All Articles
AI Strategy

Why 88% of Companies Use AI But Only 10% Have It Running at Scale

McKinsey State of AI 2025: 88% use AI, most still in pilot. The failure modes that keep pilots stuck, and a fix for each.

XE
Xenqube Engineering
AI Strategy
July 13, 20267 min read
enterprise AIAI adoptionAI pilotAI strategyagentic AIMVPproduction AI

McKinsey's State of AI 2025: 88% of organizations report using AI in at least one business function.

Fewer than 10% have deployed agentic AI at functional scale.

Deloitte adds another layer. Only 14% of companies have AI solutions ready for deployment. 42% are still developing their strategy.

The technology works. Top-decile companies are not using better models or bigger budgets. They run a different operating model from companies stuck in the pilot loop.

I've seen the pattern across enough organizations. Here are the specific failure modes, and what each one looks like.


Failure Mode 1: They Started With Technology, Not the Problem

The most common way a pilot dies: someone in senior leadership used ChatGPT, was impressed, and commissioned an "AI initiative." The team was handed a budget and told to find use cases.

They built something. It was technically impressive. It did not move a business metric.

The reason isn't that the team was incompetent. It's that they were working backward from a solution to a problem. You don't find good AI use cases by starting with the AI. You find them by looking at your highest-cost, highest-volume, most repetitive processes and asking whether AI can take a reliable action or provide a reliable answer in that context.

When the business case is built forward from a real problem, the ROI calculation is inherent in the problem statement. When it's built backward from a technology, the ROI has to be invented, and it rarely holds up.

The fix: Start every potential AI project with this question: "What does success look like, and how do we measure it before and after?" If you can't answer that in one sentence, the use case isn't scoped correctly yet.


Failure Mode 2: Compliance Was an Afterthought

A team built something. Six months in, they showed it to legal and security.

Legal said: where is our data going? Security said: what access does this have? Data team said: this model is using customer data we never consented to use for AI. The project got pulled for a review that became indefinite.

This happens constantly. Security reviews that kill AI projects are not bad outcomes: they're correct outcomes from incorrect process. The security review is catching a real problem. The problem is that the security review is happening in month six instead of month one.

Compliance in AI is not a blocker if you design for it from the start. Data residency, access control, audit logging, and PII handling all have well-understood implementation patterns. They are expensive and slow to retrofit, but they are straightforward to build in.

The organizations shipping AI at scale run compliance review in week one, not month six. They know their data governance requirements before they write a line of code.

The fix: Before any AI project starts, get three sign-offs: legal (data use and compliance), security (access and data handling), and the business owner (metric that defines success). These conversations take two weeks at the start. They take six months in the middle.


Failure Mode 3: No One Owned Production

A consulting firm (or an internal team) built the pilot. It worked well in the demo. Then it was handed off to the IT team to run in production.

The IT team didn't build it, doesn't fully understand it, and doesn't have the MLOps infrastructure to monitor it. Six months later, the model is drifting, the outputs are degrading, and no one catches it because no one is watching. A frustrated user complains. An audit finds the system has been giving wrong answers for months. The project gets shut down.

AI systems degrade in ways traditional software doesn't. Models drift. User inputs shift. The documents in your knowledge base go out of date. An AI that works perfectly at launch can be meaningfully worse in six months with no code changes at all.

Ownership is the real gap. Someone has to own the production behavior of every AI system you run, with the authority and tooling to act on it.

The fix: Before launch, name the person responsible for production AI performance. Define what metrics they monitor, how often, and what thresholds trigger intervention. Build the monitoring before you launch, not after something breaks.


Failure Mode 4: They Were Measuring the Wrong Thing

"AI adoption rate" is not a business metric. "Number of AI initiatives launched" is not a business metric. "Percentage of employees who have tried the AI tool" is not a business metric.

These metrics are easy to measure and mean nothing. They're what gets tracked when the real business metrics are hard to attribute to the AI specifically.

The organizations at functional scale measure AI by the same things they measure everything else by: revenue, cost, time, quality. Call deflection rate. Documentation time per patient. Loan processing time. Customer satisfaction score.

When AI is measured by business outcomes, it either delivers those outcomes or it gets fixed. There is no ambiguity about whether the project is working.

When AI is measured by adoption, everyone can look productive while nothing moves.

The fix: Every AI system gets exactly one primary business metric, defined before the project starts. If you can't define it, the use case is not ready to build.


What the Top 10% Do Differently

It's not budget. Gartner projects that 40% of enterprise applications will have AI agents by the end of 2026: up from fewer than 5% in 2025. The companies making that shift are not all large enterprises with massive budgets.

What they share:

They start small and specific. Not "an AI strategy." One specific use case, defined outcome, named owner, launch in 8 to 12 weeks. Prove the metric. Then expand.

They treat the first deployment as infrastructure, not a project. The first deployment establishes the MLOps stack, the security patterns, the monitoring approach, and the compliance framework. Every subsequent deployment is faster because the infrastructure is already there.

They don't try to custom-build everything. For standard use cases, vendor solutions reach positive ROI 2.4 times faster than custom builds (Deloitte, 2026). Building custom only makes sense when the use case is genuinely differentiated.

They have a clear no-go criteria. They're willing to kill a project at week 4 if the evidence doesn't support it. Companies that can't kill bad AI projects accumulate zombie pilots that consume budget and credibility.


The 51-Hour Path from Problem to Working System

We built our MVP sprint specifically because the pilot trap is caused by timelines, not complexity. Most AI use cases are not technically hard. They take forever because discovery, compliance, design, and build all happen sequentially over 6 months.

We compress that. In 51 hours of structured work, we go from problem statement to a working, production-ready system. Compliance and security are part of the process from hour one.

Speed matters because the longer the gap between idea and working system, the more organizational will gets spent on the gap instead of the outcome.

If you're trying to break out of the pilot loop, start with a conversation. Bring the use case you've been trying to ship. We'll say what's blocking it and how long it takes to fix.

XE
Xenqube Engineering
AI Strategy - writing about production AI systems, enterprise architecture, and what actually works in the real world.