Decentralised News Research · Small-business workflows
What Matters
The best first AI workflow has a clear output, a visible baseline and a mistake the business can contain. DN’s 50-process ranking helps small businesses shortlist work for a controlled pilot. It does not establish measured returns. Start with the process, define what the system may do, and measure accepted outcomes, remaining human work and costs before expanding its authority.
19 First pilot
Bounded candidates with explicit checks and relatively contained effort and error consequences.
19 Supervised
Other non-protected processes requiring more involved integration or review.
12 Protected
Controlled evaluation with formal approvals and domain oversight; excluded from first pilots.
The first five entries in the declared order
- Detect missing fields in incoming forms — 91.25; First pilot.
- Draft answers from an approved FAQ — 90.00; First pilot.
- Turn approved meeting notes into action lists — 86.25; First pilot.
- Repurpose approved content into draft posts — 86.25; First pilot.
- Extract invoice fields for review — 85.00; Supervised.
The leading entry, P43, is “Rules first”: a deterministic completeness check may be sufficient without an AI agent. Rank five is Supervised; the order does not place all First pilot processes above every Supervised process.
Filter the complete 50-process table · Download the ratings and methodology
Choose the process before the platform
A business does not automate “sales” or “finance” in one purchase. It changes particular activities: preparing a meeting brief, classifying an invoice, drafting a reply or requesting a payment. These activities require different information, permissions and standards of correctness. A product that handles one well may be unsuitable for the next.
Begin with a recurring bottleneck whose inputs, owner and finished output you can describe. A useful candidate might produce draft descriptions from an approved product catalogue. “Handle our marketing” leaves the acceptance standard, customer exposure and spending authority undefined.
Anthropic’s engineering guidance distinguishes workflows with predefined paths from agents that dynamically select steps and tools. It advises starting with the simplest sufficient approach, because additional autonomy can add cost and latency. These are architecture principles, not evidence of small-business payback. A form, rule or existing automation may already solve the bounded task. [1]
Once the workflow is defined, DN’s small-business automation tools guide provides product context. A tool list cannot decide whether your particular process is ready.
Separate assistance from authority
Describe the intended operating mode before evaluating a demonstration. Four distinctions make the scope reviewable:
- Assist: retrieve, extract or summarise information for a person who remains responsible for the next action.
- Draft: prepare a proposed message, record or document without sending, publishing or committing it.
- Recommend: propose a decision with supporting evidence, uncertainty and an explicit approval point.
- Execute: change an external system within a specified permission boundary, such as creating an approved draft record.
Approval is a separate control, not a tone of voice in the output. A system that writes “please review” while holding unrestricted payment credentials still has consequential authority. Define who can approve, what they inspect and which downstream system actually enforces the decision.
Prefer narrow permissions that match the task. OWASP’s excessive-agency guidance recommends minimum functions and permissions, approval for high-impact actions and authorization enforced downstream. It specifically distinguishes reading messages from having the ability to send or delete them. [3]
Read the 50-process ranking as a starting order
The ranking is DN’s editorial screening framework. It considers process characteristics to help a small business build a shortlist; it is not a league table of measured savings, provider quality or deployment success. Its assumptions should be examined against your records, systems and staff capacity.
DN SME Opportunity Finder v1.0 covers 50 selected processes and zero measured deployments or ROI results. Its default business uses cloud applications, stable processes, modest repeat volumes, authorized data and human review. Four editorial ratings run from one to five: value potential (V), clarity of acceptance criteria (C), integration effort (E, where five is hardest) and consequence of error (R, where five is most serious).
Priority score = 35 × (V − 1) ÷ 4 + 25 × (C − 1) ÷ 4 + 20 × (5 − E) ÷ 4 + 20 × (5 − R) ÷ 4.
The 0–100 score is starting priority, not a performance percentage. Reproducible arithmetic does not validate the underlying judgments. Time to ROI remains Unmeasured.
Hard gates override the score. Payments, refunds, bank-detail changes, account deletion, recruitment ranking, payroll, tax submission and access grants belong in Protected controlled pilots, not first pilots. Other processes qualify as First pilot only with R ≤ 2, E ≤ 2 and C ≥ 4; remaining processes are Supervised. These classifications do not grant execution authority.
A high-ranked process can still be unsuitable when the underlying data is unreliable or no one can review the output. A lower-ranked process may deserve a carefully bounded pilot when it addresses an expensive, well-understood bottleneck. Treat unavailable evidence as a question to resolve, rather than a favourable default.
Version 1.0 rating definitions and ordering
- V — Value potential
- 1: incidental convenience; 2: occasional administrative help; 3: useful recurring support; 4: meaningful recurring operating workload; 5: potentially material workload or control benefit. Actual volume and realised value require local measurement.
- C — Clarity of acceptance criteria
- 1: subjective outcome without a simple check; 2: ambiguous criteria; 3: mixed objective and judgmental criteria; 4: mostly explicit checks; 5: clear schema, approved source or deterministic comparison.
