This is a sample report. Start your own assessment below. Start Your Assessment →
← All use cases
Marketing & content

A script walks the contact list, researches each company and writes the opener.

What the audit checks

Personalisation is the only thing that works in cold email, and the first thing dropped once volume goes up. The audit checks the quality of your company data, what GDPR says about the approach, and where the line is past which it just feels creepy.

Self-Audit Assessment Report

Personalised first lines for cold outreach

01 Jan 2026

01/Recommendation
Recommended path

AI Workflow

An AI workflow automating routine first-line generation with a human review gate for exceptions is the clear win here.

The process is high-volume, rule-amenable for the majority of cases, and already running on a no-code SaaS stack, making an AI workflow the strongest fit. The marketing lead can build and maintain it without engineering support, and the existing API integrations mean the data pipeline is largely in place. A human-in-the-loop review step handles the five percent of edge cases that carry GDPR or reputational risk, satisfying compliance requirements without slowing down the routine volume. This aligns directly with the client's stated goal: let automation handle the boring part and surface only the cases that genuinely need a person.

The client's no-code SaaS environment (Make or Zapier with API connections) maps directly onto AI workflow platforms such as Make with OpenAI, or Clay combined with an outreach sequencer. No custom engineering is required, and the marketing lead's existing skills are sufficient to build and iterate the workflow.

02/Process Overview

Process Overview

The Personalised First Lines process sits at the top of the cold outreach funnel. Each time a contact is queued for a campaign, someone on the marketing team researches that individual and their company, checks that the approach is GDPR-compliant and appropriate for the platform, writes a short personalised opening line, quality-checks the tone, and then passes the finished line into the email sequence. The process runs continuously throughout the working day and fires roughly 12,000 times per year, which adds up to around 1,000 hours of manual effort annually. Right now it lives across spreadsheets and email, with no single system owning the end-to-end flow.

The work itself splits naturally into two tiers. The large majority of contacts are routine: the data is clean, consent is clear, and the opener writes itself once the research is done. A smaller slice, around five percent, involves incomplete data, ambiguous consent, or a situation where the tone could easily tip into feeling intrusive or off-brand. Those cases genuinely need a human to make a call. The challenge for the marketing lead and freelance designer currently doing this work is that the routine tier is eating almost all of their time, leaving little capacity to apply real judgement where it actually matters.

The marketing lead already chains SaaS tools together using no-code automation and is comfortable working with API integrations. That existing capability is directly relevant: it means the infrastructure for connecting a contact list, an enrichment source, an LLM, and an outreach sequencer is largely in place already. The gap is the AI layer that turns research into a high-quality personalised line at scale, combined with a structured gate that routes the genuinely difficult cases to a human rather than letting them slip through unchecked.

03/Path Scores

Path Scores

AI Workflow Recommended
9/10

High volume, repetitive research-and-write task with clear inputs and outputs is exactly what AI workflow tools are built for. The no-code SaaS stack is a natural fit, and a human review gate handles the compliance and tone-risk exceptions cleanly. ROI is strong given 1,000 hours of annual manual effort.

AI Agent + human review
8/10

A hybrid approach is essentially what the recommended AI workflow delivers once the exception gate is added, so the distinction is narrow. Scoring it slightly lower because the client's goal is to minimise human touchpoints on routine cases, and a formal hybrid design may over-engineer the review step for this volume.

AI Agent
6/10

An autonomous agent could handle research, writing and self-correction in a single loop, but the GDPR and reputational risk dimensions make fully autonomous sending inadvisable without a review gate. The added complexity is not justified when a simpler AI workflow with a human checkpoint achieves the same outcome.

RPA Not recommended
4/10

RPA can automate the data-gathering steps but cannot generate genuinely personalised natural-language openers. It would still require a human to write the line, defeating the primary purpose of the automation.

Traditional Code Not recommended
3/10

A coded solution could call LLM APIs and orchestrate the pipeline, but the client has no in-house engineering resource and the no-code stack already provides equivalent capability. Build and maintenance cost would be disproportionate.

Education (AIRIES) Not recommended
3/10

Training the team to use AI tools manually would improve quality but would not address the volume problem. At 12,000 runs per year the team needs automation, not just better skills, though learning remains important for governance and iteration.

Stay Manual Not recommended
1/10

The current manual process is already consuming 1,000 hours per year and is the first thing dropped when volume increases. Staying manual directly contradicts the client's stated objective and leaves significant ROI on the table.

04/Process Dimensions

Process Dimensions

Eight dimensions drive the recommendation, scored 0–10 with a note on each.

Data Structure 7/10

Inputs are a contact list and company research, both reasonably structured, though data quality issues affect roughly five percent of cases.

