Data, Integration and Operational Costs
The model is priced per request; the system around it is priced by other things. Data cost follows sources, quality and freshness, integration cost follows connections and change, and operating cost follows volume, exceptions and criticality. Leaders who price those drivers, and test resilience spend against expected downtime, know what one finished outcome really costs.
After this chapter you can
- Explain what drives data, integration and operating costs, and why only some of them grow with volume.
- Estimate integration upkeep from connections, change rate and cost per change.
- Price the exception queue from review rate, time per case and loaded labor cost, including the effect of harder remaining cases.
- Apply the expected-value test to a one-off resilience investment.
- Build a cost-to-serve for one completed outcome and identify its largest levers.
In late 2025, MuleSoft and its research partners asked 1,050 IT leaders how many applications their organizations ran. The average was 957, up from 897 a year earlier. Only 27 percent of those applications were integrated with one another1. The survey is sponsored by a company that sells integration software, so read it as a direction rather than a precise measure. The direction is hard to argue with.
Now think about what an AI system has to do to earn its keep. It must read from some of those applications and write its results into others: the record system, the scheduling tool, the finance ledger, the document store. It needs data that is clean enough to act on. It needs people for the cases it cannot handle, someone watching it, and a plan for the day it stops. Model, Compute and Infrastructure Costs priced the engine. This chapter prices everything the engine is bolted into, which is often the larger bill.
The core idea
The model is priced per request. Almost everything around it is priced by something else. That single observation explains why so many AI budgets go wrong in the same direction: a forecast that scales every cost with volume will be roughly right about the model and wrong about the rest.
This module uses one definition of total cost of ownership: build plus run plus operate plus change, over the system’s life, as Understanding AI Total Cost of Ownership set out. Data, integration and operations appear in every one of those families. The question this chapter answers is narrower and more practical: for each of them, what drives the cost, and which number should a leader ask for? To keep the arithmetic honest, one illustrative example runs through the chapter. Suppose a hotel group uses AI to read 40,000 incoming group-booking inquiries a year, extract the dates, rooms and event requirements, and route each one to the right hotel’s sales queue. The model and compute cost 200,000 a year.
Existing data is not free data
Data is a cost often entered as zero, because the organization already holds it. Holding data and being able to use it are different things, and the gap between them is paid for at four stages.
Acquiring means getting the data out of the systems that hold it, or licensing it from outside, with the contract, legal and engineering work each route brings. Preparing means cleaning, removing duplicates, matching records across systems and, often, labeling examples so the system’s quality can be tested. Pipelines move data in production: ingest, validate, store and serve. Freshness is a cost choice here, because data updated every minute costs more to move and check than data updated every night. Governing means controlling who can see what, keeping and deleting records on schedule, and being able to show an auditor what the system used.
The first two are mostly build costs. The last two are run and operate costs, and they never stop. In the hotel example, preparing the historical inquiries and the property directory costs 150,000 once, or 50,000 a year over a three-year life. Pipelines, storage and governance cost 200,000 a year. Data comes to 250,000 a year, more than the model.
The cheapest-looking choice, skipping preparation, often proves expensive. Poor data does not disappear; it returns downstream as wrong output, rework and manual review. Gartner predicted in February 2025 that through 2026 organizations will abandon 60 percent of AI projects unsupported by AI-ready data, and found that 63 percent of organizations did not have, or were unsure whether they had, the right data management practices for AI2. The useful question is not “is our data good?” but “how much preparation does this outcome need?” Perfect data for every purpose is unaffordable; adequate data for one purpose usually is. Where the data is about people, reuse has a legal price too: a new purpose needs a lawful basis and must fit the purpose for which the data was collected, which the LEGAL note below sets out.
Integration is owned, not finished
An AI system that cannot reach the systems where work happens produces suggestions nobody acts on. Each connection to a record system, a scheduling tool or a finance ledger has a cost, and that cost has a life.
At build time the organization pays for interfaces, identity and access, mapping fields between systems, and testing. That is the part most business cases include. After go-live, every connection needs monitoring and failure handling, because when one link fails the whole workflow stops. Then, at a time the AI team does not choose, a connected system is upgraded and a field changes format. Requests start failing, and someone has to find out why.
The driver here is not volume. It is the number of connections multiplied by how often the systems at the other end change. A useful estimate is simple: connections, times interface-affecting changes per year, times the cost of absorbing one change. In the hotel example, three integrations cost 240,000 to build, or 80,000 a year over three years. Each connected system has about two changes a year that touch the interface, and each costs about 20,000 to absorb: 3 times 2 times 20,000 is 120,000 a year. Integration comes to 200,000 a year.
