The build is not the expensive part. The second year is
Who owns the evaluation set, on call, the model changes, the integrations, the data duties.
Every standing item gets an owner by name.
A capable engineer can put a voice agent on the phone inside a fortnight, and what they show you will be genuinely good. That is exactly why the decision gets made on the wrong evidence. What no build estimate contains is who owns this in month nineteen.
This page is about the operating burden rather than the price. The long version, with the published sources behind each item, is our essay on what it actually costs to build and maintain a voice agent in house. Both matter, and they get discovered in the wrong order: the price is settled before signature, the burden arrives twelve months later.
- The evaluation setYou · policy owner
- On callOperated by AInora
- Model changesRetirement notice · 60 daysAInora · suite re-run
- Integration maintenanceAInora
- The data dutiesYour DPO + AInora
- The one engineerDeputy named for each
What does somebody have to own in an AI voice agent?
Each of the six needs an owner by name for the second year, not a department and not a job title, plus a deputy who has done the job at least once.
The evaluation set
The written record of what the agent must never confirm, quote, promise or continue past, held as a fixed suite of deliberately awkward calls. Building it once is a project. Keeping it current as prices, staff, services and opening hours change is a job, and it is the one that gets dropped first, because nothing visibly breaks on the day it is dropped.
On call
When the phone is the front door, a call that goes wrong at eight in the morning is revenue that does not arrive. That makes the agent availability-critical, and a rotation has to be large enough to exist. A single engineer carrying a phone is not a rotation. It is an availability promise with nothing behind it in the week they are ill.
Model changes on a calendar you do not set
Providers publish their lifecycle policies. Generally available models on one large cloud carry a retirement date set at launch eighteen months out, notice of at least sixty days, a replacement named only shortly beforehand, and no extensions. Changing the model name is trivial. Establishing that the replacement still refuses everything the predecessor refused is the whole suite, run again, with somebody reading the disagreements.
Integration maintenance
The write path into the diary or the CRM is the part of the build with the shortest half-life. Connected systems deprecate endpoints, rotate authentication and occasionally change what a field means without changing its name. When that breaks at nine in the morning the agent does not stop. It carries on booking into nothing.
The data duties
A recorded call is personal data from the first second. Somebody keeps the list of every party that touches the audio current and defensible, answers the data-subject request inside the statutory month, is ready to judge whether a breach is notifiable and, where it is, report it inside 72 hours, and fills in the security questionnaire a corporate customer sends. None of these are engineering tasks.
The one engineer
The item nobody writes down. In-house voice AI is almost always one person who understands the whole thing: the telephony quirks, why a refusal is worded that way, which two instructions must not be edited together. Nothing here is a judgement about their ability. The problem is that there is one of them, and a resignation letter takes the phone system with it.
Two of those six are set outside the business entirely. Model lifecycles are published rather than guessed: on one large cloud a generally available model carries a retirement date set at launch eighteen months out, at least sixty days of notice, and no extensions. And since 2 August 2026, Article 50 of the EU AI Act has required that a person be informed they are interacting with an AI system unless that is obvious. Neither of those dates moves because a project is busy.
Why do in-house voice agent builds stop being maintained?
There is a way these projects stop being maintained that has nothing to do with the code being bad. One person built it, one person understood it, and one person left.
What leaves with them is not the repository. It is the reasoning: why a particular refusal is worded that way, which two instructions must never be edited in the same week, what the experiment that did not work proved, which of the connected systems lies about its own field names. None of that was written down, because nobody writes it down while shipping. What remains is a service that still answers the phone and that nobody is willing to change, which is a slower and more expensive problem than an outage, because it looks fine from the outside for months.
The same shape applies to a supplier, and the question should be put to one. A vendor whose entire voice capability rests on a single engineer carries an identical concentration of risk, arriving with an invoice attached. The follow-up worth asking after any confident answer is who else there can do that. It is very hard to answer smoothly if the answer is nobody.
The two disciplines that dissolve most of this are unglamorous and observable from the outside: the evaluation set exists as a written artefact rather than as somebody's judgement, and there is a gate between a change and the live number. We describe both on how an agent gets verified before it speaks to a customer and where an agent's rules have to live.
When is building an AI voice agent in-house the right answer?
Often enough that a page concluding otherwise from a supplier would be worth ignoring. Three conditions, and they have to hold together rather than individually. The calls are the product rather than a channel to it, which makes the conversation logic core intellectual property. There is a permanent team rather than a person, large enough that a rotation survives a resignation and a holiday. And the domain is idiosyncratic enough that the translation cost between your experts and anyone else exceeds the build. Two more conditions each settle it alone: a call volume at which the unit arithmetic stops favouring any service, a line whose position depends on your own call mix and which no supplier will calculate for you, including us; and a requirement that the audio never reaches a third party at all, which rules out most suppliers by construction rather than on merit.
If the three hold together, or if either of the other two does, build, and we would say so on a call. The architecture for one regulated vertical is set out on our guide to building a voice agent for debt collection, including the unglamorous layers that hold up launches.
Where exactly one of the three holds, the workable answer is usually a split rather than a choice: own the policy and the evaluation set, because that is where the knowledge is and it should never leave the business, and rent the operating burden, because that is where the headcount is.
What has to be settled before anything is built?
- 01
What must never happen
The prohibitions come first and in writing: what the agent may never confirm, quote, promise or continue past. That document is the evaluation set, it belongs to you, and you keep it whether or not we go further.
- 02
The write path
Which system the booking actually lands in, what happens when that system refuses, and how the caller finds out. An agent that cannot write to the diary is taking messages, which is a different product.
- 03
The release gate
What stands between a change to the agent and your customers hearing it, who can veto it, and how many minutes a rollback takes. If there is no step there, every change goes straight to your callers.
What the booking has to reach is on booking into your system of record, and the data and access duties are on our security page.
Frequently Asked Questions
Should we build or buy an AI voice agent?
How long does it take to build a voice agent in house?
What actually costs money after launch?
What happens when the model we built on is retired?
When is building in house the right answer?
Founder & CEO, AInora
Building AI voice agents that let businesses serve more clients with the same team. The agents call back every new lead, re-contact past customers and take the calls the team cannot get to, and the work lands in the client's own CRM.
View all articlesA working session, not a demo
Forty-five minutes on your actual call flow. We take the policies your front desk already follows, work through the edge cases that break them, and you keep the written version at the end whether or not anything else happens between us. It is the first draft of the evaluation set, and it is useful to a team that goes on to build the thing themselves. Where an engagement follows, it is one workflow, missed calls and after hours, roughly two weeks, before anything else moves.