Cyber Security Engineer - Vulnerability Management & Secoperations

How to read an AI Automation pitch before you trust it. 2026-09-03 By Dumitru Condrea | Ex-General Manager for Solaris Bank, Regulatory Architect AI Automation Every week another short video promises the same thing: one open source tool, one weekend setup, and your entire content or ops workflow runs on autopilot. Some of these claims are grounded. Most are stretched further than the tool actually goes. Knowing the difference matters more for a regulated business than a personal brand, because the cost of trusting a broken automation is not a wasted afternoon, it is a compliance gap or a customer facing failure. Novafin recently reviewed a TikTok clip pitching exactly this kind of tool: an open source social media manager that schedules and crossposts across LinkedIn, YouTube, TikTok, and Instagram from one dashboard, with AI generating the content itself. Here is how Novafin broke the claim down, and what the same checklist looks like when you apply it to an automation pitch for a fintech operation. Step one: verify the tool actually exists and is what it claims. The video did not name the tool on screen, a common pattern in lead gen content where the value is gated behind a "comment to receive" funnel. A quick search against the described feature set (self hosted, open source, schedules and crossposts to the named platforms, AI generation features) matched a real, actively maintained project with thousands of stars and daily commits. That is a good sign. A tool with no discoverable match for its claimed feature set, or one that only exists as a landing page with no code behind it, is where most of these pitches fall apart. Step two: separate what the tool does from what the pitch implies. This is where the gap usually opens up. The video called the setup "easy." The actual stack is a full application requiring Docker, a database, and platform business accounts before it even connects to Instagram or TikTok. For a technical team, that is a normal afternoon. For the audience the video is speaking to, it is a meaningfully harder lift than promised. Neither claim is false on its own. The tool works as described, and the setup is real work. The pitch just compresses the second part almost to zero. Novafin see the same pattern in fintech automation pitches constantly. A vendor demo showing an AI agent approving KYC checks in seconds is showing you the model working on clean, pre sorted data. It is not showing you the exception queue, the audit trail requirement, or the six weeks of integration work connecting it to your actual case management system. The demo is not lying. It is just not showing you the part that determines whether the project succeeds. Step three: notice what evidence is missing. The video described what the tool could do. It did not show a working pipeline actually running: no screen recording of a real crosspost going out, no dashboard with live scheduled content. That distinction, described capability versus demonstrated result, is the single most useful filter when evaluating any automation claim, ours included. If a vendor or a creator cannot show you the thing actually running end to end, ask why. Step four: notice the incentive behind the pitch. The creator was not simply informing. The full guide was gated behind a comment, a standard audience building mechanic. That does not make the underlying tool bad, but it means the video's job was to generate engagement and leads, not to give you an unbiased setup guide. Every automation recommendation you receive, from a TikTok clip to a vendor sales call to an advisory firm's audit, carries an incentive. Knowing what that incentive is tells you how much scrutiny the claim needs before you act on it. Applying this to your own automation decisions. None of this means avoid automation. It means run every pitch, including the ones that sound most exciting, through the same four checks: does the tool actually exist and do what is claimed, what does the pitch leave out about implementation effort, is there demonstrated proof or just described capability, and what is the source's incentive for telling you this. This is the same process Novafin run when Novafin scope an AI audit for a regulated business: rank the processes that are genuinely automatable against the ones where the demo looks good but the operational reality (audit trails, exception handling, regulatory review) makes the real timeline much longer than the pitch suggests. Honest timelines beat exciting demos every time you are the one accountable for what breaks. If you want a second opinion on an automation claim your team is evaluating, or a straight assessment of where AI genuinely saves time in your operation versus where it just moves the risk somewhere less visible, that is exactly what its free AI audit is for. Evaluate your payment operations or compliance architecture. Novafin work with licensed EMIs, PIs, MSBs, and PSPs to map operational risk, automate compliance queues, and resolve regulatory bottlenecks. Explore its AI automation services or request a diagnostic.

Solaris, a German Banking-as-a-Service provider, is becoming "Europe's first AI-native bank" under CEO Steffen Jentsch, who joined in early 2026. The Berlin-based fintech, valued at $1.6 billion in 2021, is rebuilding its banking processes using AI agents and large language models whilst maintaining human oversight. The strategic pivot, backed by majority shareholder SBI Holdings, involved cutting 20 per cent of its 400-strong workforce. Solaris is focusing on Germany after closing subsidiaries in Italy, Spain and France. Its two major clients, ADAC and Boerse Stuttgart Group, comprise around 80 per cent of revenues. The company has pushed back its profitability timeline to 2028, following earlier restructuring in 2024 amid client losses and regulatory restrictions from BaFin.