How long should an AI automation pilot take?

An AI automation pilot can take 10 business days when one workflow is already build-ready. That means the scope, baseline, owner, data path, access, test cases, and decision rights are settled before the clock starts. Zyphh's Custom Build option uses this narrow delivery cadence for an app, portal, agent, or automation with a defined boundary.

Two weeks is not a credible end-to-end estimate when discovery, data repair, procurement, security review, several integrations, user training, or production rollout still sit inside the word pilot. In those cases, schedule the prerequisite work separately. A short build window should make the boundary clearer, not hide work before or after it.

Why is there no single industry timeline benchmark?

No authoritative source reviewed sets one standard duration for an AI pilot. The Australian Government's AI transition guidance separates proof of concept, pilot, and production by purpose, users, data, integration, governance, and risk. It describes a pilot as limited real-world use with a specified timeframe, not a fixed number of days.

Published timeline claims become misleading when they start and stop at different events. One estimate may measure coding time. Another may include discovery, approvals, observation, and production hardening. Compare scope before comparing duration.

StageDecision it should answerWhat belongs in its clock
Proof of conceptCan the approach work in a constrained setting?Feasibility work, sample data, and technical tests
PilotDoes the bounded workflow work with limited real use?Integration, representative tests, users, safeguards, and measured operation
ProductionCan the service run at the intended scale and risk level?Full integration, support, governance, monitoring, continuity, and change management

What do useful planning bands look like?

A useful benchmark adjusts for readiness and scope instead of copying a market average. The bands below are Zyphh planning estimates derived from the work that must be completed. They are not survey statistics. A team should replace them with its own estimates once owners inspect the workflow, data, systems, and approvals.

Planning bandCredible whenWhat the period can include
Two weeksOne build-ready workflow, one accountable owner, accessible test data, minimum permissions, and a settled success ruleBuild, validation, exception handling, limited use, handoff, and a go, fix, or stop review
Three to six weeksThe workflow is narrow but needs light discovery, access work, data cleanup, or more than one integrationPrerequisites plus the bounded pilot and a short observation period
Six weeks and upSensitive data, several teams, unresolved procurement, major integration work, or consequential automated actions are involvedFormal reviews, deeper testing, staged access, training, and a longer controlled-use window
Separate production planThe pilot earns expansionScale, service ownership, resilience, compliance, support, and lifecycle monitoring

The right band can still move. A dependency may fail, or early evidence may show that a smaller design is safer. The schedule is a decision tool, not a reason to keep building after the assumptions break.

Can your workflow fit a two-week pilot?

Score seven readiness conditions before booking a 10-day delivery window. This worksheet is an illustrative planning device, not a validated maturity model. Give each condition zero points when it is settled, one when a named owner can finish it quickly, and two when it is unresolved or depends on an outside decision.

Condition0: ready1: short preparation2: schedule blocker
Workflow boundaryOne trigger, finish, and set of exclusionsMinor rule questions remainTeams expect different outcomes
BaselineCurrent result has a named sourceData needs a short sampleTarget rests on recollection
Test recordsNormal and failure cases are availableRecords need redaction or labelingNo representative evidence exists
AccessMinimum test scopes are approvedKnown approval is pendingIdentity or vendor path is unknown
IntegrationInterfaces and identifiers are knownOne dependency needs confirmationMigration or several unknown systems are involved
Risk and recoveryStop, approval, and repair paths are agreedOne control needs designNobody can accept residual risk
OwnershipOne person can make scope and launch decisionsReview dates need coordinationNo accountable decision maker exists
Planning interpretation: A score from zero to three may fit a two-week delivery window. Four to seven usually calls for a three-to-six-week end-to-end plan. Eight or more, or any unresolved approval blocker, means prerequisites need their own schedule. These are estimates to challenge in planning, not researched benchmarks.

What fits inside 10 business days?

A 10-day pilot should create an inspectable decision trail for one workflow. It should not produce ten disconnected demos. Each block below ends with evidence the workflow owner can examine, while requests that change the outcome, users, systems, or authority return to the backlog.

