AI approval policy template for sales
Sixteen agent actions, each set to auto, review or human-only. This is the table SalesCrew seeds on every new instance, published in full to copy.
Want to see it first? Book a demo
- Published in full
- No email required
- Four modes explained

The short answer
- An AI approval policy for sales decides, per action, whether an AI agent acts alone, waits for a person, or never acts. SalesCrew gives every agent four modes: off, draft (writes the artefact and does nothing with it), review (queues it for a person), and auto (executes and logs, falling back to review below a confidence threshold).
- No agent starts in auto. The Inbox agent ships off, and every external send (email, LinkedIn, SMS, marketplace proposal) defaults to review, so a person approves it in one queue before it goes.
- One line never moves: anything that spends money, and anything outside the CRM, is human-only in every mode. An agent that can move a budget is a bad design regardless of how good the model is.
Why this exists
A single on-off toggle for AI forces one decision to cover a hundred different risks. Logging a call and sending an email to a customer are not the same kind of action, and they shouldn't share a switch.
A policy table splits them by class. Low-stakes, reversible, internal work runs on its own. Anything a customer sees waits. Anything that spends money never runs. That structure is worth copying whether or not you use SalesCrew, so the table is published rather than described.
The four agent modes
Set per agent in SalesCrew under Agents, or over MCP with agent_set_mode.
| Mode | What the agent does | What a person does |
|---|---|---|
| off | Nothing. The agent does not run | All of the work, by hand, exactly as before |
| draft | Writes the artefact (a reply, a proposal, a note) and stops there | Reads the draft and decides whether to use it |
| review | Writes the artefact and puts it in the approval queue | Approves, edits then approves, or rejects with a reason |
| auto | Carries the action out and logs it; drops back to review below the confidence threshold | Reads the audit log and the queue for anything the threshold caught |
Modes as SalesCrew runs them, September 2026. The Inbox agent is seeded off and sweeps the inbox every 15 minutes once you switch it on.
The policy table, as seeded
Editable per instance under Agents, Guardrails. These are the starting values.
| Action class | Default | Why |
|---|---|---|
| Research, enrichment, tagging | auto | Reversible, internal, and wrong answers are visible in the record rather than in a customer's inbox |
| Logging, scoring, summaries | auto | Nothing leaves the building and everything is overwritable |
| Internal tasks and suggested contacts | auto | The cost of a bad suggestion is a person ignoring it |
| Classify a reply | auto | A label is a filter for attention, not a decision |
| Pause a cadence on reply | auto | The failure mode of not doing this is worse than the failure mode of doing it wrongly |
| Suppress on unsubscribe or bounce | auto | Delay here creates a compliance problem, so it should never wait in a queue |
| Any external email send | review | A customer sees it. That is the whole test |
| Any LinkedIn message | review | Same test, and the platform account is at stake as well |
| Any SMS or WhatsApp message | review | Same test, plus consent obligations that belong to you |
| Any marketplace proposal | review | A proposal is a commitment in the buyer's eyes |
| Create a deal from a positive reply | review, then auto after a clean week | Cheap to reverse, but a wrong deal distorts the forecast until someone notices |
| Book a meeting | review, then auto after a clean week | It occupies a real person's calendar |
| Change a deal stage | review | The forecast is a number people act on |
| Merge or delete a contact | review | Destructive and awkward to undo |
| Spend money: credits, connects, ads | human only | No mode changes this. Not now and not later |
| Anything outside the CRM | human only | If the product cannot audit it, an agent should not do it |
Seeded defaults on a new SalesCrew instance, September 2026. Every row is editable, and the last two are refused rather than merely defaulted.
How the approval queue works
An AI approval queue is one list where every action waiting on a person sits until someone approves it. In SalesCrew the queue is grouped by agent. Each item shows the draft itself, the evidence behind it (the thread, the score, the knowledge-base sources it used), the model's confidence and what the run cost.
You have three buttons: Approve, Edit-then-approve and Reject. A rejection asks for a reason, and that reason feeds the agent's next run, so the same mistake doesn't come back tomorrow. The same queue is reachable over MCP through approval_list, approval_approve and approval_reject, so a reviewer working in Claude or ChatGPT clears the same items you'd see on screen.
Set up human approval for AI-written sales emails
The order we'd follow on a new SalesCrew instance.
- 1
Leave the send rows on review
Open Agents, then Guardrails. Check that every external send row reads review before you switch any agent on.
- 2
Switch one agent to draft
Start with the Inbox agent. It sweeps your inbox every 15 minutes and writes reply drafts without queuing or sending anything.
- 3
Move it to review
Once the drafts read well, set the mode to review. Each draft now lands in the approval queue with its evidence attached.
- 4
Clear the queue daily
Approve, edit or reject every item. Give a reason on each rejection, because the agent reads it on its next run.
- 5
Promote classes, not agents
After a clean week, let deal creation and meeting booking move to auto. External sends stay on review until you decide otherwise.
The guardrails that run underneath
Mode is only half of it. Guardrails apply regardless of what mode an agent is in: at least three days between touches per contact, a per-cadence cap, per-mailbox and per-domain daily caps, a business-hours send window, suppression re-checked at send time, and a confidence threshold that drops an action back into review when the model is unsure.
Above all of it sits the kill switch: one control on the Agents page that stops every agent at once, with an MCP twin so it can be hit from a script as well as a screen. Whoever owns that switch is a decision to make at setup rather than discover in an incident.
Name the owner of the kill switch on day one
How to adopt this without SalesCrew
Take the three columns and apply them to whatever automation you run. Write out every action your system can take, sort each into auto, review or human-only, and be honest about which ones a customer sees. If your human-only list is empty, look again at anything that spends money.
Then add the part people skip: a record of what happened. Every tool call in SalesCrew is written to the audit log with the actor named as a user, a token or an agent. Without that, a policy table is a statement of intent rather than something you can check after the fact.
The written policy, ready to paste
The table tells a tool what to do. Your team also needs the rule in words, so here is the policy as a short document. Change the names and the numbers, then keep it next to your sales playbook.
- Scope. This policy covers every AI agent that reads or writes our CRM, our inboxes or our outreach tools.
- Default mode. A new agent starts in draft. It moves to review after a named person has read its first 20 drafts.
- External sends. Any email, LinkedIn message, SMS or proposal a prospect or client will see waits in the approval queue until a person approves it.
- Internal work. Research, enrichment, tagging, logging, scoring, summaries and reply labels run without approval, and every one is logged.
- Pipeline changes. Stage changes, merges and deletes need approval. New deals and booked meetings need approval for the first clean week, then run on their own.
- Money. No agent spends money or acts outside the CRM, in any mode.
- Rejections. Every rejection carries a one-line reason, so the agent can learn from it on its next run.
- Stop. One named owner holds the kill switch, and their name sits at the top of this policy. Anyone who sees an agent misbehave tells them at once, and they stop every agent first and ask questions after.
- Review. Once a month, the owner reads the audit log and decides whether any action class moves between review and auto.
Related
- AI agents and the approval queue
- Running agents with a human approving every send
- What should an AI agent never do alone
- How to set guardrails for sales AI
- When to move an agent from review to auto
- What is an agent mode?
- What is an approval queue?
- Why agents should start in review mode
- Claude skills for sales teams
- Reply-handling templates
- How to stop AI sending emails on its own
- Set up agents in review mode
- All templates
- Pricing
Start with everything in review
The seeded state on a new instance, and the only sensible first week.
Want to see it first? Book a demo