A chat window is a tool, not a system
ChatGPT and its rivals are excellent at general work for one person at a time. They don't know your records, can't enforce your approval rules and don't run your process on their own.

Use off-the-shelf AI tools like ChatGPT, Microsoft Copilot or Gemini when the work is general: drafting, summarizing, research and first-pass analysis. Commission custom AI when the tool has to know your records, follow your rules and act inside your systems, usually as part of a custom AI application. Most businesses need both, for different jobs.
Most of what gets sold as custom AI isn't a new model at all. It's an existing model built into your process, with your data, your rules and a person who signs off.
ChatGPT and its rivals are excellent at general work for one person at a time. They don't know your records, can't enforce your approval rules and don't run your process on their own.
Use a tool as sold, configure it with your documents, connect it to your systems, or build an application around it. Most needs are solved before the last level.
A custom AI build almost always sits on an existing model. What you're paying for is the data connection, the rules, the testing and the review step.
Business and personal AI accounts handle your data differently. Before anyone pastes client information into a tool, check the terms of the plan they're actually on.
If the work is general and the person asking checks the answer, buy seats and set a usage policy. If the AI has to know your records, face your customers or take action in your systems, and configuring a tool hasn't covered it, custom AI is worth scoping.
Off-the-shelf AI tools are finished products, like ChatGPT, Microsoft Copilot or Gemini, sold by subscription and built for anyone's work. Custom AI is software built around one business's data, rules and process, usually on top of an existing model. The tool waits for someone to ask it something. The custom build is part of how the work gets done.
| Factor | Off-the-shelf AI tool | Custom AI |
|---|---|---|
| What it knows | Its training, plus whatever someone pastes or uploads | Your records, connected and kept current |
| How it's used | A person asks, then copies the answer somewhere else | Built into the process, inside the systems you already use |
| Rules | Your policy, followed if staff remember it | Enforced by the software: what it can see, say and do |
| Review | Whoever reads the answer | A defined approval step before anything leaves the business |
| Getting started | As soon as you sign up | Needs scoping, building and testing first |
| Cost pattern | A per-seat subscription | The build, plus model usage and maintenance |
| Changes | On the vendor's roadmap | On yours, within what the underlying model can do |
| Main risk | Staff pasting sensitive information into the wrong account | A build that's never tested against real cases |
The same build-or-buy logic applies to software in general. If the question is broader than AI, here's when a custom app beats off-the-shelf software.
For a lot of work, yes. Drafting, summarizing, research, brainstorming and first-pass analysis are where general AI tools are strongest, and a business subscription with a clear usage policy covers them well. A custom build wouldn't do that work better. It would only cost more and give you something else to maintain.
The limit shows up when the work stops being one person and a chat window. Once the output has to land in your CRM, match your pricing rules, reach a customer or be checked by someone other than the person who asked, a general tool leaves the hard part to your team.
My rule of thumb: if the person asking is also the person checking, a subscription is enough. Set the rules first, though. Here's how employees should use AI at work without putting client information at risk.
There are four levels, not two. You can use an AI tool as sold, configure it with your own documents and instructions, connect it to the software you already run, or build an application around a model. Each level costs more and does more, so start at the lowest level that actually solves the problem.
| Level | What it looks like | Good for | Where it stops |
|---|---|---|---|
| Use | Business seats in ChatGPT, Copilot, Gemini or Claude | Drafting, summarizing, research and analysis | Knows nothing about your business unless someone pastes it in |
| Configure | Custom GPTs, projects or knowledge bases loaded with your documents and instructions | Internal questions, house style and reusable prompts | Only as current as the files someone remembers to update; can't act in your systems |
| Connect | AI steps added to your existing tools through integrations or automation | Sorting email, drafting replies and pulling details into records | Each connection solves one handoff, with no interface or rules of its own |
| Build | An application built around a model, with your data, permissions, review steps and interface | Customer-facing assistants, decisions with rules and work across several systems | Needs scoping, testing and maintenance, like any software |
The connect level is where plenty of businesses should land. If the job is moving information between tools, here's how RPA and AI automation compare for each step of a process.
When the AI has to do more than answer the person in front of it. Custom AI earns its cost when it must draw on your live records, follow rules your business can't leave to memory, face your customers, or take action in your systems. If none of those apply, a configured off-the-shelf tool usually does the job.
| Sign | What it usually means |
|---|---|
| Staff paste the same documents into a chat window every day | The AI needs a live connection to your records, not uploads |
| Answers have to match your pricing, policies or contracts exactly | The rules need enforcing in software, not in a prompt |
| Customers would talk to it directly | You need control over what it can say, and a handoff to a person |
| The output has to land in your CRM, booking or job system | The AI needs to act in your systems, with permissions |
| Someone has to approve before anything goes out | The review step has to be built in, not assumed |
| The information is too sensitive for a general tool's terms | You need control over where data goes and who can reach it |
One sign on its own rarely justifies a build. Two or three around the same process usually do.
Almost never. Training a model from scratch is work for large AI labs. A custom AI build for a business sits on an existing model and adds what the model doesn't have: a connection to your records, instructions and limits, an interface, testing against your real cases and a person who reviews what matters.