Two management levers follow. Fewer, standard connections cost less to own than many custom ones. And the cheapest change is the one you hear about in advance, so agreements with the owners of upstream systems about change notice are an economic control, not an administrative courtesy.
Operations: keeping it trustworthy
A production AI system needs people and routines that a pilot can do without. Someone monitors quality, not only uptime, because a system can be available and wrong. Someone re-tests it after each change to the model, the prompts or the data; Understanding AI Total Cost of Ownership showed that such changes arrive on a schedule. A support desk answers users. An incident process handles failures, which Human Oversight and AI Incidents in Module 06 covers in detail. And someone tracks the cost itself: the FinOps discipline treats measuring cost per unit of business value as a continuing practice, not a one-off report34.
In the hotel example, monitoring, re-testing, support and incident response cost 150,000 a year. That is the smallest of the operating lines. The largest is often the people who handle the cases the system cannot.
Pricing the exception queue
The Economics of AI treated human review as a dial that every business case must set. Once it is set, the cost of the people behind it can be priced with three numbers: how many cases go to a person, how long each takes, and what an hour of that person’s time costs, fully loaded.
In the hotel example, 15 percent of inquiries cannot be routed with confidence. That is 6,000 cases a year. At 20 minutes each they take 2,000 hours, and at 100 an hour the exception queue costs 200,000 a year, every year. As the volume grows, so does the queue, and Understanding AI Total Cost of Ownership showed how such costs rise in steps as each new reviewer is hired.
The obvious lever is the review rate, and here there is a trap. In 1983 the psychologist Lisanne Bainbridge described the ironies of automation: the more a system automates, the more the work left to people consists of the unusual, difficult cases it could not handle5. Operational and Workforce Risk in Module 06 treats the human side of that irony. The economic side is simple. When the system improves, the easy cases leave the queue first, so the remaining cases take longer.
Suppose an improvement halves the review rate to 7.5 percent, or 3,000 cases. If each still took 20 minutes, the cost would halve to 100,000. If the cases left now take 30 minutes, they need 1,500 hours and cost 150,000. The saving is 50,000, a quarter, not the 100,000 the improvement’s sponsor will quote. Ask for the time per case after the improvement, not before it.
Resilience and the expected-value test
Reliability is a cost decision too. Failover, redundancy, backups and a tested manual fallback all cost money, and so does going without them. Outages are not cheap: in Uptime Institute’s 2026 analysis, 57 percent of respondents put their most recent major outage above 100,000 dollars6. An AI system in a critical workflow inherits that exposure.
One test decides whether a resilience investment is worth it. A one-off resilience cost pays off only if it avoids more expected downtime cost than it costs. Expected downtime cost is the cost of one hour down multiplied by the hours you expect to lose. If there is a 50 percent chance of a ten-hour outage in a year, the expected loss is five hours.
Suppose a failover setup costs 30,000 once and is expected to avoid five hours of downtime a year. In a critical workflow where one hour down costs 10,000 in delays, manual work and missed service, it avoids 50,000 a year and pays for itself in the first year. For an internal report where an hour down costs 1,000, it avoids 5,000 a year and only 15,000 over three years, half its cost. Criticality, not technical maturity, justifies resilience. The test also exposes a common gap: if nobody can say what one hour down costs, nobody can judge the spend.
Cost-to-serve: putting the lines together
The completed business outcome is the unit that ties these lines together. The Economics of AI asked which unit a system’s cost should be measured in, and Model, Compute and Infrastructure Costs priced the model’s share of a successful outcome. Cost-to-serve is the complete version: everything it takes to deliver one finished outcome, with data, integration, operations and people included4.
Add the lines in the hotel example: 200,000 for the model, 250,000 for data, 200,000 for integration, 200,000 for exceptions and 150,000 for operations. The complete cost is 1,000,000 a year, or 25 per inquiry. The model alone was 5 per inquiry, 20 percent of the total. Data, integration and exceptions together are 65 percent.
That split changes the management conversation. A cheaper model could remove at most a fifth of the cost. The larger levers are the review rate and time per case, the number and stability of connections, and how much data preparation the outcome truly needs. The split also tells you how the cost will move: exceptions and part of operations grow with volume, integration grows with change, and data grows with every new source.