Rule Clarity 7/10

The standard case has clear enough rules (research, write, check tone) but the GDPR and creepiness boundary requires human judgement for edge cases.

Exception Frequency 6/10

Five percent exception rate is manageable but at 12,000 annual runs equates to roughly 600 cases per year requiring human attention.

Integration Readiness 8/10

The team already chains SaaS tools via no-code automation and uses APIs, meaning the integration layer is largely ready to extend.

Volume / ROI 9/10

1,000 hours of annual manual effort at GBP 45 per hour represents GBP 45,000 in current cost, making the ROI case very strong.

Process Stability 6/10

Outreach strategies and platform terms evolve, so the workflow will need periodic prompt and logic updates, but the core task is stable.

Human Judgment Required 6/10

Routine cases need minimal judgement, but tone, GDPR compliance and reputational risk on edge cases require a human review gate.

Compliance Requirements 7/10

GDPR consent checks and platform terms create a real compliance obligation that must be embedded in the workflow, not bypassed.

05/ROI Estimate

ROI Estimate

£45,000

Current annual cost

80%

Estimated time saved

£36,000

Annual savings

2mo

Payback period

Build cost estimate: £2,000 – £6,000

Current annual cost is calculated from 12,000 runs at 5 minutes each (1,000 hours) at GBP 45 per hour. The 80 percent savings estimate assumes the workflow handles routine cases autonomously and humans only review the five percent exception queue plus spot-checks, reducing hands-on time to roughly 200 hours per year.

06/Implementation Roadmap

Implementation Roadmap

1
Audit and map the current data pipeline 1 week

Document every data source feeding the contact list, identify where quality gaps occur, and confirm which fields the AI needs to generate a good opener. This step also clarifies which records should be flagged for human review before the workflow touches them. Effort is low given the marketing lead's existing process knowledge.

2
Build the AI research and writing workflow 1-2 weeks

Use the existing no-code platform (Make or equivalent) to chain a company research step (via enrichment API such as Clay or Apollo) with an LLM call that generates the personalised first line using a tested prompt template. Output is written back to the contact record. The marketing lead can build this without external engineering support.

3
Add the GDPR and quality review gate 1 week

Insert a conditional branch that routes any record with incomplete data, ambiguous consent status, or a low-confidence AI output to a human review queue. Define the criteria for flagging in writing so the rule is consistent and auditable. This gate is the primary compliance control.

4
Pilot on a sample batch and calibrate 1-2 weeks

Run the workflow on 200 to 300 contacts, compare AI-generated lines against the team's quality bar, and refine the prompt and flagging thresholds. Track the exception rate to confirm it stays near the expected five percent. Collect feedback from the marketing lead and any downstream users.

5
Full rollout and monitoring dashboard 1-2 weeks

Activate the workflow for the full contact volume and set up a simple dashboard tracking throughput, exception rate, and any GDPR flags. Schedule a monthly prompt review to keep tone and compliance guidance current as platform terms evolve. The marketing lead owns ongoing maintenance.

07/Risks & Considerations

Risks & Considerations

The primary risk is reputational: if the AI generates a tone-deaf or factually wrong opener and it bypasses the review gate, it goes to a real prospect. The human review gate must be designed conservatively, erring on the side of flagging more rather than fewer records until the team has confidence in the model's output. Prompt drift is a secondary risk: as outreach norms and platform terms change, an outdated prompt can quietly degrade quality or create compliance exposure. A scheduled monthly review of the prompt and flagging rules is essential.

GDPR compliance cannot be delegated entirely to the workflow. The team must ensure that consent status is checked upstream of the automation, not inside it, and that records without a clear lawful basis are excluded before the workflow runs. If the no-code platform stores personal data, a data processing agreement with the vendor is required. The marketing lead should be the named owner of both the workflow and its compliance controls.

AIRIES/Learning recommendation

Train the team, not just the tool.

In partnership with AIRIES, the Swiss AI learning platform. These levels fit your result.

Recommended levels
  1. 3
    Corporate Applied Intelligence & Automation
    Turn your own tasks into AI workflows, build reports and dashboards, set up a personal AI assistant.
  2. 4
    AI Leadership & Scalable Systems
    Design teams of AI agents and automate whole departments.
Why these levels

Level 3 gives the marketing lead the practical skills to turn this specific process into a governed AI workflow using the tools they already have, including prompt engineering, workflow design and output quality control. Level 4 equips them to scale the approach across other outreach processes and manage the AI system as a team-level asset rather than a one-off build. Both levels are directly applicable to the no-code SaaS environment the client operates in.

Focus topics
Who should take it

Marketing lead who will build and own the workflow, and any team member responsible for reviewing exceptions or governing outreach quality.

