"How long will this take?" is the first question every buyer asks and the one most vendors answer badly. The honest answer is that it depends on which of four very different things you are actually building. A single-task agent and an enterprise rollout share a name and almost nothing else. This guide gives realistic timelines for each tier and, more usefully, names the phases that quietly consume the calendar.
It sits alongside the platform evaluation framework and the migration plan. Use it to set expectations before you commit a date to anyone.
Why timelines vary so much
The reason two "AI agent projects" can differ by a factor of fifty is that the agent's reasoning is almost never the slow part. What varies is everything around it: how many systems it touches, how sensitive those systems are, how much your data needs cleaning before the agent can use it, and how many people have to trust the agent before it is allowed to act. A task that touches one account with read-only access and low stakes deploys in minutes. A task that touches production payments across three teams deploys in months, and the extra time is review and adoption, not engineering.
So the right way to estimate is not "how smart does the agent need to be" but "how deep does it reach, and who has to sign off." The four tiers below are organized by exactly that.
Tier 1: single-task agent (minutes to a day)
This is one agent doing one well-defined job: triage an inbox, summarize a meeting, watch a price, reformat and route a form response. On a marketplace where the agent already exists, the implementation is describe the outcome, connect the accounts, run it, which is the 60-second case. If you are configuring rather than building, give it an hour to set guardrails and test on real inputs.
Tier 1 is where most teams should start regardless of their eventual ambitions. It proves the platform on something low-stakes and gives you a real artifact to show stakeholders before you ask anyone to fund the larger effort. The deployment models guide covers when a hosted single-task agent is enough versus when you need something more controlled.
Tier 2: integrated workflow agent (one to two weeks)
Now the agent connects two or three business systems and takes real actions in them: read a CRM, decide, update a record, send a follow-up. The build itself is still fast. The week or two goes to connecting and authenticating the integrations properly, setting the guardrails that bound what the agent can change, and running a short shadow period so you trust it before it acts. If the integrations are already supported as native connectors, you are at the short end of the range; if any require custom work, the integration patterns determine how much longer.
Tier 3: multi-system agent (three to eight weeks)
Tier 3 spans several systems, handles branching logic, and usually carries enough blast radius that a mistake matters. This is where a formal pilot belongs. You scope the agent to one team or one segment, run it on real work for a couple of weeks, measure against a baseline, and fix what the pilot exposes before widening. The pilot program guide walks through structuring that phase so it produces decision-grade evidence rather than a vague good feeling.
The variability in this tier comes almost entirely from data readiness and integration depth. If the systems are clean and well-documented, three weeks is achievable. If the agent depends on data that is inconsistent or scattered, the data preparation alone can take longer than everything else combined.
Tier 4: enterprise rollout (two to six months)
A genuine enterprise rollout puts agents in front of many users across multiple teams, often touching regulated or high-value processes. The engineering here is rarely the constraint. Security review, procurement, data-governance sign-off, and change management are, and each runs on a calendar you do not control. A SOC 2 review request, a data-residency confirmation, a legal pass on the vendor contract: any one can add weeks, and they tend to run in sequence unless you deliberately parallelize them.
The teams that land Tier 4 on schedule are the ones that started the non-engineering tracks early. They opened the security review while the pilot was still running and began the procurement conversation before the pilot finished. The build was never the long pole.
What actually eats the time
Across every tier above Tier 1, the same four phases consume the calendar, and none of them are "make the agent smarter."
- Integration access. Getting credentials, scopes, and API access provisioned by the teams that own each system.
- Security review. The deeper the access, the heavier the review. This is the most common cause of a deployment slipping a month.
- Data preparation. Agents are only as good as the data they read. Inconsistent or scattered data has to be cleaned first.
- Change management. People have to trust the agent and change how they work. Adoption routinely takes longer than the build.
When an estimate is wrong, it is almost always because someone counted the build and forgot these four. Name them up front and the date holds.
How to compress the timeline
You cannot rush a security review, but you can start it on day one instead of after the build. That single change saves more time than any engineering optimization. The rest of the compression playbook is the same idea applied everywhere: overlap phases that do not depend on each other.
- Pick a first use case with shallow integration depth, so the access and review tracks are short.
- Use existing connectors rather than custom builds wherever the use case allows.
- Run the pilot and the procurement conversation at the same time, not in sequence.
- Validate the platform on a Tier 1 agent first, so the bigger effort starts with the unknowns already removed. See the proof-of-concept checklist for how to structure that validation.
FAQ
- How long does it take to deploy an AI agent?
- It depends on complexity. A single-task agent can run in under a minute. An integrated workflow agent takes one to two weeks. A multi-system agent takes three to eight weeks. An enterprise rollout takes two to six months, mostly review and change management.
- Why do timelines vary so widely?
- The model is rarely the bottleneck. Integration access, security review, data preparation, and change management drive the timeline. A simple agent skips all four; an enterprise agent hits all four, governed by other teams' calendars.
- What is the fastest way to deploy an AI agent?
- Use a marketplace agent that already exists for your task. Describe the outcome, connect the accounts, and run it. The fast path trades customization for speed and fits most single-task jobs.
- What slows enterprise deployments most?
- Security review and change management, not the build. Granting production access triggers reviews on the security team's schedule, and getting people to trust the agent takes longer than building it.
- Should I run a pilot first?
- Yes for anything above a single-task agent. A scoped pilot validates the agent on real work and surfaces integration and trust issues before the wider rollout, where they cost more to fix.
- How do I compress the timeline?
- Start the security review on day one, pick a low-integration first use case, use existing connectors, and run the pilot and procurement in parallel. The savings come from overlapping phases, not rushing them.
Sources
- McKinsey, "The state of AI in 2025", 2025, mckinsey.com
- Deloitte, "State of Generative AI in the Enterprise", 2025, deloitte.com
- Gartner, "The IT sourcing and procurement leader's guide", 2024, gartner.com
- NIST, "AI Risk Management Framework", 2023, nist.gov
