ENGINEERING THE NEXT GENERATION

Logo
Home/Blog/How to Shortlist AI Agencies for an Enterprise Product Build
Vendor SelectionEnterprise AIAI DevelopmentProcurementAI Agents

How to Shortlist AI Agencies for an Enterprise Product Build

November 4, 2026
Many glowing nodes narrowing through a funnel of glass filters to three bright candidates
A good shortlist is built by removing firms on evidence, not by collecting the best-looking websites.

TL;DR & Quick Summary

To shortlist AI agencies for an enterprise product build, work from evidence and in stages:

  1. Write a one-page brief so every firm is judged against the same need
  2. Build a long list of 10–15 from referrals and independent sources
  3. Filter on hard requirements: security, sector, production evidence
  4. Interview 4–6 and ask for proof, not demos
  5. Score with weights agreed in advance, then get 3 full proposals
  6. Run a short paid discovery with your top choice before the full contract
  • Key Takeaway: The best single filter is a named system running in production, with a client reference who will tell you what went wrong. The best final test is a paid discovery phase.
  • Be careful with rankings: Many "best AI agency" lists are published by agencies. That includes ours, so use any list for names and judge every firm on the same evidence.
  • Get Started: Want help with the brief or the scorecard? Schedule a strategy call with Cogniq AI or see our custom AI development services.

Step 1: Write a One-Page Brief

You can't shortlist without knowing what you're shortlisting for. One page is enough:

  • The product: what it does, and for whom
  • The outcome: the measure that will show it worked
  • The systems: what it must connect to
  • The constraints: security, data residency, regulation, deadlines
  • The budget range: firms can't propose sensibly without one
  • Who will run it afterwards: your team, the agency, or a mix

If you can't complete this yet, the gap may be direction rather than delivery. Our guide to AI consulting vs in-house development helps you tell which.

Step 2: Build a Long List of 10–15

Good sources, roughly in order of reliability:

  1. Referrals from peers who have shipped something similar
  2. Your existing technology partners, who know which firms deliver
  3. Authors of technical work you respect, because detailed writing is hard to fake
  4. Independent directories and reviews, read critically
  5. "Best of" lists, for names only

Be careful with the last one. Many lists are published by agencies or paid placements, and rank the publisher near the top. Our own AI automation agency list includes us, so hold it to the same standard. A place on any list tells you a firm exists, not that it's right for you.

Step 3: Filter on Hard Requirements

Before any calls, remove firms that fail a yes-or-no test. This usually halves the list.

Filter What to check
Production evidence At least one named AI system live in production
Relevant scale Has worked with organisations with procurement, security and legal reviews
Sector or data fit Experience with your kind of data or regulation
Security Can meet your security review, access rules and data residency needs
Capacity A real team available in your timeframe
Full-stack ability Can build the product around the AI, not only the model

The last filter matters more than it sounds. Most of an enterprise AI product is ordinary software: permissions, interfaces, integrations, audit logs. A firm that only does models will leave that gap for you.

Step 4: Interview 4–6 Firms and Ask for Proof

Use the same questions in every call:

  1. Show us a system running in production today. Who uses it, and how many?
  2. How do you measure quality before release?
  3. What broke after launch on your last project, and what did you change?
  4. Who exactly would work on this? Can we meet them?
  5. How do you handle a case where the model is confidently wrong?
  6. What will we own at the end, and where will the code live?
  7. How have you handed systems over to client teams?

Listen for specifics: names, numbers, failures and trade-offs. Firms that have shipped talk about what went wrong. Firms that have only demoed talk about models and features.

Ask for a reference call with the person who ran the project on the client side. Ask them what they'd change, how the firm handled problems, and whether they'd hire them again.

Meet the delivery team. A common bait-and-switch is a senior team in the sales meeting and a junior team on the project. Name the people in the contract.

Step 5: Score With Agreed Weights

Agree the criteria and weights before the calls, or the most polished presenter wins by default. A starting scorecard:

Criterion Weight Score 1–5 on
Production evidence 25% Live systems, references, honest failures
Understanding of our problem 20% Restated the outcome, named risks we missed
Evaluation and quality approach 20% Clear test method and release rule
Team 15% Named, relevant, available
Security and ownership 10% Meets requirements, we own what's built
Commercials 10% Clear scope, transparent running costs

Have each evaluator score separately, then compare. Large disagreements are useful, because they show where you need more evidence. Price carries a low weight on purpose. A cheap firm that fails costs far more than the difference. For the proposals themselves, use a structured request. Our RFP checklist for AI development covers what to include, including real test cases each bidder must answer.

