Skip to content

Article · 8 min read · Sep 24, 2026

How to write an RFP for an AI implementation project

An RFP for an AI implementation project works when you need to compare several partners on the same basis, and works badly as a compliance formality that never asks whether a firm understands your workflow. This guide sets out what the RFP should contain, the questions worth putting to every bidder, and how to score what comes back using weighted criteria rather than gut feel. It also covers when a lighter conversation beats a formal RFP.

Tuaha JawaidCofounder and CEO

Key takeaways

  • An RFP earns its cost when you are comparing several firms for a project big enough to justify the process, not as a default for every purchase.
  • Nine sections, background, workflow, systems, constraints, what you want back, evaluation criteria, timeline, commercial format and submission instructions, cover what a partner needs to quote responsibly.
  • Group vendor questions so every firm answers in a structure you can score, then rate the answers as a team rather than after the most persuasive call.
  • Weight the criteria that matter for your project, score each vendor answer from no evidence to strong, and let the total drive the shortlist rather than which proposal reads best.
  • Run the process fairly: the same information to every bidder, a public question window, and a working session on real data before you decide.

A request for proposal earns its cost when you need to compare several AI implementation partners on the same basis, for a project large enough that a bad match is expensive. It earns nothing when it becomes a formality: twenty pages of boilerplate questions that every vendor answers the same way, while the one thing that predicts whether the engagement works, whether the firm understands your workflow before naming a technology, never gets asked directly. This piece sets out what to put in an AI RFP, the questions worth asking every bidder, and how to score what comes back.

When does an RFP help, and when is something lighter better?

An RFP is the right tool when you are comparing three or more firms for a project above your normal procurement threshold, when more than one internal stakeholder has to sign off, or when your organization needs a documented, defensible process. It is the wrong tool when you already trust one or two firms and want to move quickly, when the workflow is narrow enough that a scoped conversation covers it, or when you do not yet know enough about your own process to write firm requirements.

That last case is common, and worth naming plainly. If you cannot describe the workflow's steps, the systems it touches and where it breaks down today, an RFP will not close that gap, it will distribute it to every bidder, who will each guess differently and hand back proposals that cannot be compared. Write a requirements brief first, or hold a paid discovery conversation with one or two candidates, then write the RFP once you know what you are actually asking for.

The same discipline shows up in federal guidance. The U.S. General Services Administration's resource guide for generative AI acquisition recommends testing a solution in a sandbox or a limited environment before committing to a large scale purchase, and lists questions contracting officers should ask before signing off (GSA). The same logic applies at a smaller scale: a short paid pilot with your top two bidders often tells you more than either written proposal does.

SituationBetter approach
Comparing three or more firms for a project above your procurement thresholdA formal RFP
You already trust one or two firms and want a fast startA direct conversation and a paid discovery or audit
The workflow, systems or data involved are still unclearA requirements brief and a discovery call before any RFP
The engagement is small enough that a formal process adds more delay than valueA scoped proposal request from two or three firms, not a full RFP

What must an AI implementation RFP contain?

Nine sections cover what a partner needs to quote responsibly. Use this as a starting outline and drop what does not apply to your project.

  1. Background and the business problem. What is going wrong, for whom, how often, and what it costs today.
  2. The workflow in scope. The process end to end, including the exceptions, not only the steps that go smoothly.
  3. Systems and data. Every system the solution must read from or write to, such as your ERP, CRM or document store, and how current the data needs to be.
  4. Constraints. Security and compliance obligations, systems that cannot change, a date driven by a real external event.
  5. What you want back. The sections you expect in a response and the format, so proposals can be compared side by side rather than read as prose.
  6. Evaluation criteria and weights. What matters most and how much, decided and written down before anyone reads a proposal.
  7. Timeline. The real date behind the deadline, and how much time bidders get to ask questions.
  8. Commercial format. Build cost, running and usage costs, and support, requested as three separate figures rather than one number.
  9. Submission instructions. Where to send it, the question window, and who answers questions on your side.

