What should stay human-approved?
Customer service is a trust function. The risk is not only whether AI can produce a plausible answer. The risk is whether the business is comfortable with the consequence if that answer is wrong.
Complaints, refunds, cancellations, and pricing promises
Do not start by letting AI resolve complaints, approve refunds, cancel services, offer discounts, or promise pricing. AI can prepare the background, timeline, policy notes, and suggested response options. A person should approve the decision and the wording.
Private customer information
Customer messages may contain personal, financial, health, employment, or commercially sensitive information. Keep sources narrow, avoid unnecessary copying, and define what the agent may read or summarise. Use the AI Agent Permissions Checklist to separate read, draft, update, send, and blocked permissions.
Legal, safety, finance, or reputation-sensitive replies
If the reply could affect legal rights, safety, payment, staff matters, delivery obligations, public claims, or brand trust, the agent should stop for review. A practical AI Workflow Governance Checklist helps name the owner, approval gate, logs, and escalation rules.