When a vendor leads with "we'll train an AI on your data," ask what they actually mean. Usually it's retrieval: the software finds the right record and hands it to the model when the question is asked, so answers come from your documents, not the model's memory. Retrieval suits most businesses, because your records change and a trained model doesn't.
Fine-tuning, which adjusts an existing model's behaviour with examples, has its place. It's a narrow tool for tone and format, though, not a way to teach a model your price list.
The part worth paying for is everything around the model. Model versions change often. Your data connections, rules and test cases are what carry over.
It depends on the plan and the settings, not the brand. Business plans usually come with stronger data terms than personal accounts, and the bigger risk for most businesses is staff using personal accounts for client work. Check which accounts are in use, what each plan's terms say, and what the tool is allowed to keep.
OpenAI, for example, states on its business data privacy page that it doesn't use data from ChatGPT Business, ChatGPT Enterprise or its API platform to train its models by default. Other vendors publish their own terms. Read the ones for the plan your staff actually use, not the plan you assume they use.
Whatever tool you pick, the responsibility stays with you. In most of Canada, the federal privacy law PIPEDA keeps a business accountable for personal information it hands to a vendor for processing, under the accountability principle set out by the Privacy Commissioner. A custom build doesn't remove that duty, but it lets you decide where data goes and who can reach it.
The build is the first cost. Custom AI also carries usage fees to the model provider, retesting whenever the model or your data changes, monitoring for wrong answers, and staff time at the review step. Off-the-shelf seats bundle most of that into a subscription. With custom AI, put each one in the scope before work starts.
| Cost | Off-the-shelf AI tool | Custom AI |
|---|---|---|
| Upfront | Little or none | The build itself |
| Running | A per-seat subscription | Model usage fees, usually priced by volume, plus hosting |
| Model changes | The vendor's job | Retesting when the underlying model is updated or retired |
| Accuracy | Whoever reads the answer | A test set of real cases, rerun after every change |
| Review | Informal | Staff time at the approval step you designed |
| Leaving | Export whatever the vendor allows | Keep your data, rules and test cases, and switch models if the build allows it |
Compare the two over the years you'll actually use them. Count the hidden cost on the off-the-shelf side too: the time staff spend copying, pasting and checking answers that a connected system would have handled.
Buy seats for general work. Configure them when the problem is internal knowledge. Connect AI to your systems when the problem is a handoff. Build custom AI when the work faces customers, must follow your rules or runs across several systems. Most established businesses end up using all four levels, for different jobs.
| If… | Then |
|---|---|
| The work is general and the person asking checks the answer | Buy business seats and set a usage policy |
| Staff keep asking the same questions about your documents | Configure a tool with those documents and instructions |
| Information has to move between tools you already use | Connect AI steps into those tools |
| The AI has to face customers, follow your rules or act across systems | Scope a custom build |
| You're not sure which processes qualify | Map the processes before anyone picks a tool |
If you're not sure where AI belongs in the business at all, settle that before choosing a level. Here's what an AI consultant actually does and when you need one.
If the bigger question is how your whole operation should modernize, start with AI and modernization consulting.
It depends on what it has to connect to, how many people and systems use it, how sensitive the data is, how much testing it needs and how much the model is used once it's live. Anyone quoting a firm number before seeing your process is guessing. Every SyncDS engagement is custom-quoted, with no packages or tiers.
Start with the process, not the technology: which task, which data, which rules, and who checks the result. Test the idea in a configured off-the-shelf tool first. If it holds up, build around an existing model with a connection to your records, defined limits, a review step and tests against real cases.
No. A custom GPT is an off-the-shelf tool configured with your instructions and files. It's useful for internal knowledge and house style, but it lives inside the vendor's product, works only when someone opens it, and can't enforce your business rules. Custom AI is software you control, built into your process.
No. Almost every business AI build uses an existing model from a provider such as OpenAI, Anthropic or Google. What makes it custom is everything around the model: your data, your rules, your interface and your review step. A well-built system can often switch to a different model later.
Usually, if that software offers an API, a documented way for programs to exchange data. Most established business software does. Confirm it during scoping, because a system with no API, or one that charges extra for access, changes what the build has to include.
It can, within limits you set. An AI agent takes steps on its own, such as updating a record or sending a message, rather than only answering. Give it the narrowest permissions the job needs, log what it does, and keep a person approving anything that affects a customer, money or a record you can't reverse.
No AI model is perfectly reliable, but you can design around that. Ground answers in your own records, have the tool show where an answer came from, let it say it doesn't know, test it against real cases before launch, and keep a person approving anything that reaches a customer.
Providers update and retire models, and a new version can behave differently. A sound build keeps its data connections, rules and test cases separate from the model, so you can rerun the tests on the new version and switch with confidence. Plan for it in maintenance, not as an emergency.
You should, but the contract decides it. Get written terms on who owns the code, the prompts and rules, the data, the test cases and the account with the model provider. If the tool runs on the builder's account and stops when you stop paying, you've rented it, not bought it.