- E — Integration effort
- 1: one controlled input and draft output; 2: a maintained source plus an existing application; 3: coordinated records or multiple read integrations; 4: multiple changing systems and exceptions; 5: consequential cross-system authority or substantial custom work. These ratings are not estimates of hours or cost.
- R — Consequence of error
- 1: low-stakes reversible internal categorisation; 2: contained rework with review before effects; 3: potential customer, financial-record or policy impact; 4: significant financial, service or operational consequences; 5: severe or difficult-to-reverse money, rights, access, deletion or binding-commitment effects. Ratings describe the process with its prescribed controls, not the probability of harm.
Gating comes before score: non-protected records precede Protected records. Within those groups, sort by score descending, V descending, R ascending, E ascending, then stable process ID ascending. Display ranks are unique; equal scores remain tied in evidence.
The weights and thresholds are declared editorial choices. Small score gaps do not establish meaningful differences, and the list is not a representative survey of businesses.
Use six gates before starting a pilot
1. Define an accepted outcome
Write a short acceptance checklist that another person can apply. For invoice extraction, that could include matching the supplier, amount and reference to the source document. Retain rejected outputs and correction time. A fluent response or completed tool call is insufficient when the required business result is wrong.
2. Establish the data boundary
Identify the necessary sources, who may access them and what information may leave the existing system. Separate approved business instructions from customer messages and retrieved documents. An external document should not be able to grant new permissions. Resolve sensitive-data handling and retention questions before feeding real records into a pilot.
3. Limit what can change
List permitted actions and prohibit everything outside that list through account permissions and application controls. Specify relevant amounts, recipients, record types and environments. Drafting a refund explanation should not imply permission to issue a refund. Prompt instructions can describe a boundary; they do not establish the access control that enforces it.
4. Make approval meaningful
Give the reviewer the source, proposed change and reason for escalation. Define who covers an absent approver and what happens when approval expires. Avoid a queue in which every item receives the same automatic click. Count review time as part of the workflow, and escalate when the evidence does not support a decision.
5. Demonstrate recovery
Decide how to stop new actions, reconcile work already attempted and restore the previous process. Preserve operation identifiers and final-state evidence. A timeout may leave a completed external action: DN’s transaction failure analysis explains why an error message alone cannot justify retrying. Some actions need compensation rather than reversal.
6. Assign an accountable owner
Name the person who reviews exceptions, costs and changes to the system. Set review dates and stopping conditions before launch. NIST’s voluntary AI Risk Management Framework treats risk management as an ongoing activity spanning design, use and evaluation. It does not certify this ranking or substitute for your own operational ownership. [2]
Build your shortlist
Use the finder to narrow the process list, then apply the six gates to the candidates that fit your business. Choose a small enough pilot that a named person can inspect its outputs and restore the previous workflow. The finder organises editorial assessments; it cannot inspect your records, verify permissions or establish financial returns.
A practical 30-day pilot
This schedule is a planning example. Integration or approval work may require longer; the calendar is not evidence that a process is ready.
- Days 1–5: document the baseline. Choose one process, an owner and the acceptance checklist. Record normal task mix, accepted outputs, human minutes, exceptions and direct costs. Identify the existing method that will remain available if the pilot stops.
- Days 6–10: run without committing changes. Use permitted historical or synthetic cases to produce draft outputs. Include awkward cases, missing information and conflicting instructions. Confirm that the reviewer can identify errors and that permissions prevent out-of-scope actions.
- Days 11–20: run a bounded comparison. Use comparable work in the baseline and pilot, with the same acceptance rules. Keep any necessary approval gates. Record every attempted case, review, correction and exception; excluding failed attempts would make the economics misleading.
- Days 21–30: reconcile and decide. Check outputs against destination records, total costs and remaining work. Exercise the stop-and-recovery procedure. Expand, revise or discontinue the pilot based on evidence, with changes and unresolved questions recorded.
Stop when an agreed material condition occurs, such as an unauthorized action, unexplained record mismatch or inability to determine final state. Pause affected work, preserve evidence, reconcile pending actions and return to the baseline process where appropriate. Fixing a prompt is not sufficient evidence that the underlying control failure is resolved.
Measure accepted work and realised value
Compare equivalent workloads. Easy cases handled by automation and difficult cases left to people do not form a fair before-and-after comparison. Record the mix and any changes in volume, staffing or business demand. Distinguish a useful operational signal from a causal claim the comparison cannot support.
At minimum, retain attempted and accepted outcomes, human handling time, correction effort, escalations and actual recurring costs. Measure end-to-end completion where waiting matters. Ten minutes of faster drafting may offer little customer benefit when approval still takes three days.
Time to ROI remains unknown until costs, benefits and their timing are established. Freed employee capacity may improve service without reducing spending. Record separately whether the gain avoids overtime or contractor costs, produces attributable contribution margin, or remains unused capacity. DN’s industry ROI framework and calculator explain that conversion in more detail.