Sections 1 through 4 cover close to the same ground as a software requirements brief, organized here for a competitive process rather than a single partner conversation. If a brief already exists for this project, most of the RFP is assembling decisions you have already made rather than writing new ones.

What questions should you ask vendors?

Group your questions so every vendor answers in a structure you can score, rather than repeating the same idea under five different headings.

GroupAskWhy it matters
ScopingHow will you understand our workflow before proposing a solutionShows whether the proposal fits your process or a template
EvidenceCan you describe a comparable engagement in detail and give us a referenceSeparates a track record from a sales narrative
Data and securityWhere is our data processed and stored, and is it used to train any modelDetermines what your security team must review
IntegrationHow will you confirm our systems and data can support this before committing to a dateSurfaces licensing and access problems before a contract
Human controlWhere exactly does a named person approve or review output before it takes effectShows whether consequential decisions stay with people
TestingHow will you test this against our real cases before it goes liveThe most reliable predictor of what actually ships
CommercialWhat is included in the build price, and what will this cost to run each monthPrevents a headline number that hides the real cost
Ownership and supportWho owns the code and accounts, and what happens after launchDetermines your position if the relationship ends

Ask two or three specific questions inside each row rather than one broad one, so a vendor cannot answer in a sentence. These eight groups mirror the ten questions and the red flags set out in how to choose an AI implementation partner, which is worth reading before you finalize your list, because it also shows what a good answer to each one sounds like.

How do you score responses with weighted criteria?

Send every vendor the same questions in writing, with the same deadline, then score the answers as a group rather than deciding alone after the most persuasive call. A simple method: give each category a weight from 1 to 3 based on how much it matters for this project, rate each answer from 0, no evidence, to 3, strong and specific evidence, multiply weight by rating, and add up. The highest weighted total is not automatically the right choice, but the exercise forces the comparison onto evidence instead of memory of who presented best.

The AI implementation partner scorecard runs this method for up to three vendors against ten criteria drawn from the questions above. Set your own weights, rate each vendor as answers come in, and it ranks them, flags any high weight criterion where a vendor offered no evidence, and lists the follow up questions worth asking before you decide. Our AI vendor due diligence checklist covers similar ground as a set of statements to tick off against a specific proposal, useful for whoever on your team is not sitting in every vendor call.

What are the red flags in vendor responses?

  • Every vendor answer arrives at the same platform, no matter what you actually asked.
  • A fixed price offered before anyone has seen your data, your systems or a sample document.
  • A case study with no year, no company size and no reference you can call.
  • Data handling described in marketing language, such as bank level security, rather than the terms of a named provider.
  • Silence on what happens after launch, or an assumption that hosting includes support and monitoring.
  • A refusal to separate the build price from what the system will cost to run each month.
  • Urgency created by the vendor rather than by anything in your business.

How do you run the process fairly?

Four habits keep an RFP honest. Send the same information to every bidder, in writing, at the same time. Open a defined question window, and publish every question and its answer to all bidders at once, so nobody works from a private advantage. Take the responses down to a short list of two or three, then hold a working session with each, using one real batch of documents or requests rather than a rehearsed demo. Only then take reference calls, prepared with specific questions about what went wrong on a past project and how it was handled.

Illustrative example: Consider a 120 person distributor sending an RFP to four firms for a document processing project. The procurement lead sends all four the same nine section RFP and a two week deadline, publishes every question and answer from the window to all four at once, and asks each of the two finalists to spend half a day working through a real batch of invoices with the operations team. One firm treats the session as a demo of its platform. The other asks to see the invoices with handwriting on them and asks what the current error rate is before touching a keyboard. That difference, more than anything in either written proposal, decides the shortlist.

Read the contract before you sign for the details that are awkward to raise later: ownership of code and data, what happens to accounts at the end, notice periods, and whether any part of the arrangement requires exclusive use of one provider.

