Cluster · 9 articles

AI in ERP: Why Agents Fail at the Data Layer and What Actually Makes a Pilot Work

AI in ERP is sold harder than it is explained. Every finance team is being pitched an agent, and few vendors say why pilots fail or what has to be true in the system underneath for one to work. We follow this space closely and share what we learn: where agents genuinely do the work, where they quietly die at the data layer, and how to tell the difference before funding a pilot.

One hand reaches through an open lattice into warm light; a second hand is stopped flat against a closed glass panel.

All 9 articles in AI in ERP

FAQ

Who is this cluster written for?

CFOs and VP Finance deciding whether an AI pilot is worth funding, on NetSuite's own AI or an agent layer on a different platform. None of it assumes you have already picked a vendor or a model.

What does this cluster cover?

Where AI agents actually work against ERP data and where they quietly fail, what NetSuite's own AI tooling can and cannot reach, the full taxonomy behind a stalled pilot's ROI, and what changes for the fractional controllers and accounting firms advising clients through the decision.

Why do AI pilots on ERP systems stall after the demo?

Because the pilot runs against clean, exported data in one flat structure, and production does not look like that. The model does not get worse between demo and production. The tool surface it is allowed to touch gets narrower and messier, bounded by whatever role and API limits the vendor has defined and versioned. That ceiling is a governance decision, not a modeling problem.

Can an AI agent write directly to an ERP, or only read from it?

On a platform like NetSuite, agents can write, and Oracle's own MCP Standard Tools documentation lists exactly what that means: create, retrieve and update tools over SuiteTalk REST, no delete tool. SuiteTalk REST itself supports full CRUD, but the documented MCP surface does not expose delete. The write access is real, but it runs under the authorising user's role, with no elevated permissions and no calls outside what that surface defines. An owned, open-schema system removes that boundary rather than widening it: the agent, or a developer, can change what the system does at the code level, not just which records it touches.

What counts as a production AI agent versus a pilot?

A pilot proves the model can produce a plausible answer on sample data. Production means the agent runs against live records, under a defined role and tolerance, with every action it takes reviewable after the fact. The gap between the two is not model quality, it is whether someone can point to the specific record an agent changed and why.