rsRich Sadowski
Executive view · Work sample
Open the full technical architecture →
Sanitized work sample by Rich Sadowski. The company name, people, internal documents and dates are removed. Acme is a fictional account.

Enterprise AI Platform

A shared platform that lets each department build AI assistants that draft, research and recommend, with access, privacy, quality and cost controlled in one place rather than separately in every project.

Why: act on churn risk and growth signals earlier, give staff back the time they spend gathering context, and stop each team buying and securing its own AI tools.

Decisions needed from leadership

  1. Approve the Foundations phase (months 1 to 3) and getting quotes for the rest. Foundations is mainly the Claude Enterprise upgrade and setup work by existing teams. Its cost is confirmed before signing, and annual costs for later phases come back for approval before Phase 2.
  2. Name one accountable executive for the platform. Cloud, Data and Security each run a part of it day to day.
  3. Confirm Customer Success as the first department, with a go or no-go review at the end of month 8.

How it works

Six layers. Requests from Claude and from the assistants we build pass through the checkpoint in layer 2.

1Where people work

Slack, Claude, Microsoft 365 Copilot and reporting. No new app to learn.

2The checkpoint

Checks who is asking and what they may see, removes personal data, blocks attempts to trick the AI, checks answers against their sources, and records each step and its cost.

3AI assistants

Built by departments from approved templates. Each has a named owner and an off switch.

4What the AI may know

Playbooks, product knowledge, our internal policy knowledge base, and account history, limited to what the person asking may see.

5The AI models

Claude, running in the company's own AWS account. Simple tasks use cheaper models.

6Our business data

CRM, call summaries, billing and product usage, defined once so “ARR” means the same everywhere.

Limits: in Claude chat the checkpoint can block a message but cannot remove personal data from it. Copilot stays under Microsoft's own controls. No-code assistants are limited to internal data until they are routed through the checkpoint.

Example: an account at risk of churning

The pilot, step by step.

How we judge the pilot: how often customer success managers act on the recommendations, and whether flagged accounts recover more often than similar accounts without one. Targets are set before launch.

How it gets better

Four scheduled reviews of the platform's own work. Each looks back further than the last. None of them changes anything on its own.

Every nightFix

Reviews yesterday's results, rejected suggestions and user edits. Proposes specific fixes.

Every weekPatterns

Spots repeated problems across teams, such as the same edit made again and again or rising cost.

Every monthThemes

Compares quality and cost against real outcomes, such as accounts that recovered.

Every quarterDirection

Decides which assistants to expand or retire, and checks whether past fixes actually helped.

Evidence climbs: night → week → month → quarterDirection comes back down as new rules
A person decides every change. Each review ends in a numbered list marked accept, defer or reject, and accepted changes ship only after passing a quality test.

What we own and what we buy

Already owned

  • Slack, Microsoft 365 with Copilot, and Okta sign-in
  • AWS, where the company already runs
  • Databricks, our company data platform
  • Tray, our system-connection tool
  • Microsoft Purview, which stops sensitive data leaking
  • Claude for Teams, to be upgraded
  • Our internal policy knowledge base

What we buy new

  • Claude Enterprise upgrade, needed for admin, audit and retention controls
  • Okta for AI Agents, access control and an off switch for each assistant
  • AWS AI services, paid by usage
  • Tray's assistant-building add-on
  • ThoughtSpot reporting seats for staff, which we do not license today, and its AI add-on
  • Purview coverage for non-Microsoft AI, paid by usage
  • A web research service
  • Likely new usage fees from Salesforce and Gong when AI calls them

What changes for staff

Main risks and how we handle them

Data leaving the EU or Australia.

Claude Enterprise, ThoughtSpot's AI, Tray's built-in AI and parts of Databricks process data outside those regions. Customer product data is excluded by default and enters only with an approved project, then stays in-region. Our own CRM records, including EU and Australian contacts, are processed in the US under our existing transfer terms.

AI tricked by what it reads.

A web page or email can hide instructions aimed at the AI. Everything it reads is screened before use.

Vendor use of our data.

Each vendor's terms on keeping and training on our data are checked before confidential data reaches it. For AWS, a written opt-out from using our content to improve its services is a gate in the first phase.

Costs creeping up.

During the pilot, spending is limited to Customer Success and every assistant run has a usage cap. From the rollout, each department has a budget with an alert at 80% and a stop at 100%. Only the accountable executive can raise a budget.

Data kept longer than it should be.

One deletion service removes a record from every copy the platform holds within 30 days, with proof.

Plan

First measurable results by the end of month 8.

Months 1 – 3Foundations

Claude Enterprise, sign-in and access groups, safety checks, activity records.

Months 4 – 5Checkpoint and data

The checkpoint, company data and definitions, the policy knowledge base connected, in-region processing ready for customer product data if a project is approved.

Months 6 – 8Customer Success pilot

Recommendations for customer success managers in Slack, nightly and weekly reviews, go or no-go decision.

Months 9 – 11All departments

Marketing, Finance and Support build their own, with department budgets and the monthly review. First quarterly review in month 12.