AI approval policy template for sales

Sixteen agent actions, each set to auto, review or human-only. This is the table SalesCrew seeds on every new instance, published in full to copy.

An admin approves every new account by hand. Nothing is created until then. We reply by email; no newsletter, no sequence.

Want to see it first? Book a demo

  • Published in full
  • No email required
  • Four modes explained
app.salescrew.io/outreach
Campaigns: segment, sequence and schedule

The short answer

  • An AI approval policy for sales decides, per action, whether an AI agent acts alone, waits for a person, or never acts. SalesCrew gives every agent four modes: off, draft (writes the artefact and does nothing with it), review (queues it for a person), and auto (executes and logs, falling back to review below a confidence threshold).
  • No agent starts in auto. The Inbox agent ships off, and every external send (email, LinkedIn, SMS, marketplace proposal) defaults to review, so a person approves it in one queue before it goes.
  • One line never moves: anything that spends money, and anything outside the CRM, is human-only in every mode. An agent that can move a budget is a bad design regardless of how good the model is.

Why this exists

A single on-off toggle for AI forces one decision to cover a hundred different risks. Logging a call and sending an email to a customer are not the same kind of action, and they shouldn't share a switch.

A policy table splits them by class. Low-stakes, reversible, internal work runs on its own. Anything a customer sees waits. Anything that spends money never runs. That structure is worth copying whether or not you use SalesCrew, so the table is published rather than described.

The four agent modes

Set per agent in SalesCrew under Agents, or over MCP with agent_set_mode.

ModeWhat the agent doesWhat a person does
offNothing. The agent does not runAll of the work, by hand, exactly as before
draftWrites the artefact (a reply, a proposal, a note) and stops thereReads the draft and decides whether to use it
reviewWrites the artefact and puts it in the approval queueApproves, edits then approves, or rejects with a reason
autoCarries the action out and logs it; drops back to review below the confidence thresholdReads the audit log and the queue for anything the threshold caught

Modes as SalesCrew runs them, September 2026. The Inbox agent is seeded off and sweeps the inbox every 15 minutes once you switch it on.

The policy table, as seeded

Editable per instance under Agents, Guardrails. These are the starting values.

Action classDefaultWhy
Research, enrichment, taggingautoReversible, internal, and wrong answers are visible in the record rather than in a customer's inbox
Logging, scoring, summariesautoNothing leaves the building and everything is overwritable
Internal tasks and suggested contactsautoThe cost of a bad suggestion is a person ignoring it
Classify a replyautoA label is a filter for attention, not a decision
Pause a cadence on replyautoThe failure mode of not doing this is worse than the failure mode of doing it wrongly
Suppress on unsubscribe or bounceautoDelay here creates a compliance problem, so it should never wait in a queue
Any external email sendreviewA customer sees it. That is the whole test
Any LinkedIn messagereviewSame test, and the platform account is at stake as well
Any SMS or WhatsApp messagereviewSame test, plus consent obligations that belong to you
Any marketplace proposalreviewA proposal is a commitment in the buyer's eyes
Create a deal from a positive replyreview, then auto after a clean weekCheap to reverse, but a wrong deal distorts the forecast until someone notices
Book a meetingreview, then auto after a clean weekIt occupies a real person's calendar
Change a deal stagereviewThe forecast is a number people act on
Merge or delete a contactreviewDestructive and awkward to undo
Spend money: credits, connects, adshuman onlyNo mode changes this. Not now and not later
Anything outside the CRMhuman onlyIf the product cannot audit it, an agent should not do it

Seeded defaults on a new SalesCrew instance, September 2026. Every row is editable, and the last two are refused rather than merely defaulted.

How the approval queue works

An AI approval queue is one list where every action waiting on a person sits until someone approves it. In SalesCrew the queue is grouped by agent. Each item shows the draft itself, the evidence behind it (the thread, the score, the knowledge-base sources it used), the model's confidence and what the run cost.

You have three buttons: Approve, Edit-then-approve and Reject. A rejection asks for a reason, and that reason feeds the agent's next run, so the same mistake doesn't come back tomorrow. The same queue is reachable over MCP through approval_list, approval_approve and approval_reject, so a reviewer working in Claude or ChatGPT clears the same items you'd see on screen.

Set up human approval for AI-written sales emails

The order we'd follow on a new SalesCrew instance.

  1. 1

    Leave the send rows on review

    Open Agents, then Guardrails. Check that every external send row reads review before you switch any agent on.

  2. 2

    Switch one agent to draft

    Start with the Inbox agent. It sweeps your inbox every 15 minutes and writes reply drafts without queuing or sending anything.

  3. 3

    Move it to review

    Once the drafts read well, set the mode to review. Each draft now lands in the approval queue with its evidence attached.

  4. 4

    Clear the queue daily

    Approve, edit or reject every item. Give a reason on each rejection, because the agent reads it on its next run.

  5. 5

    Promote classes, not agents

    After a clean week, let deal creation and meeting booking move to auto. External sends stay on review until you decide otherwise.

The guardrails that run underneath

Mode is only half of it. Guardrails apply regardless of what mode an agent is in: at least three days between touches per contact, a per-cadence cap, per-mailbox and per-domain daily caps, a business-hours send window, suppression re-checked at send time, and a confidence threshold that drops an action back into review when the model is unsure.

Above all of it sits the kill switch: one control on the Agents page that stops every agent at once, with an MCP twin so it can be hit from a script as well as a screen. Whoever owns that switch is a decision to make at setup rather than discover in an incident.

Name the owner of the kill switch on day one

Write the person's name next to the switch in your runbook. When an agent misbehaves at 7pm, the team shouldn't be working out who is allowed to stop it.

How to adopt this without SalesCrew

Take the three columns and apply them to whatever automation you run. Write out every action your system can take, sort each into auto, review or human-only, and be honest about which ones a customer sees. If your human-only list is empty, look again at anything that spends money.

Then add the part people skip: a record of what happened. Every tool call in SalesCrew is written to the audit log with the actor named as a user, a token or an agent. Without that, a policy table is a statement of intent rather than something you can check after the fact.

The written policy, ready to paste

The table tells a tool what to do. Your team also needs the rule in words, so here is the policy as a short document. Change the names and the numbers, then keep it next to your sales playbook.

  1. Scope. This policy covers every AI agent that reads or writes our CRM, our inboxes or our outreach tools.
  2. Default mode. A new agent starts in draft. It moves to review after a named person has read its first 20 drafts.
  3. External sends. Any email, LinkedIn message, SMS or proposal a prospect or client will see waits in the approval queue until a person approves it.
  4. Internal work. Research, enrichment, tagging, logging, scoring, summaries and reply labels run without approval, and every one is logged.
  5. Pipeline changes. Stage changes, merges and deletes need approval. New deals and booked meetings need approval for the first clean week, then run on their own.
  6. Money. No agent spends money or acts outside the CRM, in any mode.
  7. Rejections. Every rejection carries a one-line reason, so the agent can learn from it on its next run.
  8. Stop. One named owner holds the kill switch, and their name sits at the top of this policy. Anyone who sees an agent misbehave tells them at once, and they stop every agent first and ask questions after.
  9. Review. Once a month, the owner reads the audit log and decides whether any action class moves between review and auto.

Start with everything in review

The seeded state on a new instance, and the only sensible first week.

An admin approves every new account by hand. Nothing is created until then. We reply by email; no newsletter, no sequence.

Want to see it first? Book a demo