Course
Give your AI a permanent memory of your business. A course for people who use ChatGPT or Claude daily.Compound Context

Job

Can an AI agent read your documents and pull out the data?

Researched November 2026

Can an agent do this job today?

Supervised

Agents process documents in production at more than one organization. AWS reports that Built Technologies, a real estate finance software provider, runs a generative AI pipeline that classifies, splits and extracts data from commercial construction loan draw packages, with results below its required threshold (over 95 percent confidence) routed to human reviewers. Microsoft reports that Direct Pojišťovna, a Czech insurer, uses an agent-based system on Azure to read and validate windshield claims, with 60% of them fully automated and 'a human always in the loop'. Both accounts come from the vendors. Microsoft's own documentation says that where accuracy is critical, confidence can be used to accept a prediction automatically or flag it for human review. Because extracted data can feed a payment, a filing or a customer record, our recommendation is that low-confidence results and the decisions that act on the data stay with a person, so the level is supervised, not ready.

Abstract illustration of blank pages passing through a green scanning plane and splitting into streams of blocks that fill coloured bins
On this page

Can an AI agent do document processing?

Yes, with a person on the uncertain cases. An AI agent for document processing can take files from an inbox or folder, read every page, work out what each document is, split bundled PDFs, extract the fields you define and check them against your rules. Organizations run this in production today. AWS reports that Built Technologies, a real estate finance software provider, processes commercial construction loan draw packages this way, cutting classification and extraction work that took 3–9 days to minutes per package. Microsoft reports that Direct Pojišťovna, a Czech insurer, cut windshield claim handling from 15 minutes to about 2 and fully automated 60% of those claims. Both figures come from the vendors.

Both keep people involved, in different ways. Built gives each field a confidence score and routes results below its required threshold (over 95 percent confidence) to reviewers. Microsoft's story says Direct's system was built "with a human always in the loop", and Direct's head of IT calls human-in-the-loop essential; the same story says 60% of windshield claims were fully automated and that uncomplicated claims are paid out inside the AI-supported process. Our recommendation is to treat this as a supervised hire: the agent does the reading and keying, and a person checks what the agent is unsure about and owns any decision made on the data.

This page covers documents in general: forms, claims, contracts, certificates, applications. For supplier invoices see accounts payable, and for typing data that is not on a document, see data entry.

What the agent does and what stays with you

Agent

3of 9

  • Collect incoming documents from an inbox, upload folder or portal
  • Read the text, tables and handwriting on each page (OCR)
  • Hand the structured data to the downstream system

Agent with review

4of 9

  • Classify each document and split bundled PDFs into separate documents
  • Extract the fields you defined into structured data
  • Check extracted data against business rules or other records
  • Draft the extraction schema for a new document type

Human

2of 9

  • Correct low-confidence fields and keep the test set up to date
  • Act on the data (approve, pay, file, reply to a customer)

9 tasks: 3 agent, 4 agent with review, 2 human

TaskWho does itWhy
Collect incoming documents from an inbox, upload folder or portalAgentIn the Built pipeline an upload to storage starts processing on its own, and a count of files in against files out is easy to check.
Read the text, tables and handwriting on each page (OCR)AgentDirect Pojišťovna reports 100% precision in its own OCR test, and Microsoft's service returns a confidence score per word that lets you sample the weak ones.
Classify each document and split bundled PDFs into separate documentsAgent with reviewBuilt's pipeline maps page ranges to document types, and reviewers correct classifications when a document is sent to review.
Extract the fields you defined into structured dataAgent with reviewBuilt routes fields below its confidence threshold to reviewers; where accuracy is critical, Microsoft says confidence can be used to accept a prediction automatically or flag it for human review.
Check extracted data against business rules or other recordsAgent with reviewBuilt's rule-validation step returns compliant, non-compliant or insufficient evidence with citations to the source sections for a person to check.
Draft the extraction schema for a new document typeAgent with reviewIn Built's setup the model proposes fields from sample documents and subject matter experts refine the schema before it is used.
Correct low-confidence fields and keep the test set up to dateHumanReviewers fix flagged values, and in Built's setup those corrections feed the evaluation datasets used to test the next change.
Hand the structured data to the downstream systemAgentWriting validated output to a defined location or system is mechanical and can be reconciled by count.
Act on the data (approve, pay, file, reply to a customer)HumanThis is our recommendation: decisions that commit money or speak for the company stay with a named person, even where a vendor's customer has automated part of them.

