The Pitch Sounds Perfect
An AI agent that handles your email, manages your calendar, processes your orders, chases leads — and you don't have to build, host, or maintain anything. Just plug in and go.
That's the managed-agent sales pitch. Anthropic, OpenAI, and a growing stack of startups are all rolling them out. For a small business owner who's been told they "need AI" but doesn't have a technical team, it sounds like the answer.
It might be. But it might also be a vending machine where you pay rent forever on your own processes.
What "Managed Agent" Really Means
A managed agent is an AI worker that lives on someone else's infrastructure. You give it tasks, it uses your data, it follows workflows — but the code, the logs, the prompt logic, and the integrations all live on the provider's platform.
The convenience is real. The risk is invisible until you want to leave.
The Five Questions
These come from practitioner Sam Witteveen's framework, adapted for small business owners:
1. Where Does My Data Live?
Not "where is it processed." Where does it live when the agent isn't running? Can you export it? In what format? How fast?
If the answer is "our platform stores it securely" without a clear export path, that's a lock-in signal. Your customer list, your order history, your pricing data — you should be able to walk away with all of it in a standard format today.
2. Who Owns My Workflows?
When your managed agent learns to process insurance claims the way your business does, or handles follow-ups using the cadence your customers expect — who owns that workflow logic?
Most managed-agent terms give the provider ownership of the orchestration. You can take your data, but you can't take the process. Rebuilding "how the AI handles things" on a new platform is the expensive part nobody warns you about.
3. What Happens If I Leave?
Ask for the exit process before you sign up. Can you migrate? Will they help? How long does it take? What stops working the minute you cancel?
If the provider can't give you a clear answer, assume the answer is "it will hurt."
4. Can I See the Logs?
Your agent made a decision about a customer. It sent an email. It approved a discount. Can you see why?
Managed agents that operate as black boxes are dangerous for any business that has to answer for its decisions — which is every business. Audit trails aren't a nice-to-have; they're how you catch errors before they compound.
5. What's the Real Price at My Scale?
The advertised rate is rarely what a 10-person business pays. Ask about rate limits, token charges, premium data access, and per-action fees. Then ask what happens when you double in size — does the pricing scale linearly, or does it spike?
The worst lock-in is financial: the service that was cheap at 50 tasks/month and bankrupts you at 500.
The Self-Hosted Alternative Isn't as Scary as It Sounds
You don't need a dev team to run your own agent. Open-source frameworks (like TrueForge) give you the same managed-agent pattern — one AI, multiple skills, hosted on your infrastructure. The trade-off is setup time. The payoff is that you own everything.
For businesses where the workflows are the business (service companies, agencies, consultancies), owning the process isn't optional — it's the business.
The Decision Framework
- Use a managed agent if: your AI tasks are simple, generic, and interchangeable (email sorting, basic scheduling, first-draft generation). The lock-in risk is low because the workflows aren't custom.
- Build or self-host if: your AI tasks encode how your business actually works (client communication patterns, pricing logic, approval chains). These workflows are your competitive advantage. Don't rent them back from the provider that learned them from you.
Bottom Line
Managed agents are convenient. Convenience is a feature. Lock-in is a bug. Ask the five questions before you commit — because the best time to negotiate your exit is before you walk in.
If you're evaluating AI tools for your small business, the Boring Automation Pack includes ready-to-use workflows that run on your terms — no vendor lock-in.
Top comments (0)