The word agent has worn out fast. Any chat window with a model behind it is presented as an agent, and buyers no longer know whether they are being offered an assistant that drafts emails or a system that does work. The difference is enormous, and it is best explained with a concrete example: collections.
A chatbot answers; an agent has a job
A chatbot waits for a question. You ask how much a customer owes and it tells you, if it has access to the data. Then it sits still until the next question. It has no task, no calendar, no judgment about what to do with what it knows.
An agent has an assigned job, a scope and a limit of authority. XEN's collection agent has the job of getting invoices paid on time. Every day it reviews the receivables, decides which actions apply and executes them or leaves them prepared, according to what the company allowed. It does not wait to be asked.
One day of the collection agent
First thing in the morning, the agent reads the receivables: which invoices fall due today, which fell due yesterday, which are past thirty days, which customers have a recorded payment commitment. It crosses that with what it knows from the company brain: each customer's payment history, the payments that came in overnight, pending credit notes, the terms agreed with each one.
With that picture, it works. A customer who always pays five days late and falls due today does not get a message yet: it would be noise. One who falls due tomorrow and is never late gets the gentle reminder the company approved as a template. One who is forty days past due and ignored two reminders gets a call proposal prepared for the assigned salesperson, with the debt summary and the invoices involved. One who paid overnight gets the follow up closed and a thank you.
What it decides alone
The agent executes without asking whatever is verifiable, reversible routine: sending a reminder with the approved template, applying a payment that came in with the right reference to the matching invoice, closing a follow up when the balance reached zero, recording that a customer asked for a copy of the receipt and sending it. These are actions a person would do the same way, and they change no commercial relationship.
What it leaves waiting for approval
Anything that commits money, relationship or reputation is prepared and stopped. Proposing an installment plan, marking an invoice as uncollectible, blocking shipments to a delinquent customer, escalating a debt to an external collector, changing a customer's payment terms. The agent builds the proposal with the data and the reason, and waits. The person approves it, edits it or discards it. None of this happens without a human signature.
An agent's authority is measured by what it cannot do. An agent without limits is not more powerful: it is more dangerous.
What it never decides
Some decisions are delegated to no agent: forgiving a debt, starting legal action, negotiating a discount outside policy, dealing with a customer who filed a formal complaint. The agent can gather the information and put it on the table, but the decision and the conversation belong to a person. This is not a technical limitation; it is a design decision, and each company adjusts the line.
How it is audited
Every action of the agent is recorded with the same traceability as if a person had done it: what it did, when, on which invoice, with which data and under which rule. If it sent a reminder, the template and the recipient are on record. If it proposed a block, the reason and who approved or rejected it are on record. And the agent operates with the permissions the company assigned to it, never more. If accounting cannot see another branch's receivables, that branch's collection agent cannot either.
What to ask a vendor who says they have agents
- Describe the agent's job in one sentence with a verb: collect on time, replenish stock, close the month.
- Show the list of what it does alone and the list of what waits for approval, and let the company move things from one to the other.
- Show the record of any action with its origin, its rule and its approver.
- Confirm that the agent inherits permissions and does not have an account with access to everything.
- Explain what happens when the agent gets it wrong and how it is undone.
If the answer to the first question is a chat window, you already have your answer.
