1. Verify the pilot scope is locked to one workflow
Before any code is written, confirm the scope is locked to one workflow. For a 20-person fintech firm, that means the pilot covers lead qualification only — not invoice processing, not document extraction, not voice. The audit deliverable should name the specific CRM fields the agent will read and write, the webhook endpoints it will call, and the exact lead-qualification criteria the sales team already uses. A fixed scope prevents the pilot from drifting into a multi-week integration project that buries the team in configuration work instead of measuring cycle-time savings.
2. Document the PCI DSS data-flow and risk assessment
Run a formal risk assessment under PCI DSS Requirement 12.10 before the agent touches any production data. Document the data flow from first contact to qualified-lead status, confirm that cardholder data never enters the LLM prompt, and obtain a signed attestation from OpenAI that they do not retain training data. This documentation pack is a deliverable, not an afterthought. Without it, the pilot cannot pass internal governance review, and the 4-week timeline slips.
3. Configure the CRM and webhook integration points
Map every integration point before the pilot starts. The agent reads lead records from the CRM via its REST API, writes qualification scores back to the same CRM, and triggers webhooks to the helpdesk when a lead is flagged for human follow-up. Each endpoint needs an API key, a rate-limit budget, and a fallback path for when the CRM is down. For a 20-person firm, this typically means 3-5 endpoints, not 30.
4. Define the human-in-the-loop approval threshold
Set the human-in-the-loop threshold before the first test. The agent drafts the qualification response and classifies the lead, but a person approves any action that touches a contract, payment, or regulated data. For lead qualification, this means the agent can mark a lead as “qualified” or “unqualified” but cannot send a payment link or modify a contract clause. The approval step is logged with a timestamp and user ID, which feeds the error-rate baseline.
5. Measure the before-state baseline on cycle time and error rate
Capture the baseline before the agent goes live. Track time from first contact to qualified-lead status and the percentage of misclassified leads over a 2-week window using the existing manual process. These two numbers — cycle time and error rate — are the only metrics that matter for the pilot report. Everything else is noise. For a 20-person firm, a 2-week baseline is sufficient to establish a statistically meaningful before-state.
6. Implement the cardholder-data filter and test it
Build a pre-processing filter that strips or masks any field containing cardholder data, PAN, or CVV before the prompt is sent to the OpenAI API. Test the filter with synthetic data that includes edge cases: partial PANs, CVVs embedded in free-text notes, and card numbers in email subject lines. The filter must reject or flag any input that fails the mask, and the rejection log must be retained for the PCI DSS audit trail.
7. Write and version the prompt template for lead qualification
Write the prompt template that the agent uses to classify leads and draft responses. The template should include the firm’s specific qualification criteria, the tone of voice the sales team expects, and a clear instruction to reject any input that contains cardholder data. Version the prompt in a repository, not in a config file. Each change to the prompt should be logged with a reason, because prompt drift is the most common cause of error-rate spikes in the first two weeks of operation.