Explore these levels on AIRIES → The levels come from the AIRIES course catalogue. Opening the link does not commit you to anything.
08/Architecture Overview

Architecture Overview

flowchart TD A(["Contact queued"]) B["Research & enrich"] C{"Data sufficient?"} D["Generate first line via LLM"] E{"Flag for review?"} F["Human review queue"] G["Attach line to record"] H(["Ready to send"]) subgraph External Systems I("Enrichment API") J("OpenAI API") K("Outreach sequencer") end A --> B B --> I B --> C C -->|"No"| F C -->|"Yes"| D D --> J D --> E E -->|"Flagged"| F E -->|"Clear"| G F --> G G --> K K --> H

Hover to zoom · click for fullscreen

09/Why This Approach

Why This Approach

An AI Workflow is the right call here, and the reasoning is straightforward once you look at what the process actually demands. The core task, taking structured contact data, doing a quick research step, and generating a natural-language personalised opener, is exactly the kind of work that a no-code LLM workflow handles well. The inputs are reasonably predictable, the quality bar is consistent, and the output plugs straight into an existing email sequence. There is no need for an autonomous agent making its own decisions across multiple sessions, and there is no need for custom code. The task is repetitive and high-volume, which means the return on a well-built workflow is immediate and measurable.

The client's stated preference for no-code SaaS automation using tools like Make or Zapier is not just accommodated by this recommendation, it is central to it. Platforms like Make connect natively to enrichment APIs such as Clay or Apollo and to OpenAI's API, meaning the marketing lead can build the entire pipeline in the environment they already know. There is no engineering handoff, no new toolchain to learn, and no dependency on external technical support to maintain the workflow once it is running. That matters practically: it means the person who understands the outreach strategy is also the person who can tune the prompt when platform norms shift or when a batch of contacts comes in with unusual data.

The AI Agent path scored lower not because agents are unsuitable in principle, but because the GDPR and reputational risk dimensions of this process make fully autonomous end-to-end execution inadvisable without a review gate. An agent that researches, writes, self-corrects and sends without a checkpoint introduces compounded risk at exactly the point where a mistake is most damaging, which is the moment a prospect reads the email. The AI Workflow recommendation already addresses this by building a conditional branch that routes flagged records to a human queue. That gate is the compliance control, and it is easier to design, audit, and explain to a regulator inside a structured workflow than inside an autonomous agent loop.

The Hybrid path scored only one point below the AI Workflow, and it is worth being direct about why. The distinction between the two approaches is narrow in practice. A well-designed AI Workflow with a human review gate is functionally a hybrid system. Scoring Hybrid slightly lower reflects the risk of over-engineering the review step at this volume. At 12,000 annual runs, a formal human-in-the-loop design applied to every record would add friction that undermines the core goal of freeing the marketing lead from routine work. The right design routes only the genuinely ambiguous cases to a person, which is exactly what the AI Workflow path delivers with a well-calibrated flagging threshold.

RPA, Traditional Code, Education on its own, and staying manual all fall away for clear reasons. RPA can scrape and move data but cannot generate a personalised natural-language line, so it solves half the problem at best. Traditional code could wire up the same LLM calls that Make provides, but with no in-house engineering team the build and maintenance cost is disproportionate when a no-code equivalent is available and already within the marketing lead's skill set. Education alone would improve quality but does nothing about volume: 12,000 runs a year needs automation, not just better technique. And staying manual is simply not viable given that the process is already the first thing dropped when campaign volume increases, which means the business is already paying the cost of its absence.

10/Comparing the Top Approaches

Comparing the Top Approaches

The two strongest candidates here are AI Workflow and Hybrid, and the honest answer is that the gap between them is narrow. The AI Workflow path wins because it is precisely what the client described wanting: automation handles the routine volume, and a human only touches the small slice of records that genuinely need judgement. A formal Hybrid design risks over-engineering that review step, adding coordination overhead that the marketing lead would then have to manage on top of building the workflow itself. At 12,000 runs per year, the goal is to get humans out of the loop on the 95 percent of cases that are routine, not to build a collaborative process around them.

The AI Agent path scores a six and is worth addressing directly. An autonomous agent that loops through research, writing, and self-correction sounds appealing, but the GDPR and reputational risk dimensions make fully autonomous end-to-end execution genuinely inadvisable here. The value of a review gate is not ceremonial, it is the primary compliance control. An agent architecture would add complexity without removing the need for that gate, and the client has no engineering team to maintain a more sophisticated system. The simpler AI Workflow, built and owned by the marketing lead in Make or an equivalent no-code platform, achieves the same outcome with lower build cost and lower ongoing risk.

