LOADING
LOADING
AI strategyInsight
Most enterprise AI pilots demo well and die quietly. The gap is not the model — it is the operating model. Here is what separates the pilots that ship from the ones that stall.
Summary
Adoption is no longer the story. McKinsey reports 71% of organizations used generative AI in at least one function in 2024, up from 33% the year before, and Stanford's AI Index puts overall AI use at 78% of organizations. Everyone is piloting. Almost nobody is shipping.
The MIT NANDA study landed the number that made CFOs flinch: 95% of enterprise GenAI pilots fail to deliver measurable ROI, with only ~5% achieving rapid revenue acceleration. Gartner adds the forward-looking version — more than 40% of agentic AI projects will be canceled by the end of 2027 — citing escalating costs, unclear value, and inadequate risk controls.
Note what is not on that list: model quality. The same frontier models powering the failed pilots also power the 5% that work. The MIT finding is explicit that the root cause is poor integration and misaligned priorities, not weak models. Pilot purgatory is an operating-model failure wearing a technology costume.
A pilot proves a model can do a task once, on a clean input, with a human watching. Production demands it does the task 10,000 times, on messy inputs, inside a real workflow, with logging, access controls, fallbacks, and an owner who gets paged when it breaks. Those are different engineering problems, and the second one is where projects die. Gartner separately predicts at least 30% of GenAI projects will be abandoned after proof-of-concept — the POC works, the production version never arrives.
Three failure modes recur:
Workflow not redesigned. Bolting AI onto a legacy process produces a faster version of a broken process. McKinsey's 2025 data is blunt: only 39% of organizations attribute any enterprise-wide EBIT impact to AI, and just ~6% are high performers generating 5%+ impact — and fundamental workflow redesign is the single strongest correlate of that impact.
Data not ready. Gartner projects organizations will abandon 60% of AI projects unsupported by AI-ready data through 2026, with 63% lacking adequate data management practices. A pilot can run on a hand-cleaned sample; production cannot.
Reliability unverified. Even domain-specialized tools confabulate — Stanford/RegLab found purpose-built legal AI hallucinated on 17% to 34%+ of challenging queries despite 'hallucination-free' vendor claims. Without evaluation harnesses and human-in-the-loop checks, a pilot that looked accurate fails its first audit.
In regulated sectors, a pilot can be technically perfect and still never ship, because nobody can sign off on the risk. Compliance is now the leading blocker, not capability: Deloitte found regulatory-compliance concern rose from 28% to 38% to become the #1 barrier to GenAI adoption across a survey of 2,773 leaders including financial services.
The controls deficit is stark. IBM's 2025 breach report found 63% of breached organizations either have no AI governance policy or are still building one, and of firms that suffered an AI-related incident, 97% lacked proper AI access controls. Meanwhile the EU AI Act carries penalties up to EUR 35M or 7% of worldwide turnover, with high-risk obligations landing from August 2026. In Quebec, Law 25 fines reach up to C$25M or 4% of worldwide turnover.
The fix is not slower pilots — it is pilots designed against a recognized framework from the start. ISO/IEC 42001:2023, the first certifiable AI management system standard, and the NIST AI Risk Management Framework's Generative AI Profile, which names confabulation as one of 12 risk categories, give regulated buyers an auditable target. A pilot built to those controls clears procurement; one bolted together for a demo does not. This is the work of AI security and governance — and the reason it belongs at the front of the project, not the end.
The pilots that ship share a posture: they treat production as the design constraint from week one, not a phase that comes after the demo wins applause. In practice that means four moves.
Scope to one workflow with a measurable owner. Not 'AI for claims' — 'reduce first-touch liability assessment time on auto claims, owned by the claims VP, measured in days.' McKinsey's analysis that 62% of organizations are experimenting with agents but only 23% are scaling them maps almost exactly onto this discipline gap.
Decide before you build. A short discovery pass surfaces the data-readiness, integration, and compliance blockers before sunk cost accrues. This is the entire point of a discovery assessment: a fixed-fee, outcome-scoped diagnosis that tells you whether the production path is two weeks or two quarters — and whether it is worth taking at all.