Story: the clinics where the model was not the problem
A well-documented case of these costs comes from a health screening program, not a finance department. Diabetic retinopathy is a leading cause of blindness, and Thailand had about 4.5 million people with diabetes and roughly 200 retinal specialists to examine their eyes. Screening results could take up to 10 weeks to come back. A deep learning system that read eye photographs, built by a Google Health team, had shown more than 90 percent accuracy in the lab and could return a result in under 10 minutes7. In 2018 and 2019 the researchers deployed it in eleven clinics in two provinces and studied what happened, through observation and interviews with the nurses who used it8.
Their post-mortem, published in 2020, is unusually candid. More than a fifth of the images were rejected by the system as too poor to grade, often because they had been taken in poorly lit rooms7. On slow connections, each image could take 60 to 90 seconds to upload, and in one clinic a two-hour internet outage cut the number of patients screened from 200 to 1009. Patients whose images were rejected were told to see a specialist at another clinic on another day, and one nurse estimated that 40 to 50 percent of patients, a share of people rather than of images, did not take part because they thought they would have to go to the hospital9.
The study reports no money figures, and the translation into cost families is this chapter’s, not the authors’. But the shape is unmistakable. The model’s accuracy was not what the clinics struggled with. The quality threshold met the data that a busy, under-resourced clinic actually produced, and every rejected image became an exception handled by a nurse or a patient. The connection the system relied on decided how many patients a session could serve. And the exception path, a trip to a specialist elsewhere, imposed a cost on the very people the system was meant to help. The researchers’ own conclusion was that the system had to be evaluated in the setting where it would run, before it was deployed widely8. For a leader, the economic version of that lesson is to price the data, the connections and the exception path in the real setting before the business case is approved.
What this means for leaders
The discipline fits on one page. Ask for each cost family by its driver, not as a percentage of the model: data by source and freshness, integration by connection and change rate, operations by volume, exception rate and criticality. Ask for the exception queue as three numbers, and for the time per case after any improvement. Apply the expected-value test to resilience spend, which means someone must know what one hour down costs. And ask for cost-to-serve, the complete cost of one finished outcome, before you approve and every quarter after go-live.
Check yourself
- Data the organization already holds costs close to nothing to use in an AI system.
- Integration cost depends mainly on the number of connections and how often the connected systems change.
- Halving the review rate halves the cost of handling exceptions.
- A one-off resilience cost pays off only if it avoids more expected downtime cost than it costs.
- If the model is a fifth of the complete cost, a cheaper model is the strongest lever.
- In the Thai screening deployment, most problems sat in the data, connections and exception path around the model.
Reflection: price one outcome
What comes next
With data, integration and operations added to model and compute, the cost structure of an AI system is complete. What it does not yet show is time. A pilot can prove an idea with clean sample data, one connection and a team willing to check every output by hand. Running the same idea for thousands of users is a different economic proposition. That difference is the subject of Experimentation vs Production Economics.
Laws referenced
Not legal advice. Laws change; verify before relying on this, and consult counsel for decisions.
EU AI Act · EU
Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744
Risk-based rules. Prohibited practices include social scoring, untargeted scraping of facial images, and emotion recognition in workplaces and schools (with narrow exceptions). High-risk systems (Annex III: biometrics, safety components of critical infrastructure such as energy, water and traffic, employment and worker management, credit, education, essential services, law enforcement, migration, justice) need risk management, data governance, documentation, logging, human oversight, human oversight that keeps people able to understand the system, notice automation bias (over-reliance on its output), override it or stop it (Art. 14(4)), appropriate accuracy, robustness and cybersecurity (Art. 15), automatic logging of events (Art. 12), a provider quality-management system (Art. 17) and conformity assessment. An Annex III system is not high-risk if it poses no significant risk of harm, for example a narrow procedural or preparatory task that does not replace human assessment; systems that profile people are always high-risk, and a provider relying on this exception must document it and register (Art. 6(3)). Deployers of high-risk AI must use it as instructed, assign competent human oversight, monitor its operation, keep logs for at least six months and report serious incidents (Art. 26); employers must inform workers' representatives (Art. 26(7)). Public bodies, private providers of public services, and deployers of credit-scoring or life and health insurance pricing systems must carry out a fundamental-rights impact assessment before first use (Art. 27). Providers must run post-market monitoring (Art. 72). A deployer that puts its name on a high-risk system, substantially modifies it, or changes its purpose so that it becomes high-risk takes on the provider's obligations (Art. 25(1)). A substantial modification (Art. 3(23)) of a high-risk system needs a new conformity assessment, unless the change was pre-determined and documented at the first assessment, as with planned continuous learning (Art. 43(4)). Providers of general-purpose AI models (from 2 Aug 2025) must keep technical documentation, have a policy to comply with EU copyright law including text-and-data-mining opt-outs, and publish a sufficiently detailed summary of training content (Art. 53). Research, testing and development before a system is placed on the market or put into service is outside the Act, except testing in real-world conditions (Art. 2(8)). Since the 2026 Omnibus, the Art. 4 AI-literacy duty is an obligation of effort (take measures to support literacy), not of result. Fines reach EUR 35 million or 7% of global turnover for prohibited practices.
