AI Agent Implementation Checklist: What to Organize Before You Turn On Automated Customer Service
October 27, 2026 · 8 min read

If you handle customers and still manage your calendar through WhatsApp, you know how fast messages pile up. An AI agent is usually simple to add to your daily customer service, and an AI agent implementation checklist helps you get the basics in order. What decides whether it answers well is what your business organizes before switching it on.
This post is a practical checklist, split into blocks you can print and tick off one by one. It was written with companies in Brazil in mind that need customer service and appointment scheduling without complicating their operations. Where a rule is specific to Brazil, we say so.
Why you need an AI agent implementation checklist before going live
Most vendor pages talk about integrations: “connects to your calendar,” “answers on WhatsApp.” Few talk about preparation, which is what makes the difference. Services, hours, cancellation rules, frequently asked questions and legal compliance all need to be clear before any automation starts.
That is why setup is easy when the homework is done. The six blocks below cover that homework, and the last section covers follow-up once the service is live.
Block 1: Your service list and what the AI can offer
Start with your catalog. It is the foundation of everything the agent will answer and book.
Name, duration and price of each service
Check off each item when it is ready:
- [ ] A clear service name, the way customers say it (not your internal name).
- [ ] Real duration, including the time your team actually spends.
- [ ] Price or price range.
- [ ] Prerequisites: preparation, documents, tests, parts, or whatever the customer should bring.
What the AI should not promise
Set the limit before a customer tests it. Special quotes, complaints, unusual cases and price exceptions should go to a person.
- [ ] A list of topics that always go to a human.
- [ ] Forbidden phrases, such as guaranteeing a result, a discount or a deadline you do not control.
Block 2: Real-world hours and calendar rules
“Integrates with Google Calendar” is not enough. The calendar details are what keep a customer from showing up to a closed door.
Time zone and holidays
The Google Calendar API requires the correct time zone in IANA format (for example, America/Sao_Paulo) and uses recurrence rules (RRULE/EXDATE) to handle exceptions such as holidays and blocked time, according to Google's documentation. In practice, that means checking a few things:
- [ ] Time zone set correctly in the calendar.
- [ ] This year's holidays entered as exceptions.
- [ ] Blocked time (vacations, meetings, maintenance) entered in the calendar, not just agreed on verbally.
Buffers and minimum notice
Tools like Calendly let you set buffer time before and after each appointment, plus a minimum scheduling notice. These settings change which time slots customers are offered.
- [ ] Business hours per service and per professional.
- [ ] Gap between appointments (cleaning, travel, setup).
- [ ] Cutoff window: how many hours ahead a customer can book.
Block 3: Business rules (cancellations, rescheduling and no-shows)
Here you write objective rules, in sentences the AI can repeat without interpreting them.
Cancellation and rescheduling policy
- [ ] Deadline to cancel or reschedule at no cost.
- [ ] Whether there is a fee, and in which cases.
- [ ] Waitlist: how it works and who is contacted first.
- [ ] How many times a customer can reschedule.
Confirmations and reminders
No-shows are costly for anyone who lives by a calendar. A study published in the Revista Brasileira de Medicina de Família e Comunidade (2018), covering 3,131 appointments in Pelotas, in Brazil's Rio Grande do Sul state, found 19.2% absenteeism in primary care (95% CI 17.7–20.8%). It is a public health figure with a source, and it works only as a reference. Your number may be very different.
So measure your own rate before you turn the agent on, and keep tracking it afterward.
- [ ] Your no-show rate over the past few months.
- [ ] Confirmation message and reminder timing defined.
- [ ] An easy way for customers to reschedule when they reply to the reminder.
Right of withdrawal for distance sales (Brazil)
If you sell services online or by phone in Brazil, Article 49 of the Consumer Defense Code (CDC) gives customers 7 days to withdraw from contracts made outside your premises, with immediate refund of amounts paid, adjusted for inflation. The agent needs to know this rule so it does not answer “no refunds” where the law says otherwise.
- [ ] Written withdrawal policy for distance sales.
- [ ] A clear instruction on when to hand the request to a person.
Block 4: Frequently asked questions and approved answers
How to collect your customers' real questions
Don't invent the questions: collect them. Look through your WhatsApp history, note what people ask by phone, and ask your front desk for the list of what repeats most. Gather 20 to 30 questions and write an approved answer for each one.
- [ ] Address and directions.
- [ ] Parking.
- [ ] Payment methods and installments.
- [ ] Accepted insurance plans, if any.
- [ ] Preparation for each service.
- [ ] Business hours and an emergency contact.
When the AI should hand off to a human
Define handoff triggers: an upset customer, a request outside your catalog, a complaint, a billing question, or an explicit request to talk to a person.
- [ ] Handoff triggers written down.
- [ ] The person or team who receives the handoff, with set hours.
- [ ] An alternative contact (phone or email) given to the customer.
Want an assistant that answers and books on its own? Create yours in minutes
Block 5: WhatsApp — the 24-hour window, templates and consent
What can be sent outside the 24-hour window
Under the WhatsApp Business policy, a business can only start a conversation with an approved message template. It can reply freely for up to 24 hours after the customer's last message. After that, only approved templates.
- [ ] Approved appointment confirmation template.
- [ ] Approved reminder template.
- [ ] Approved rescheduling or follow-up request template.
Opt-in and opt-out
The same policy requires valid opt-in and that the business respect a user's request to stop receiving messages. It also asks for up-to-date support information and a public privacy policy.
- [ ] Consent record: when and how the customer agreed to receive messages.
- [ ] A clear exit word (“type STOP”) and a process to honor it.
- [ ] Published privacy policy and up-to-date support contact.
Block 6: Brazilian customer service (SAC) rules and LGPD that affect the agent
