
Ask an AI agent development company these five questions before the case-study logos, and most of the field filters itself out. What's the most recent production system you shipped — not demoed — and can I talk to that client directly? How do you evaluate an agent's outputs before they reach a user, and what's the one number you track every week? What's the access boundary on anything the agent can write — identity, permissions, audit trail — and can you show it, not just describe it? Which reference client had a risk profile like mine, not just an industry label? And what happens to the price when the scope changes mid-build?
That filter matters more this year than it did last year, because of what buyers are actually short of. Eurostat asked EU enterprises that had considered AI and not adopted it what stopped them: 70.89% cited a lack of the necessary expertise, 52.52% a lack of clarity about the legal consequences, and 48.83% concerns about data protection and privacy. Adoption itself runs 17% among small enterprises, 30.36% among medium and 55.03% among large (Eurostat, Use of artificial intelligence in enterprises, data extracted December 2025). Skills, not budget, is the leading obstacle — and buying skills is exactly what hiring a vendor is supposed to do, which is why the evaluation call has to test capability rather than presentation. A buyer running that same evaluation five years ago could reasonably lean on a portfolio of logos and a strong sales deck, because the market itself was young enough that nobody had a long production track record to show. That excuse is gone. The vendors worth hiring in 2026 have shipped systems that survived a real release cycle, and the five questions below are how you find out which ones actually have.
Start with the first question, because it's the one most buyers skip. A demo proves the model can do the task once, on a curated input, and says nothing about what breaks it in production — and the reason that matters more than it sounds is that even people close to the work cannot reliably tell the difference from the inside. METR ran a randomised controlled trial with 16 experienced open-source developers across 246 real tasks on repositories they had contributed to for an average of five years. With AI tools allowed, completion time rose by 19%; the developers had forecast a 24% reduction, and after finishing they still believed the tools had made them 20% faster (Becker, Rush, Barnes & Rein, Measuring the Impact of Early-2025 AI on Experienced Open-Source Developer Productivity, arXiv, July 2025). METR has since said it believes developers are “likely” more sped up by AI tools in early 2026 than its early-2025 estimate, while judging its own newer data “only very weak evidence for the size of this increase” — 30% to 50% of participants reported declining to submit tasks they did not want to do without AI (We are Changing our Developer Productivity Experiment Design, METR, February 2026). The trial is cited here for what it measured, not as a current estimate. If a controlled trial can invert the felt result that cleanly, a vendor demo — built to impress, on inputs the vendor chose — carries close to no information about production. A vendor who answers instead with a client you can call, on a system running today, has already crossed the line most projects never reach.
The second question is how they catch a bad output before a user does, and the honest answer is a specific sequence, not a slogan. Ours is baseline the model's accuracy before touching code, build an evaluation harness that scores every change against a golden dataset, wrap the result in guardrails that gate what ships automatically versus what escalates to a human, then operate it — rerunning the harness on a schedule so drift gets caught before a client does, not after (see our AI development methodology for the full sequence). A vendor who can't name their own version of that loop, with a number they check weekly, is telling you they'll find out the system is failing the same way you do: from a user complaint.
The third question is the one buyers most often forget to ask until something goes wrong: what can the agent actually write to, and who signs off before it does. The discipline that matters is scoped service identity (the agent's credential reaches exactly the fields it needs and nothing upstream of that), a complete audit trail attributing every change to the run that made it, explicit data-boundary rules for what can leave a system and what has to stay, and a human confirmation gate on anything irreversible. That's the substance behind AI security and compliance services done properly — ask a vendor to show you the permission model and the audit log, not describe them, before you ask about the model itself. A vendor who can't produce either hasn't actually shipped a system that writes to production data yet.
The fourth question is about the reference case itself, and industry match is the wrong filter — risk-profile match is the right one. A healthcare AI vendor with only chatbot experience is a worse fit for a clinical documentation project than a fintech vendor who has shipped an agent that writes to a financial record, because the second vendor has already solved the harder problem: an agent whose mistake has a real cost. An AI virtual assistant we built for Amazon sellers is the kind of reference worth asking for regardless of your own industry — it launched as a free, staged pilot to 200 sellers rather than a full rollout, ran on a privacy-by-design architecture with zero external data exposure, and shipped with an admin dashboard built specifically to manage unresolved cases and retrain the model, not just to serve recommendations. Ask any vendor for their version of that: a staged rollout, a stated data boundary, and a named mechanism for the system to get better after it ships.
The fifth question is the one that surfaces later than it should: what triggers a change order. A vendor who quotes one number for "the AI agent" hasn't separated build cost from the ongoing run cost of the model calls, retries, and monitoring that keep it accurate — the same three-line breakdown behind our own AI development pricing. Ask them to price it that way before you sign, and ask specifically what happens when the acceptance criteria turn out to need a document type or edge case nobody scoped on day one. A vendor with a real answer has priced that uncertainty before; one without is pricing it for the first time, on your project.
None of this is exotic due diligence — it's five questions any vendor who has actually shipped production AI should be able to answer without notes. If you're comparing AI agent development company USA options, ask all five before the first proposal, not after the first missed deadline. A vendor with real answers has done this before, on a system that looks something like yours. One with only a deck hasn't.
Related: AI agent development company USA
Find this useful? Tell Google to show you more of it.
