Where the mandate hits first.

The first agent is the one that pays for itself fastest and earns the organisation's trust. Across every sector we ship into, we score candidate workflows against five criteria before committing to a build.

Workflow repetition. We want a process that runs hundreds of times a week, not dozens. Volume is what compresses the payback window from twelve months to four. Data availability. The agent needs structured inputs it can read on day one — a CRM, a TMS, a PMS, a claims system. If the data lives only in someone's head, the agent waits. Decision boundaries. The decisions inside the workflow must be explainable and bounded. "Qualify a lead against six criteria" is bounded. "Decide whether to extend credit" is not — at least not for agent number one.

Exception rate. Agents are most valuable where 70–85% of cases follow a pattern and 15–30% need a human. Below that, automation already exists. Above that, the agent escalates more than it resolves. Outcome metric. Every first agent is shipped against a single number the business already tracks — speed-to-lead, customs-clearance time, prior-auth turnaround, cart-recovery rate. That number is the contract.

That is why first agents look different per sector. Real estate gets WhatsApp lead-qualification because the workflow runs thousands of times a week and speed-to-lead is the metric brokerages already report on. Logistics gets customs-documentation because the rules are bounded, the data is structured, and clearance time compounds across every shipment. Financial services gets KYC and transaction monitoring; healthcare gets prior-authorisation and scheduling; retail gets WhatsApp triage. Same scoring, different winning workflow.

Every sector adds a different governance burden on top of the agent. The architecture is shared; the overlay is not. We ship the overlay with the implementation — it is not a separate engagement.

Real estate sits under RERA. Disclosures, listing accuracy, and broker registration matter; agents must reflect the registered broker's identity and respect listing-side rules. Financial services answers to DIFC Data Protection Regulation 10 — automated decision-making controls, data subject rights, cross-border transfer logic, and audit trails the regulator can actually read. Healthcare operates under DHA AI guidance: agents are scoped to operational workflows (scheduling, prior-auth, intake), not clinical-decision systems, and every action is logged against a clinician's authority.

Logistics threads UAE customs, free-zone authority rules, and DP World system integrations; documentation accuracy is the audit surface. Retail and any marketing-adjacent agent answers to TDRA rules on consent and to the federal PDPL on personal data — opt-in capture, retention windows, and DSAR response live inside the agent. Hospitality inherits PDPL plus payment-card rules where bookings touch card data.

None of these are blockers; all of them are scoped on day one. The deliverable on every engagement includes the overlay artefacts — DPIA where required, audit log specification, escalation matrix, and the human-in-the-loop boundary the regulator expects to see.