Important notice: confirm with your legal counsel or accountant whether your company is subject to Brazil's SAC decree. The list below shows what the decree provides, but how it applies to your case needs validation.
Human support from 8 a.m. to 8 p.m. and cancellation at any level
Decree No. 13,135/2026, dated October 9, 2026, revoked Decree 11,034/2022. It allows automated service, including by AI, as long as there is an option for real-time service by a human being. For electronic channels, the SAC must operate 24 hours a day, 7 days a week, with a human available from 8 a.m. to 8 p.m., every day.
Electronic channels must offer, at any level, an immediate cancellation option and a human support option during that period. The Ministry of Justice says Senacon can inspect and sanction those who fail to comply.
- [ ] Staff schedule for human support from 8 a.m. to 8 p.m.
- [ ] Option to talk to a human reachable at any point in the conversation.
- [ ] Immediate cancellation option reachable at any point in the conversation.
Keeping history and conversations
The decree provides that the history of each request be sent to the consumer, when asked, within 5 business days, and kept for at least 6 months after resolution. The content of voice or text messages must be stored for at least 90 days.
- [ ] A secure place where conversations are stored.
- [ ] Retention period defined (at least 90 days for messages and 6 months for the request history).
- [ ] A person responsible for sending the history to the customer within 5 business days.
Personal data, impact reports and incidents
A practical starting point is to list the data the AI collects and the reason for each item. The ANPD, Brazil's data protection authority, has an information security guide for small-scale processing agents, with measures under Articles 46 to 49 of the law, which you should follow.
The ANPD also indicates that a Data Protection Impact Report (RIPD) should be prepared when the authority requires it or when the processing could pose a high risk to data subjects. If there is a security incident, the controller must notify the ANPD and the data subjects within 3 business days, under ANPD Resolution CD/ANPD No. 15/2024.
- [ ] List of the data the AI collects and the reason for each item.
- [ ] Minimum security controls following the ANPD guide.
- [ ] Assessment of whether an RIPD is needed.
- [ ] Incident response plan, with an owner and a 3-business-day deadline.
If you also serve customers outside Brazil, check which local rules apply there too.
After go-live: a weekly follow-up routine
The most common mistake is switching it on and forgetting about it. The agent works best when someone keeps an eye on it, especially in the first few weeks.
A simple routine of 30 to 60 minutes a week already helps:
- Read a sample of the week's conversations.
- Review every handoff to a human and understand why it happened.
- Update the FAQ and the rules gradually, without changing everything at once.
- Track your no-show rate and the number of bookings, comparing them with what you measured before.
Short checklist to print
Services
- [ ] Name, duration, price and prerequisites for each service
- [ ] List of what the AI does not promise
Calendar
- [ ] IANA time zone and holidays entered
- [ ] Buffers, minimum notice and cutoff window
Business rules
- [ ] Cancellation, rescheduling and waitlist
- [ ] Confirmations and reminders
- [ ] Right of withdrawal for distance sales
Frequently asked questions
- [ ] 20 to 30 approved answers
- [ ] Handoff triggers to a human
- [ ] Approved templates
- [ ] Opt-in recorded and clear opt-out
SAC and LGPD
- [ ] Human from 8 a.m. to 8 p.m. and cancellation at any level
- [ ] Conversation and history retention
- [ ] Security, RIPD and incident plan
Routine
- [ ] Weekly review of conversations and handoffs
Once this list is done, turning on automated customer service stops being a leap in the dark and becomes a routine step.
Next step
Once your services, calendar and rules are organized, all that is left is to put your agent to work. Try it with the material you just prepared. Create your AI agent in minutes.
Frequently asked questions
Is it mandatory to offer human support if I use AI in SAC?
Yes. Decree No. 13,135/2026 allows automated service including AI, but electronic SAC channels must offer real-time human support from 8 a.m. to 8 p.m. every day and provide an immediate cancellation option at any point in the conversation.
What can I send outside WhatsApp's 24-hour window?
Outside the 24-hour window you may only send approved message templates (model messages). Free-form replies are allowed only within 24 hours of the customer's last message.
Does Meta charge for replies within the 24-hour window?
Some WhatsApp providers report that, since Oct 1, 2026, platforms apply charges for free-form replies after a free monthly quota. Check current terms with your WhatsApp provider or vendor for exact pricing and quotas.
How long must I keep the agent's conversations?
Under the SAC decree and guidance, retain voice or text message content for at least 90 days and keep the history of each consumer request for at least 6 months after resolution; provide the history to the consumer within 5 business days if requested.
What is the deadline to report a chat data breach?
If a security incident affects personal data, the controller must notify the ANPD and the data subjects within 3 business days, per ANPD Resolution CD/ANPD No. 15/2024.
How can I avoid double bookings with the AI?
Use a single calendar as the source of truth, set the correct IANA time zone, register holidays and exceptions in the calendar, define buffers between appointments and a minimum scheduling notice to prevent overlapping slots.
Read next

LGPD AI Agent for Customer Service: A Practical Guide to Protecting Customer Data
A practical LGPD checklist for adding AI agents to WhatsApp customer service. Includes copyable message templates, launch steps and quick legal guidance for small Brazilian businesses.
October 30, 2026

Automated Appointment Rescheduling on WhatsApp: The Rules to Set Before You Turn On Your AI Agent
A practical guide for small businesses to set the policies an AI agent needs before you automate appointment rescheduling on WhatsApp. Learn notice windows, limits, waitlists, and a short setup checklist.
October 30, 2026

Is an AI Agent for Small Business Worth It? Real Costs, Results, and When Not to Buy
Learn when an AI agent for small business is worth it: real cost ranges, measurable results, and a simple readiness checklist to start in minutes.
October 28, 2026