The split follows one rule: the agent does work a reviewer can check against the page, and a person does work that changes what the company does next. Collecting, reading and handing over data can be checked by counts and samples, so they go to the agent. Classification, extraction and rule checks carry a confidence score, and anything below your threshold gets a human look. Deciding what to do with the data stays human.

The confidence score is the control that makes this work. Microsoft's documentation describes a field confidence of 0.95 as a prediction likely to be correct 19 times out of 20, and says confidence can be used to decide whether to accept a value automatically or flag it for review. Microsoft also notes that not every field returns a confidence score, so ask any vendor which fields have one.

A worked example: one certificate of insurance

Assume, for this example, that a property manager receives certificates of insurance from contractors and must confirm each one names the company as additional insured with at least $1,000,000 in general liability cover.

A contractor emails a 4-page PDF that holds a cover letter, the certificate and an endorsement. The agent picks it up from the intake mailbox, reads the pages and splits the file into three documents. It extracts the insured name, insurer, policy number, expiry date, liability limit and additional insured wording from the certificate. The limit reads $1,000,000 with high confidence. The expiry date is partly covered by a stamp, so its confidence falls below the threshold. The rule check passes on the limit but cannot confirm the expiry date.

The certificate lands on the review queue with the date field highlighted on the page image. A reviewer reads the date from the endorsement, corrects it and marks the document complete. The record goes to the vendor-compliance system. The agent sent nothing to the contractor and approved nothing; if the cover had been too low, the property manager would decide what to ask for.

What you need to provide

The agent touches whatever is in the documents, which often includes personal data (names, addresses, ID numbers) and financial data (amounts, account numbers). Give it the least access that gets the job done:

  • Read access to one intake mailbox, folder or portal, limited to the document types in scope.
  • Real examples of each document type, including bad scans. For custom models, Microsoft advises including every variation of a document in the training set, for example digital versus scanned PDFs, and adding at least five samples of each PDF type if the model must analyze both.
  • A written field list for each type: what to extract, in what format, and where it usually appears. Built's team found that a field description saying where a value appears and what it is called guides the model better than a field name alone.
  • Your business rules in plain language.
  • A labeled test set: 50–100 documents with the correct values filled in by the person who owns the process. This is the yardstick for the trial.
  • A user in the target system that can create records but cannot approve, pay or send.

Ask the provider where page images, extracted text and logs are stored, and for how long. Your own retention rules apply to every copy.

Job brief template

Use this as the brief for a vendor, an operator or an internal team setting up the agent. Replace the bracketed values with your own.