Step 6: Run a Paid Discovery With Your Top Choice

A short paid discovery, usually two to four weeks, is the best test available. It replaces opinions with evidence:

  • You see how the team actually works with your people
  • They see your real data and systems, so the estimate is grounded
  • You get a scope, an architecture and a plan
  • You can stop with a modest spend if it isn't working

Make sure you own the outputs, so that another firm could pick up the work. Be wary of a large fixed price before anyone has seen your data. Either the firm has padded it heavily, or it will cut scope later.

A Worked Scorecard

For illustration, here's how the weights above separate three fictional firms, scored 1–5:

Criterion (weight) Firm A Firm B Firm C
Production evidence (25%) 3 5 4
Understanding of our problem (20%) 4 4 3
Evaluation approach (20%) 2 4 4
Team (15%) 3 4 3
Security and ownership (10%) 4 4 3
Commercials (10%) 5 3 4
Weighted total 3.30 4.15 3.55

Firm A has the lowest price and gave the best presentation, but it can't explain how it measures quality. Firm B costs more and wins clearly on evidence. Without agreed weights, Firm A often wins this comparison in the room, because price and polish are the easiest things to see.

If No Firm Passes

Sometimes nobody clears the bar. Before lowering it, check whether the brief is the problem. A vague brief produces vague proposals. If the brief is sound, widen the long list, or split the work: one firm for discovery now, with the build decision made once the scope is real.

Red Flags

  • No production references, only demos and logos
  • No explanation of how quality is measured
  • A fixed price before seeing your data
  • Code and accounts held by the agency
  • A proprietary platform only they can operate
  • Unwillingness to name the delivery team
  • Promises of a specific accuracy before any testing
  • Everything is described as AI, including things that should be plain software

Keep your notes from every call, including the firms you reject. If the chosen firm falls through, or the project grows, the runner-up is already vetted and a second call takes days rather than months. Tell rejected firms why, too. The good ones will remember it, and the market for strong AI teams is small.

Enterprise-Specific Checks

An enterprise build has extra demands that smaller projects can skip:

  • Security review: expect questionnaires, penetration testing and access controls. Ask how the firm has passed these before.
  • Procurement: agree payment terms, insurance and liability early, because these can add weeks.
  • Data handling: which data goes to which model provider, under what terms, and where it's stored.
  • Change control: who approves scope changes, and how they're priced.
  • Handover: how your team takes over. Our guide to AI agent development company vs in-house team has a full handover checklist.
  • Governance: audit logs, human approvals and accountability, covered in what AI governance costs with legacy systems.

A Realistic Timeline

A thorough shortlist doesn't need months:

  • Week 1: brief and long list
  • Week 2: hard filters and first contact
  • Weeks 3–4: interviews and references
  • Weeks 5–6: proposals and scoring
  • Weeks 7–10: paid discovery with your top choice

Procurement and security reviews can run in parallel from week 4. Starting them late is the most common cause of delay.

Conclusion

Shortlisting AI agencies well is mostly discipline. Write the brief, filter on hard requirements, ask for production proof instead of demos, score with weights agreed in advance, and test your top choice with a paid discovery before committing the full budget. Treat rankings, including ours, as a source of names and nothing more.

Schedule a strategy call with Cogniq AI to review your brief or talk through your shortlist, or explore our custom AI development services.

Frequently Asked Questions

Start with a written brief, build a long list of 10 to 15 firms from referrals and independent sources, then filter on hard requirements such as security, sector experience and production evidence. Interview four to six, score them with weighted criteria agreed in advance, and run a short paid discovery with your top one or two before signing a full build.

Three is usually right for full proposals, reached from a long list of 10 to 15 and four to six introductory calls. Fewer gives you no comparison. More means proposals are skimmed, and good firms may decline a crowded bid.

A named system running in production today, what it does, how many people use it, how quality is measured, what failed after launch and what changed, and a reference call with someone who ran the project on the client side. A demo or a case study without numbers proves little, because demos show chosen inputs and case studies are written by the firm.

Use them as a source of names, not as a verdict. Many are published by agencies or by sites paid for placement, including lists that rank the publisher first. Our own lists feature Cogniq AI, so hold them to the same standard. Check each firm against the same evidence regardless of where you found it.

Because it tests how a firm actually works with your data, systems and people, before you commit to the full budget. Two to four weeks of paid work produces a real scope and estimate, and you can walk away if the working relationship or the thinking disappoints. Make sure you own the outputs, so another firm could use them.

No production references, no explanation of how quality is measured, a fixed price before anyone has seen your data, code held in the agency's accounts, a proprietary platform only they can operate, and a senior team in the sales meeting that is not the team doing the work.