- 2024-08-01 — Entered into force
- 2025-02-02 — Prohibited practices (Art. 5) and the AI-literacy duty (Art. 4) apply
- 2026-07-27 — Omnibus softens Art. 4: providers and deployers must take measures to support AI literacy; no specific level must be guaranteed
- 2025-08-02 — General-purpose AI model obligations apply; governance and penalties regime in place
- 2026-08-02 — Transparency duties (Art. 50) apply: disclose AI interaction, label synthetic and deepfake content (marking for generative systems already on the market: 2 Dec 2026)
- 2027-12-02 — High-risk obligations for Annex III systems (e.g. hiring, credit, education, essential services) - moved from 2 Aug 2026 by the 2026 Omnibus
- 2028-08-02 — High-risk obligations for AI in products regulated under Annex I
Last verified 2026-10-06 · official text
General Data Protection Regulation · EU
Regulation (EU) 2016/679
Personal data is any information relating to an identified or identifiable person, directly or indirectly, including by an identifier such as an online ID (Art. 4(1)). Lawful basis and purpose limitation (Arts. 5-6); processing special-category data, including biometric data used to identify a person, health data and data revealing ethnicity, is prohibited unless a specific exception applies (Art. 9); data protection by design and by default (Art. 25); processors such as AI vendors may act only under a written contract with required terms and sufficient guarantees (Art. 28); transparency to data subjects (Arts. 13-14); right not to be subject to a decision based solely on automated processing with legal or similarly significant effects (Art. 22); breach notification to the supervisory authority within 72 hours (Art. 33) and to individuals without undue delay when the risk is high (Art. 34); data protection impact assessment for high-risk processing (Art. 35). Fines up to EUR 20 million or 4% of global turnover.
- 2018-05-25 — Applies
Last verified 2026-10-08 · official text
References
- MuleSoft (Salesforce), with Vanson Bourne and Deloitte Digital. 2026 Connectivity Benchmark Report. Salesforce, as reported by Digital Commerce 360. 2026.
- Gartner. Lack of AI-Ready Data Puts AI Projects at Risk. Gartner press release, 26 February 2025. 2025.
- FinOps Foundation. FinOps Framework. The Linux Foundation. 2026.
- J.R. Storment and Mike Fuller. Cloud FinOps: Collaborative, Real-Time Cloud Value Decision Making, 2nd edition. O'Reilly Media. 2023.
- Lisanne Bainbridge. Ironies of Automation. Automatica 19(6). 1983.
- Uptime Institute. Uptime Announces Annual Outage Analysis Report 2026. Uptime Institute (press release). 2026.
- Will Douglas Heaven. Google's medical AI was super accurate in a lab. Real life was a different story.. MIT Technology Review. 2020.
- Emma Beede, Elizabeth Baylor, Fred Hersch, Anna Iurchenko, Lauren Wilcox, Paisan Ruamviboonsuk and Laura M. Vardoulakis. A Human-Centered Evaluation of a Deep Learning System Deployed in Clinics for the Detection of Diabetic Retinopathy. Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems (ACM). 2020.
- Devin Coldewey. Google medical researchers humbled when AI screening tool falls short in real-life testing. TechCrunch. 2020.
Further reading
- Emma Beede, Elizabeth Baylor, Fred Hersch, Anna Iurchenko, Lauren Wilcox, Paisan Ruamviboonsuk and Laura M. Vardoulakis. A Human-Centered Evaluation of a Deep Learning System Deployed in Clinics for the Detection of Diabetic Retinopathy. Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems (ACM). 2020.
- J.R. Storment and Mike Fuller. Cloud FinOps: Collaborative, Real-Time Cloud Value Decision Making, 2nd edition. O'Reilly Media. 2023.
- FinOps Foundation. FinOps Framework. The Linux Foundation. 2026.
Sources last verified 2026-10-08.