When a NZ business should not start with a DIY builder
DIY does not mean unsafe, but some workflows are too consequential to begin with tool tinkering.
The agent touches CRM, email, Xero, website, or customer records
When an agent can read or write live systems, the build needs explicit permissions. Start with read-only and draft-only access where possible. Use the AI Agent Permissions Checklist before giving authority to update, send, publish, delete, or trigger systems.
The workflow affects pricing, promises, publishing, or finance
Pricing language, proposals, vendor commitments, public content, accounting records, refunds, payroll, and finance actions should stay human-approved. The safer pattern is agent-prepared work, then human-approved action.
Staff are unclear who reviews the output
If nobody owns the review, the agent will be ignored or trusted too quickly. Every business agent needs a reviewer, quality checklist, escalation path, and decision log.