How Kastling approaches an RFP for AI work

Kastling is an AI solutions and implementation partner, and a well structured RFP is a reasonable way to reach us. Sent a fixed brief, we would rather spend an hour on a call first understanding the workflow behind the document than return a proposal built only from what is written down, and we would say so in our response. Engagements otherwise start with a free discovery call, and for AI and operations work a separately scoped, paid audit is common next. The background, workflow, systems and constraints sections in this guide are close to what that audit would establish anyway, so a well written RFP tends to shorten the scoping conversation rather than replace it.

We expect to answer the same kind of questions as any other firm on your list: where a human stays in control, how the work would be tested against your own cases, and who owns the code and accounts once the engagement ends. Read more about AI Integration & Automation.

AI implementation partner scorecard

Score up to three partners against the criteria that matter for your project and see a ranked comparison with the gaps to probe before you sign.

Open the tool

AI vendor due diligence checklist

A due diligence checklist for evaluating an AI implementation partner or AI software vendor, covering scope, evidence, data handling, security, integration, oversight, commercial terms and support before you sign.

Questions

How long should an AI implementation RFP be?

Long enough to give every bidder the same specific picture of the workflow, systems and constraints, and no longer. Most run four to eight pages once the boilerplate is removed. A vendor that needs forty pages of instructions to understand your process is unlikely to handle the exceptions any better once the contract is signed.

Should we ask for a fixed price in the RFP?

Ask for a pricing structure and a range, not a fixed number, unless the scope is genuinely narrow and well understood. A credible partner prices AI work after seeing your data and systems, and a firm number returned before that review is either padded to cover the unknowns or a guess that will move once real scoping begins.

How many vendors should we send an RFP to?

Three to five is usually enough to get a genuine comparison without turning evaluation into its own project. Fewer than three and you have no real benchmark, and more than five makes reference calls and working sessions difficult to run properly for every firm.

What if only one vendor responds well?

Treat that as useful information rather than a problem to fix. A single strong response, checked with references and a working session on real data, is a legitimate way to proceed, and is more honest than padding a shortlist with firms you would not actually hire.

Do we need a lawyer to write the RFP itself?

Not usually. The RFP is a business document that states the problem and what you want back, and legal review matters once you move to a contract, where ownership, data handling and liability terms need to be checked properly. Involve legal earlier only if internal procurement policy requires it above a certain value.

Sources

  1. GSA: GSA releases generative AI acquisition resource guide for federal buyers

Guide · 14 min read

AI workflow automation: a practical guide for operations teamsAI workflow automation puts AI models inside a defined business process to read, classify and prepare work, while fixed rules, integrations and named people handle the steps that must be predictable. It suits repetitive, document-heavy or request-heavy work such as intake, routing, document checks and approvals. Start with one measurable workflow, keep consequential approvals with an accountable person, and expand only once the numbers show it works.Read

Guide · 10 min read

AI agents with human approval: how to keep a person in controlAI agents with human approval means deciding in advance which actions a person must see before they happen, and how much of the work still reaches them. Money, legal terms, customer messages and irreversible changes need a person by default, while routine, reversible work can run on sampled review instead. Get the design wrong and you either slow the agent to a crawl or approve items nobody actually checked.Read

Article · 9 min read

AI document processing for invoices, contracts and formsAI document processing combines three techniques: OCR to turn images into text, layout models to understand where values sit on a page, and language models to extract and interpret fields that vary between documents. The technique matters less than what surrounds it: validation rules that check extracted values against your own records, confidence thresholds that decide what a person sees, and a review queue somebody owns. Measure field level accuracy and the share of documents that pass without a human touch, not a single headline accuracy number.Read

One useful email a month.

New guides, tools and practical notes on putting AI to work. No sales sequences.

Bring us a workflow.

Tell us where the work slows down. We will help you see where to start.

Request a discovery call