RPA, Traditional Code, and Stay Manual are all poor fits for reasons that compound each other. RPA can automate data gathering but cannot generate natural-language openers, meaning a human still writes every line and the volume problem is unsolved. Traditional Code could wire up the same LLM APIs the AI Workflow uses, but it requires engineering capacity the client does not have and creates a maintenance burden they could not sustain. Staying manual is simply not viable: 1,000 hours of annual effort at current volume is already the first thing dropped when the team is stretched, and it leaves roughly 36,000 pounds of recoverable cost on the table every year.

11/How to Build It

How to Build It

The build starts with a data audit, not with any tooling. Before any workflow is constructed, the marketing lead needs to document every source feeding the contact list, confirm which fields are consistently populated, and identify where quality gaps cluster. This is not a long exercise given the team's existing process knowledge, but skipping it means the workflow will surface data problems downstream rather than catching them at the gate. The output of this step is a clear field map and a written definition of what "sufficient data to personalise" actually means, which becomes the first decision rule in the workflow.

The core pipeline is built in Make, which fits directly onto the team's existing no-code stack. A triggered scenario picks up each queued contact record, passes the company and individual data to an enrichment step using a tool like Clay or Apollo to fill any gaps in firmographic context, and then sends a structured prompt to the OpenAI API requesting a personalised first-line opener. The prompt template should be version-controlled from the start, even if that just means keeping it in a shared document with a change log, because prompt drift is a real operational risk in a workflow that runs continuously. The generated line is written back to the contact record in whatever system holds the outreach queue, whether that is a spreadsheet, a CRM, or a sequencer like Instantly or Lemlist.

The GDPR and quality gate is a conditional branch inside the same Make scenario, not a separate manual review process bolted on afterward. Any record that meets one or more flagging criteria, incomplete enrichment data, no clear lawful basis recorded, a low-confidence output score from the LLM, or a prompt-level signal that the content touches a sensitive topic, is routed to a review queue rather than passed forward. That queue can be as simple as a filtered view in the contact spreadsheet or a dedicated Slack notification with an approve or reject action. The criteria for flagging must be written down and version-controlled alongside the prompt, so the rules are consistent and auditable if a compliance question arises later.

Pilot before full rollout. Running the workflow on a batch of 200 to 300 contacts before activating it at full volume gives the marketing lead real data on how the AI output compares to the team's quality bar, and it confirms whether the exception rate lands near the expected five percent or reveals a data problem that needs fixing first. After the pilot, full activation is straightforward in Make. A lightweight monitoring view, throughput per day, exception rate, and a flag count for GDPR-related holds, gives the marketing lead enough visibility to catch problems early. A calendar reminder for a monthly prompt review is the last piece: it sounds minor, but it is the mechanism that keeps the workflow honest as outreach norms and platform terms evolve.

12/Risks in Detail

Risks in Detail

The most consequential failure mode is reputational, not technical. If the AI generates an opener that is factually wrong, tone-deaf, or draws on research in a way that feels invasive to the recipient, and that message bypasses the review gate and reaches a real prospect, the damage lands on the client's brand, not on the workflow. The review gate must therefore be calibrated conservatively during the pilot period, flagging more records than strictly necessary until the team has enough confidence in the model's output to widen the threshold. The temptation to trust the AI too quickly is real when the volume is high and the gate creates work, but the asymmetry of risk justifies caution.

GDPR compliance is the second pressure point, and it cannot be handled inside the workflow itself. The workflow can check whether a consent field is populated, but it cannot verify whether the underlying consent is valid, whether the lawful basis was correctly recorded, or whether the enrichment data pulled from Clay or Apollo was obtained in a way that is compatible with how the client intends to use it. Those checks must happen upstream, before any record enters the automation queue. If the no-code platform processes personal data on the vendor's infrastructure, a data processing agreement is required with that vendor, and the marketing lead should be the named owner of that obligation. Treating GDPR as something the automation handles is one of the most common and most expensive mistakes in outreach automation.

⚡

Claude Code Starter

A scaffolded project ready to open in Claude Code. Unzip, open the folder, and Claude starts building immediately.

Claude Code Starter (.zip)

Your own assessment includes a ready-to-use project scaffold: CLAUDE.md, pyproject.toml, src/agent.py and .env.example. Open the folder in Claude Code and it starts building.

📁 your-process/
📄 CLAUDE.md
📄 pyproject.toml
📁 src/agent.py
📄 .env.example
Start Your Assessment

What's next?

That was someone else's process. Now do yours.

Same seven paths, same eight dimensions, same honest verdict, except scored against how your team actually works. Five to eight questions, about fifteen minutes.

Start Your Assessment
Marketing & content
Content repurposing from a single source Brand and competitor mention monitoring Ad creative generation and testing
Illustrative scenario based on how these processes typically run. Not a customer case study. Run this on your own process