Copy-ready brief

Goal
Every document that arrives in the intake folder is classified, its agreed fields are extracted and validated, and the result is in the target system or on the review queue within one business day.
Deliverable
A structured record for each document (type, extracted fields, a confidence score per field and a link to the source page) in the target system, plus a daily review queue of documents with low-confidence fields or failed rules.
Inputs
  • Read access to the intake mailbox, folder or portal, limited to the document types in scope
  • A list of document types in scope, with 10–20 real examples of each, including scanned and poor-quality copies
  • For each type, the fields to extract, their format and where they usually appear
  • Business rules to check (required fields, totals that must add up, values to match against your records)
  • A user in the target system that can create or update records but cannot approve, pay or send
  • A labeled test set of 50–100 documents with the correct values, prepared by the person who owns the process
Acceptance criteria
  • On the labeled test set, document type is correct for at least 98 of 100 documents.
  • On the same set, required fields match the labeled values with at most 2 errors per 100 fields among results the agent did not flag.
  • Every field below the agreed confidence threshold, and every failed rule, appears on the review queue; none is written straight to the target system.
  • The daily count of documents received equals documents processed plus documents on the review queue.
  • Each extracted value links to the page it came from, so a reviewer can check it in one click.
Systems
  • document intake (shared mailbox, cloud storage folder or upload portal)
  • extraction service or document-processing platform (for example Amazon Textract, Azure Document Intelligence or Google Document AI)
  • target system of record (ERP, CRM, claims or case management system, or a database)
Constraints
  • Documents may contain personal data (names, addresses, ID numbers) and financial data; access is limited to the document types in scope.
  • Your retention and data-location rules apply to every copy the agent's provider stores, including page images and logs.
  • The agent's account cannot approve, pay, file or send messages outside the company.
  • New document types or schema changes are tested against the labeled set before they go live.
Volume
Example: 500–10,000 pages a month
Cadence
Example: continuous intake, with a daily review queue
Human checkpoints
  • Low-confidence fields and failed rules: a reviewer checks the value against the source page and corrects it.
  • New document type or schema change: the process owner approves the field list and the test results.
  • Any action on the data (payment, approval, filing, customer reply): the responsible person decides.
  • Weekly: the process owner samples 20–50 unflagged documents against the source.

Keep the labeled test set even after go-live. It is how you check every schema change, model change or new document type before it touches live data, which is how Built runs its own changes.

What it costs

Human benchmark

Data entry keyers

$41,340

per year (median annual wage)

BLS OEWS 2025 national median for SOC 43-9021, as published by O*NET OnLine ($19.88 an hour); wage only, no benefits or overhead

Source: 43-9021.00 - Data Entry Keyers

Agent price range

$0.015 to $0.03

per page (extraction service list price)

Amazon Textract Analyze Document with Queries: $0.015 per page for the first 1 million pages a month (US West, Oregon). Google Document AI Custom extractor: $30 per 1,000 pages for the first 1 million pages = $0.03 per page, plus $0.05 an hour to host a custom processor version ($438 a year per Google's example); Google prices pay as you go. Excludes model calls for reasoning or validation steps, review time, hosting of your own pipeline and integration work.

Sources: Amazon Textract pricing, Document AI pricing

The two figures use different units. Compare them at your own volume.

The human figure is the 2025 national median annual wage for data entry keyers (SOC 43-9021), $41,340 or $19.88 an hour, as published on O*NET OnLine from BLS data. It is wage only. The agent figures are list prices for two cloud extraction services, billed per page. Amazon Textract charges $0.015 per page for Analyze Document with Queries for the first 1 million pages a month in US West (Oregon). Google Document AI, priced pay as you go, charges $30 per 1,000 pages for its Custom extractor up to 1 million pages, or $0.03 per page, plus $0.05 an hour to host a custom processor version. Google also lists prebuilt parsers priced per document, such as $0.10 for an invoice of up to 10 pages.

These prices cover reading and extraction only. A full agent also pays for model calls in its classification, validation and reasoning steps, for running the pipeline and for building the integration. Packaged document-processing products may bundle those costs; their prices were not checked for this page. Reviewer time on flagged documents is a further cost outside both numbers, so measure it in your trial.

Risks and human checkpoints

  1. The agent extracts a wrong value with high confidence, so it is never flagged.

    How you notice it

    Sample unflagged documents every week against the source page; Microsoft notes that reported accuracy can be inconsistent when documents differ from the training set.

  2. A new layout or supplier format arrives and accuracy drops without anyone noticing.

    How you notice it

    Track the share of documents sent to review by type and source; a jump means the input has changed.

  3. A bundled PDF is split wrongly or a second form in one file is skipped.

    How you notice it

    Check page counts per output document on a sample; Google's pricing page states that when one input contains several eligible forms, its pretrained processors process only the first.