DaysPrimary workEvidence at the gate
1 and 2Freeze scope, confirm baseline, map records, identities, permissions, and test casesAction contract, data map, test set, success rule, and stop rule
3 to 5Build the normal path plus validation, approvals, logging, and an owned exception routeOne end-to-end slice with traceable writes and a midpoint risk review
6 to 8Run normal, edge, timeout, retry, duplicate, and recovery tests, then start limited useTest results, issue ledger, reviewer feedback, and repeated checks after fixes
9 and 10Rehearse alerts and recovery, hand off the runbook, compare evidence with the baselineNamed owner and a go, fix, or stop decision

NIST's AI RMF Core calls for documented, repeatable testing and measurement under conditions similar to deployment. OpenAI's evaluation guidance likewise recommends task-specific tests, representative data, logging, human feedback, and continued evaluation. A polished happy path alone does not complete the pilot.

What usually adds time to an AI pilot?

Data, authority, and integration work usually add more schedule risk than the model call itself. The Australian Government's AI assurance guidance asks pilot owners to define scope, duration, objectives, measures, participants, consent, and risk controls. Each missing decision creates work that a coding estimate will miss.

  • Unstable workflow: Rules change during the build, so the team cannot hold the acceptance target steady.
  • Weak data path: Records lack stable identifiers, usable history, representative edge cases, or approved retention.
  • Broad authority: The system can send, change, delete, approve, or publish without a narrow permission and review design.
  • Several dependencies: Each CRM, billing, support, identity, and warehouse connection adds failure and recovery cases.
  • No operating window: The team cannot observe enough real volume or user behavior to answer the pilot question.

OWASP's Excessive Agency guidance recommends minimum tools, minimum permissions, downstream authorization, and human approval for high-impact actions. Those controls can lengthen preparation. Removing them to protect a date only makes the date less credible.

How should you set the pilot clock and decision gate?

Start the clock at a named event and end it at a named decision. This keeps a 10-day build from being presented as a complete implementation. The project brief should also identify who can pause the work when evidence or controls are missing.

  1. Name the start: Scope, baseline, owner, data, access, and acceptance rules are approved.
  2. Name the finish: The limited-use evidence is ready for a go, fix, or stop review.
  3. Measure one business result: Pair it with quality, human effort, exceptions, reliability, cost, and recovery evidence.
  4. Set extension rules: Add time only for a specific fault with an owner, test, and review date.
  5. Keep production separate: Expansion requires its own authority, support, monitoring, and lifecycle cost decision.

The pilot date is useful only when missing it reveals something. It may reveal an unrealistic scope, an unresolved dependency, or a weak owner. Quietly moving the date while widening the build teaches the team very little.

When should you extend, pause, or stop?

Extend a pilot only when more time can answer a precise question. Pause when a prerequisite or approval is unavailable. Stop when the evidence rejects the approach or the expected value no longer justifies the operating cost and risk.

DecisionUse it whenRequired record
ExtendA bounded fault needs another representative test or a longer observation windowIssue, owner, test, added cost, stop condition, and review date
PauseData, access, consent, security, procurement, or ownership is not readyPrerequisite, responsible owner, and restart condition
StopThe workflow cannot meet the acceptance rule, safe authority boundary, or business caseEvidence, decision, reusable learning, and cleanup steps

Before expansion, review the AI automation guardrails for permissions, approvals, logs, stop rules, and recovery. The next useful step is to score one real workflow, separate prerequisite time from delivery time, and ask whether the proposed pilot can produce a decision rather than a demo.

Turn this into your own build plan.

Run the Workflow Opportunity Score or book a strategy call. Bring one repeated workflow, the tools involved, and the number that should move.

Run the score

Sources and further reading

  1. Australian Government: AI transition stages and dimensions
  2. Australian Government AI assurance guidance: Reliability and safety
  3. NIST AI Risk Management Framework Core
  4. OpenAI: Evaluation best practices
  5. OWASP LLM06:2025 Excessive Agency

FAQ

Is two weeks enough for an AI automation pilot?

Two weeks can be enough for one build-ready workflow with settled scope, test data, minimum permissions, an owner, and clear acceptance rules. It is not enough when the period must also absorb discovery, major data repair, broad approvals, several integrations, and production rollout.

What is the difference between an AI proof of concept and a pilot?

A proof of concept tests technical feasibility in a constrained setting. A pilot tests a bounded workflow with limited real users or data, named measures, and operating controls. Production is a separate stage with wider integration, support, governance, monitoring, and continuity.

Does data preparation count toward the pilot timeline?

Count data preparation in the end-to-end plan, but show it separately from the pilot delivery window. Cleanup, labeling, redaction, ownership, and access approval affect the start date and should not hide inside a short build estimate.