An online retailer's board needs to understand where agents touch money and promises: refunds, prices, delivery commitments and customer replies. Directors should be trained on the agent's certified depth and the depth each action needs, how certification earns and removes it, what the record can reconstruct, and who signs off the riskiest actions. Scale is the twist: small errors repeat fast.
Where can an agent hurt an online retailer fastest?
Three places stand out.
Refunds. An agent that issues refunds within limits is efficient. One that accepts a customer's photo as proof of a damaged item every time is a fraud channel.
Prices and promotions. An agent that updates prices or applies discount codes can repeat a mistake across thousands of orders before anyone notices. Undoing it means cancelling orders and disappointing customers, which is why it is a hard-to-undo action.
Promises. A support agent that tells a customer an item will arrive tomorrow has made a commitment on the retailer's behalf. Customers, and consumer protection rules, can hold the retailer to it.
What must directors grasp?
- Depth (per agent), and the depth each action needs: 1 read, 2 draft for a person to send, 3 routine work within bounds, 4 money or hard-to-undo actions, 5 coordinating other agents. A pricing change at scale belongs at depth 4, not 3.
- Earned authority: depth comes from certification on the retailer's own orders and contacts, within the role's ceiling. The lower wins.
- Expiry: certificates lapse after 90 days, and a run that clears no depth drops an agent to depth 1 the same day.
- Provenance: a delivery scan from the carrier's system is sealed or signed evidence; a customer's photo is declared; an email from a "supplier" is external and cannot authorise a payment.
- Disclosure: under Article 50 of the EU AI Act, people must be told when they are interacting with an AI system, which matters for retailers selling into the EU.
What stays with people?
| Work | Agent | Stays with a person |
|---|---|---|
| Order status questions | Answers within bounds at depth 3 | Complaints |
| Refunds within the retailer's limit | Executes at depth 3, with evidence checks | Refunds above the limit or with weak evidence |
| Price and promotion changes | Drafts and holds at depth 4, if certified | Approving each change set |
| Supplier payments | Prepares and holds at depth 4, if certified | Releasing them |
| Account closures for abuse | Drafts the case | Deciding |
Card data adds another layer. PCI DSS v4.0 sets the security standard for handling it, so the board should know whether any agent can read card data at all. The safe answer is usually no.
What changes at peak trading?
Peak trading multiplies everything: contacts, refunds, held actions. It is also when a failed certification run hurts most, because work drops back to people when they are busiest. The board should ask management for a peak plan: certification runs scheduled well before the peak, approvers' credentials checked for expiry, and a clear rule that held actions are not bulk-approved to clear queues.
Retailers that offer credit at checkout should also read what a lender board needs to know, because those decisions carry heavier rules.
What evidence should the board see?
A short report showing each agent and its depth, certificate dates and failed runs, held actions released by uncertified staff (which should be none), and one reconstructed refund or price change traced through the record. The order of training is set out in who in an online retailer needs AI agent training first. A readiness assessment in the retailer and a plan to roll out AI agent training across the retailer follow. Programmes such as Pryme Intelligence Academy cover director literacy in a few hours and certify approvers through practice on real decisions. The full model is in AI literacy and certification for people who work with agents.
Questions people ask
Should an agent ever change prices without approval?
Small, rule-based changes within tight bounds can be certified at depth 3. Broad changes and promotions should be held for a person, because errors repeat at scale.
How should the board think about refund fraud?
As a provenance problem. Train approvers to weigh declared evidence, such as photos, against sealed or signed evidence such as carrier scans.
Do directors need certification?
No. Directors need tested literacy. Certification is for the people who release held refunds, payments and price changes.