  4. Documents disappear between intake and output, for example failed or throttled requests.

    How you notice it

    Reconcile documents received against processed plus queued every day; Built's team reports resolving Textract throttling limits on large documents at high concurrency.

  5. Personal or sensitive data is copied into systems or logs where it should not be.

    How you notice it

    List every place page images, text and logs are stored before go-live, and review access to them each quarter.

Human checkpoints

  • Low-confidence fields and failed rules: a reviewer checks the value against the source page and corrects it.
  • New document type or schema change: the process owner approves the field list and the test results.
  • Any action on the data (payment, approval, filing, customer reply): the responsible person decides.
  • Weekly: the process owner samples 20–50 unflagged documents against the source.

The risk that matters most is the confident mistake. A flagged field gets a human look; a wrong value with a high score goes straight into your system. Microsoft notes that a document set can look similar to people but dissimilar to a model, and that reported accuracy can be inconsistent when analyzed documents differ from the training documents. A weekly sample of unflagged documents is the only way to see this.

The quieter risk is lost volume. Pipelines throttle, time out and skip files. Built's team reports having to resolve Amazon Textract throttling limits when processing large documents at high concurrency. A daily count of documents in against documents out and documents queued catches gaps before a customer or supplier does.

How to run a trial

Run the agent next to your current process for 3–4 weeks before you rely on it.

  1. Pick 2–3 document types with steady volume and a mix of clean and messy copies.
  2. Build the labeled test set first, and score the agent on it before it sees live documents.
  3. Set the agent's permissions to write only to a staging area or review queue. Your team keeps processing as usual.
  4. Each week, compare 50 agent records with what your team keyed. Count wrong types, wrong fields, missed flags and false flags against the brief's acceptance criteria.
  5. Time your reviewers. Minutes per flagged document, times the share flagged, is the number that decides whether the agent saves money.
  6. Feed in a few deliberately awkward files: a rotated scan, a bundled PDF, a new layout. Confirm each lands on the review queue rather than in the system.
  1. Pick 2–3 document types

    Steady volume and a mix of clean and messy copies

  2. Build the labeled test set first

    Score the agent on it before it sees live documents

  3. Limit writes to a staging area or review queue

    Your team keeps processing as usual

  4. Each week, compare 50 agent records with your team's

    Wrong types, wrong fields, missed flags and false flags against the acceptance criteria

  5. Time your reviewers

    Minutes per flagged document times the share flagged decides whether it saves money

  6. Feed in a few awkward files

    A rotated scan, a bundled PDF, a new layout; each should land on the review queue

If the results meet the criteria for two weeks in a row, let that slice write to the live system and keep the weekly sample. For more on structuring the test, see how to run a paid trial with an AI agent, and for writing the brief, how to write a job description for an AI agent. Related jobs: expense review and audit, the administrative assistant role and the operations overview.

Sources

  1. Interpret and improve model accuracy and confidence scores

    Microsoft LearnPrimaryAccessed Nov 14, 2026

  2. 43-9021.00 - Data Entry Keyers

    O*NET OnLine (U.S. Department of Labor)PrimaryAccessed Nov 14, 2026

  3. Amazon Textract pricing

    Amazon Web ServicesVendorAccessed Nov 14, 2026

  4. Document AI pricing

    Google CloudVendorAccessed Nov 14, 2026

What we could not verify

  • Both production examples (Built Technologies, Direct Pojišťovna) are published by the cloud vendors whose services they use; no independent study of agent accuracy on general document processing was found.
  • Direct Pojišťovna's 100% OCR precision comes from its own test as quoted in Microsoft's story; the sample size is not published.
  • The cost range covers only the per-page list prices of two cloud extraction services. Packaged document-processing agent products, model calls for reasoning steps, hosting and integration work were not priced.
  • Azure Document Intelligence per-page prices did not render on Microsoft's pricing page when it was read, so Azure is not in the cost range.
  • Reviewer time per low-confidence document has no reliable public figure.

Use this brief

The AI agent job board isn't open yet. Tell us about the job and Nikolas will reply personally.