{},"A prettier job the success manager prefers",[221,1703,1704,1707,1710],{},[239,1705,1706],{},"The refusal",[239,1708,1709],{},"Kept, especially when the product invents a policy you do not have",[239,1711,1712],{},"A month of fluency and no refusal. You cannot see the control",[221,1714,1715,1718,1721],{},[239,1716,1717],{},"The ceiling",[239,1719,1720],{},"A stop that pages a person",[239,1722,1723],{},"A warning, or a bill. That is a meter",[221,1725,1726,1729,1732],{},[239,1727,1728],{},"The names",[239,1730,1731],{},"Who updates the rule, who reads the sample, who answers the screenshot",[239,1733,1734],{},"Any vacancy. Rollout waits",[221,1736,1737,1740,1743],{},[239,1738,1739],{},"Quarter end",[239,1741,1742],{},"Promote, narrow, or stop. A stop exports the configuration and revokes the token the same week",[239,1744,1745],{},"Auto-renewal. A live token is not a cancelled pilot",[271,1747,1749],{"id":1748},"a-call-to-chief-procurement-officers","A call to chief procurement officers",[202,1751,1752],{},"You are not late to a technology trend. You are on time for a buying discipline you already know, applied to a product that talks. Make the vendor show the control, not the fluent sample. Make your own sponsor show the owner and the baseline. Refuse seat maths that do not state the unit of work.",[202,1754,1755],{},"The companies that look sophisticated in this market will not be the ones with the most logos. They will be the ones whose contracts describe the workflow that actually runs on the Tuesday after go-live.",[649,1757],{},[271,1759,654],{"id":653},[656,1761,1762,1767,1772,1776,1780,1784,1788,1792,1796],{},[659,1763,1764],{},[209,1765,1766],{"href":1395},"CBC News, Air Canada chatbot liability",[659,1768,1769],{},[209,1770,1771],{"href":1400},"Moffatt v. Air Canada, 2024 BCCRT 149",[659,1773,1774],{},[209,1775,1322],{"href":319},[659,1777,1778],{},[209,1779,688],{"href":642},[659,1781,1782],{},[209,1783,1331],{"href":568},[659,1785,1786],{},[209,1787,1336],{"href":1162},[659,1789,1790],{},[209,1791,1498],{"href":1497},[659,1793,1794],{},[209,1795,663],{"href":211},[659,1797,1798],{},[209,1799,1800],{"href":1589},"Regulation (EU) 2024\u002F1689",{"title":169,"searchDepth":170,"depth":170,"links":1802},[1803,1804,1805,1806,1807,1808,1809],{"id":1385,"depth":170,"text":1386},{"id":1480,"depth":170,"text":1481},{"id":1563,"depth":170,"text":1564},{"id":1656,"depth":170,"text":1657},{"id":1669,"depth":170,"text":1670},{"id":1748,"depth":170,"text":1749},{"id":653,"depth":170,"text":654},"Why standard RFPs fail to catch systemic AI risk, unowned connectors, and data retention traps, and how to fix your procurement scorecard.",{"eyebrow":701,"title":1812},"The risk arrives after the RFP",[1814,1817,1820],{"question":1815,"answer":1816},"What does a typical AI RFP miss?","It asks for features. The risk arrives later as a connector, a retention clause, and a workflow procurement has not seen run.",{"question":1818,"answer":1819},"What should procurement ask to see?","A real job: which system changes, who signs, what is retained, and what happens when the vendor is removed.",{"question":1821,"answer":1822},"Why is a demo a poor proxy?","A demo shows the happy path. Operating risk is the path where the assistant is allowed to act.","\u002Fblog\u002Fprocurement-is-buying-demos-and-inheriting-operating-risk",{"title":1369,"description":1810},"blog\u002Fprocurement-is-buying-demos-and-inheriting-operating-risk",[718,1364,1827,721],"vendors","NzCfwEPO5DSKNmZc10mxZ7Hi7Fdvt-lXcthkquVyM1Q",{"fold":1830,"id":1834,"title":1835,"archived":163,"authors":164,"badge":164,"body":1836,"date":164,"definedTerm":164,"department":164,"description":169,"extension":172,"eyebrow":164,"faqHeader":164,"faqs":164,"footerBand":1840,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":1844,"relatedHeading":164,"seo":1845,"series":164,"sitemap":163,"status":164,"stem":1846,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":1847},{"headline":1831,"description":1832,"primaryLabel":8,"primaryTo":1833,"secondaryLabel":739,"secondaryTo":12},"Run frontier AI your business actually owns.","Governed workstreams, 3,000+ integrations, and a proprietary knowledge graph. Start on Free.","\u002Fsignup?plan=free","content\u002Fshared\u002Fcta.md","Site CTAs",{"type":166,"value":1837,"toc":1838},[],{"title":169,"searchDepth":170,"depth":170,"links":1839},[],{"headline":1841,"description":1842,"primaryLabel":8,"primaryTo":1833,"secondaryLabel":1843,"secondaryTo":85},"See what governed AI looks like on your stack.","Connect your tools, run a workstream, and keep every decision on your ledger. Start on Free.","Talk to our team","\u002Fshared\u002Fcta",{"title":1835,"description":169},"shared\u002Fcta","eYqahyaPnbp8GKrWpoORbZdtmkWmgHr5F61ZHOnb8sY",1791647062408]