What AI can do reliably today — and what it cannot
Language models are good at three things: they understand text, including messy text, in many languages and formats. They bring it into structure — category, fields, summary, scoring against criteria. And they draft text that fits a brief: a reply, a description, a letter, a report. All three abilities work on tasks that occur in large numbers in companies every day, and in all three the result is a suggestion that a person can check in seconds. That is why the areas of use above work: not because the AI is smarter than the employee, but because it takes over the first eighty per cent of each task, which used to be routine.
What a language model cannot do: guarantee facts. It phrases things fluently even when it is wrong, and it does not know what it does not know. It calculates unreliably when it has to calculate without tools. And it does not know your company — your products, your prices, your rules, your customers — unless someone connects it to them. Three rules follow, which we apply in every project: the AI is tied to your own data and cites it, instead of answering from memory. Whatever calculates is calculated by the system, and the AI is given the result. And every output with external impact — an email to the customer, a quote, a product text in the shop — goes through an approval, at least until the error rate has been measured in the pilot and you decide where it may run without approval.
The difference between a tool that helps in daily work and one that nobody uses after three weeks rarely lies in the model. It lies in the connection: does the AI have the product master data, the ticket history, the price list? Does the suggestion appear where the employee already works — in the ticket system, the shop back end, the ERP — or in yet another window? Is it logged what it suggested and what the person changed, so that both can be improved? These are questions of software development and interfaces, not of AI. That is why the topic sits with us where process digitalisation and custom software sit.
Connection to shop, ERP and CRM: AI as a building block, not an island
A use of AI that delivers something has three parts: the data, the model and the place where the result lands. The data comes from the systems you have — Shopware or Magento, TYPO3 or WordPress, an ERP such as Sage, Microsoft Dynamics, SAP Business One or an industry-specific system, a CRM, the ticket system, your mail server. We know these interfaces from more than 250 projects since 1999 and build them so that the AI reads what it needs, and only that. We choose the model by task and data protection requirements: a large model from a provider via an interface, an open model on our servers, or, for simple classification, a small one that answers in milliseconds and costs nothing.
The result has to land where the work is done. For Shopware that means an extension in the administration area that shows the product text suggestion next to the product; for TYPO3 a back-end module; for an ERP a field or a case with the status “suggested”. For workflows between systems we use an automation platform such as n8n on our servers or build the workflow as a service of its own, with a queue, retries on errors and a log in which every step can be traced. Approvals are a step of their own in the workflow, not a note in an email. And if the model does not respond one day, the process carries on without AI, as before — just more slowly.
Anyone already using AI, say through a plugin or a subscription service, often faces a different problem: it runs, but nobody knows which data goes there, what it costs per month and whether the results are getting better. We review such solutions, measure cost and error rate and tell you whether they should stay, be connected properly or be replaced by something of your own that belongs to you. In the end the code sits in a Git repository that belongs to you, and the domain is always in your name. That applies to AI building blocks as to everything else we build.
What AI should not decide
There are processes in which the AI may pre-sort and pre-draft, but the decision stays with a person — not out of caution, but because mistakes there cannot be undone or because the law requires it. This includes all decisions about people: job applications, appraisals, dismissals, creditworthiness. The AI Act classes AI systems in the HR area as high-risk, and the GDPR, in Article 22, prohibits automated decisions with legal effect without human involvement. An AI may therefore sort applications by formal criteria that you have set; it may not decide who is invited.
This includes prices and terms, unless they are formed according to stored rules: a model that prices a quote “reasonably” is guessing. A system that applies your costing rules and lets the AI only write the description is calculating. It includes legal questions — contract clauses, notice periods, reminders with legal effect — and anything that contains commitments to customers, such as delivery dates or warranties. For these cases we build the four-eyes step in firmly: the AI supplies the draft and the reasoning, the person approves, and both are logged.
A limit of a different kind is expectation. AI does not make a bad process good, it makes it badly faster. If enquiries end up in five inboxes and nobody is responsible, a model that reads the enquiries does nothing for you at first. That is why every project with us starts with the process, not the tool: who does what today, where does it get stuck, which information is missing at which point. Often the first step is an interface or a form with mandatory fields, and the AI comes second. That is less spectacular, but it is the reason why process digitalisation has worked for us for years.
GDPR, AI Act and data sovereignty
The first question with any use of AI: which data leaves the company, and where does it go? A support ticket contains names, addresses and sometimes more; an order contains customer data; a contract contains trade secrets. If something like that goes to a provider in the USA, you need a data processing agreement under GDPR Article 28, a legal basis for the transfer and the assurance that the data is not used for training. Large providers offer this in their business tariffs, with data centres in the EU; the standard offerings for private users do not. We check this per provider and tariff and document it for your record of processing activities. What does not need a provider gets none: much can be done with pseudonymised data, where names and customer numbers are replaced by placeholders before the model and put back afterwards.
The other option is to bring the model in-house. Open models run on our own servers in the Hetzner data centre in Falkenstein, Germany, on our Proxmox cluster with Docker, monitoring and backups. The data then does not leave your environment, there is no dependence on a provider’s tariff and price list, and the costs are predictable. For classification, extraction from documents, summaries and search across your own documents, these models are sufficient today; for demanding texts in customer-facing language, the large providers’ models are often still better. Which combination fits is decided in the pilot, with your data and measured, not from a data sheet.
The AI Act, the EU’s AI regulation, has been in force since August 2024 and applies in stages. Since February 2025 certain practices have been banned, and companies must ensure that staff who use AI have sufficient AI literacy. AI systems that interact with people must be recognisable as such — so an advisory assistant in the shop introduces itself as AI. High-risk applications, for example in HR, are subject to special obligations. The areas of use on this page lie very largely outside the high-risk area; where a project comes close to it, we say so beforehand. The legal assessment lies with you and your data protection officer; we supply the technical basis: which data flows where, what is logged and how the human stays in the loop.
Getting started: one process, one pilot, measurable figures
A start does not begin with an AI strategy but with a process. We pick it together using three criteria: it occurs often, it noticeably costs time today, and the data the AI has to be tied to is available or can be obtained with reasonable effort. Often this is the inbox, product data maintenance or the reading of orders and invoices. For that one process we define what is measured: minutes per task, share of suggestions accepted without change, turnaround time, errors that reach the customer. Without these figures it is impossible to say afterwards whether it was worth it.
The pilot runs with real data and real employees, on a limited part — one product group, one mailbox, one supplier list. Four to six weeks are usually enough to know the error rate and to see whether colleagues use the tool or work around it. Both are results. During this time we adjust the model, the connection and the settings until the figures are right or it is clear that they will not be. Then you decide: roll out, adjust or drop. What is rolled out goes into operation like any other software with us: with monitoring, logging, updates of models and dependencies and, on request, a service level agreement.
For operation, the same applies as for shops and websites: maintenance with an SLA in the tiers BASIC, STANDARD and ADVANCED with 24, 8 or 4 hours’ response time, each booked for one year; the work by time and materials or within an agreed scope of hours. Without an agreement we deal with requests within 48 hours during our business hours of Mon–Thu 9:00–16:00, Fri 9:00–13:00 (CET). Sharpness has existed since 1999, with IT liability insurance and a team in Oldenburg that builds shops, websites, custom software and interfaces. AI is not a business of its own for us, but one more tool in the processes we have been digitalising for years. That, we believe, is the right attitude towards it.