A cost worksheet with an explicitly fictional example
Keep one-time setup separate from recurring operation. Include integration, staff training and launch work in setup; include usage, maintenance and the remaining operating burden in the monthly comparison. Avoid counting the same review labour or benefit twice.
Net capacity hours per month = monthly volume × (baseline human minutes − human minutes with automation) ÷ 60.
Monthly net benefit = realised labour benefit + attributable incremental contribution margin − additional error losses − incremental recurring costs.
Simple payback in months = setup cost ÷ positive monthly net benefit. With zero or negative monthly net benefit, the model does not recover setup cost. This simplified calculation excludes ramp-up, discounting and taxes.
Suppose 600 monthly tasks fall from 12 to eight human minutes each, including review and correction. That frees 40 hours. At 30 currency units per hour, the capacity value is 1,200. If 50% becomes avoided expenditure, the realised labour benefit is 600.
Add 200 of incremental contribution margin, then subtract 50 of additional error loss and 350 of recurring costs. The assumed monthly net benefit is 400. A setup cost of 2,400 then gives six months of steady-state simple payback. Every input is fictional; this is not an industry benchmark.
With no realised labour saving, the same example loses 200 per month despite freeing time. If automation increases human time, charge that additional labour at its full cost instead of discounting it by a savings-realisation percentage. Keep uncertain benefits visible and test the case without them.
When to configure, buy or build
First check whether a tool you already use can support the bounded process with appropriate permissions and records. A new subscription is justified by the workflow it improves, not by duplicating a feature that staff already have.
Buying may suit a standard process when integrations, support and export are adequate. Building may make sense when the workflow or control requirements are distinctive and someone can maintain it. Neither route removes the cost of review, exception handling, access management or future changes.
Ask a supplier to demonstrate your acceptance cases, failure handling and authorization boundary. Review data handling, record export, usage limits, recurring charges and exit arrangements. Test whether a human can continue the work when the service is unavailable. Compare total operating obligations, not just the advertised subscription.
Keep commercial selection separate from readiness. A well-ranked process does not establish that a particular product, contract or integration is suitable. Begin with a bounded evaluation that can answer those questions.
Frequently asked questions
Are these measured rankings of business ROI?
No. They are editorial process assessments for shortlisting pilots. DN has not measured comparable deployment returns for all 50 processes. Financial payback requires evidence from the actual workflow and its full cost boundary.
Does every process need an autonomous agent?
No. A fixed rule, template or existing workflow may be sufficient. Use dynamic planning when the task needs it and its costs and failure modes can be managed.
What should a small business automate first?
Choose a recurring, bounded process with accessible inputs, a clear acceptance rule, a responsible reviewer and a recoverable failure. Resolve missing permissions or evidence before relying on its ranking.
Can a human approval step make any workflow safe?
No. The reviewer needs relevant evidence, time and genuine authority. The system must enforce the approval boundary, and the business still needs controls for mistakes, unavailable reviewers and unresolved actions.
Are hours saved the same as cash saved?
No. Time becomes a financial benefit only through a supported change such as avoided expenditure or attributable incremental margin. Spare capacity can still be useful, but should be reported separately.
Why is time to ROI not a fixed number for each process?
Implementation effort, task volume, acceptance rates, costs and benefit realisation differ by business. A process category alone cannot determine a reliable payback period.
What happens when an action times out?
Keep its outcome unresolved until destination records establish what happened. Preserve the original identifiers and reconcile effects before retrying. An error response does not prove that the external action never completed.
Does passing a 30-day pilot justify unrestricted rollout?
No. Expand only within the tested conditions and approved scope. Changes to workload, integrations, permissions or models need review; continued monitoring and a workable fallback remain necessary.
Download the ratings and full methodology
Download all 50 process ratings (CSV) · Download the complete dataset and methodology package (ZIP).
The release includes each process’s ratings, score, class, suggested approach, human control, validation criterion and rationale. The package preserves the scoring formula, rating definitions and ordering rules. Reproducing the arithmetic verifies consistency with the declared method; it does not validate the judgments or predict business outcomes.
Method, disclosure and corrections
DN developed this editorial framework with AI assistance. The ranking and fictional worksheet are decision aids, not observed performance results, a product endorsement or a certification. The cited sources support particular architecture and control principles; they do not validate DN’s process order.
No affiliate offer or paid ranking appears here. Send corrections through the DN contact page, identifying the process, assumption or source. Include enough non-sensitive evidence to assess the issue. The 2027 address is an editorial series label; the verification date is 22 October 2026 (SAST).
Primary sources
- Anthropic: Building effective agents, 19 December 2024 — workflow and agent architecture principles; vendor engineering guidance.
- NIST: Artificial Intelligence Risk Management Framework, AI RMF 1.0, 26 January 2023 — voluntary risk-management framework.
- OWASP: LLM06:2025 Excessive Agency — functions, permissions, approval and downstream authorization.