Redesign the workflow, don't decorate it. Because, again, workflow redesign is the strongest correlate of impact in McKinsey's data. The model is one component; the human handoffs, exception paths, and audit trail around it are the system.
Build the evaluation harness alongside the feature. If you cannot measure accuracy, drift, and cost in production, you have not built a product — you have built a liability. The hallucination rates above are not edge cases; they are the default without instrumentation.
Even teams that ship a model often mistake go-live for the finish line. It is the start of the expensive part. A deployed model is a decaying asset: a study across 32 datasets and 2.56M experiments found 91% of ML models degrade over time. Without monitoring and retraining, accuracy silently erodes until someone notices the numbers stopped making sense.
The economics have shifted to make this the dominant cost. Inference collapsed — Stanford's AI Index tracked the price of a GPT-3.5-class query falling from $20.00 to $0.07 per million tokens, a 280x drop in 18 months. The durable spend is no longer the model call; it is observability, evaluation, retraining, access controls, and incident response. That is exactly the work most pilot teams have no plan for — which is why they abandon, not because the model got worse but because nobody owned keeping it good.
This is the case for a managed AI stack: a retainer that operates the deployment — monitoring drift, running evaluations, managing access, and being on-call when an agent does something unexpected — so the workflow stays in production instead of quietly rejoining the 95%. For sector-specific patterns on where this pays off, see our worked engagements for insurers in the insurance AI whitepaper and for clinical settings in the healthcare AI whitepaper.
Escaping pilot purgatory is not a tooling decision; it is a sequencing decision. Decide before you build — a discovery pass that names the workflow, the owner, the metric, and the data and compliance blockers. Build to a recognized control framework — NIST AI RMF and ISO 42001 from day one, not retrofitted before an audit. Redesign the workflow rather than decorating it, because that is what actually moves EBIT. And resource production as an ongoing operating phase — monitoring, evaluation, retraining, on-call — because 91% of models decay and the durable cost lives there. None of this requires a better model. It requires treating the production system as the thing you are building, and the demo as a checkpoint along the way. The 5% figured that out. The other 95% are still polishing the demo.
These illustrative patterns are representative composites drawn from common regulated-sector engagements, not named clients; the industry figures above are cited and real.
FAQ
Not because of weak models. MIT NANDA found 95% of GenAI pilots deliver no measurable ROI, with the root cause being poor integration and misaligned priorities. The hard parts are workflow redesign, AI-ready data, reliability verification, and governance — all of which a demo skips and production demands.
The operating model. The same frontier models power both the failed pilots and the 5% that succeed. What separates them is sequencing: scoping to one workflow with a measurable owner, building against NIST/ISO 42001 controls, redesigning the workflow rather than decorating it, and resourcing production as an ongoing operating phase.
Because 91% of ML models degrade over time. Inference costs have collapsed (a 280x drop in 18 months per Stanford's AI Index), so the durable spend has shifted to operations — monitoring, evaluation, retraining, access controls, and on-call response. Without an owner for that work, accuracy silently erodes and the project quietly fails.
In regulated sectors, compliance is the #1 adoption barrier (Deloitte). A pilot built against ISO/IEC 42001 and the NIST AI RMF from day one clears procurement and audit; one assembled for a demo gets blocked. Designing controls in early is faster than retrofitting them under audit pressure later — and avoids EU AI Act and Quebec Law 25 exposure.
Decide before you build. A short discovery assessment names the workflow, the owner, the success metric, and the data and compliance blockers before sunk cost accrues — telling you whether the production path is two weeks or two quarters, and whether it's worth taking at all.
Related
ISO 42001, the NIST AI RMF, and the EU AI Act stop being acronyms once you see how a real program is built — and in what order.
AI governanceWhat Quebec's language and privacy laws actually require of an AI product — the deadlines, the fines, and how to build bilingual-by-design instead of bolting French on at the end.
Use casesInsights
Want to talk through what this looks like on your stack? We're senior, AI-literate, and there's no lock-in.
Start a conversation