The short answer

TL;DR

Before building in Make, answer five questions: Is the process stable? Is there one authoritative source for each important field? Can the team connect systems securely? Can a failed run be detected and recovered? Is one person accountable?

Score the 20 checks below. A score of 16-20 supports a controlled pilot. A score of 11-15 means close the gaps first. A score of 0-10 means standardise the process before automating it.

Five hard stops override the score: no process owner, no system of record, no recovery process, unapproved data movement or no protection against duplicate and harmful actions.

If you are still choosing a use case, start with seven Make automations a consulting firm can build. This checklist determines whether the chosen process is ready.

Automation readiness is an operating question

Make's visual builder can make a workflow look finished before the underlying process is ready. A connected trigger and action prove that data can move. They do not prove that the right data will move, that duplicates are prevented, that permissions are appropriate or that someone will notice a failure.

For a non-technical team, readiness does not mean learning to code. It means being able to explain the workflow in business language: what starts it, what information it trusts, which rules it applies, where exceptions go and who is accountable.

Five hard stops before live automation

Do not move a workflow into live use while any of these conditions remains unresolved:

  1. No process owner. Nobody has authority to define the rules, approve changes and respond to failures.
  2. No system of record. The team cannot say which application contains the authoritative client, project or task status.
  3. No recovery process. Failed or incomplete runs cannot be identified, corrected and safely replayed.
  4. Unapproved data movement. Client, employee or commercially sensitive data would pass through a service without the required internal or contractual approval.
  5. No duplicate protection. A retry could create a second invoice, contract, task, folder or client message.

A high score elsewhere does not compensate for a hard stop. Resolve it or keep the process manual.

The 20-point readiness checklist

Award one point for every statement that is true today and supported by evidence. “We could probably do this” scores zero until the team has defined it.

1. Process readiness

  1. The workflow has a clearly defined start and end.
  2. The normal steps are documented in the order they occur.
  3. The main exceptions are known and have an agreed handling route.
  4. The process is stable enough that rules do not change every week.

A process diagram is optional. A one-page written description is often enough if it names the trigger, decisions, actions and exception owner.

2. Data readiness

  1. Each important field has one authoritative source.
  2. Required fields and acceptable formats are defined.
  3. The workflow can identify duplicates before taking action.
  4. Ambiguous or incomplete records can be sent for human review.

If two systems disagree about a client name, project status or owner, automation needs a rule for which one wins. Otherwise it accelerates inconsistency.

3. Technical and access readiness

  1. The required applications expose the triggers, fields and actions the workflow needs.
  2. The firm's current third-party plans permit the necessary API or integration access.
  3. Connections can use named, approved accounts rather than shared credentials.
  4. An administrator can grant, review and revoke the required permissions.

Make organises access through organisations and teams. Its documentation says a region is selected when an organisation is created and cannot later be changed. That makes early data-location and administrative choices worth documenting. Review current organisation guidance ↗, team guidance ↗ and plan limits before setup.

4. Control and recovery readiness

  1. A safe synthetic test record exists for every important route.
  2. The team knows how to inspect execution history and identify where a run stopped.
  3. The workflow prevents or detects duplicate and irreversible actions.
  4. There is a documented correction, replay or manual fallback process.

Make documents incomplete executions ↗ and run replay ↗. Incomplete executions are not a substitute for design controls, and replay can repeat actions using the current scenario configuration. Before replaying a failed run, confirm which modules already succeeded and whether repeating them is safe.

5. Ownership and economic readiness

  1. A named business owner approves workflow rules and changes.
  2. A named operator monitors failures, unusual volume and consumption.
  3. Expected monthly runs, bundles and credit use have been estimated.
  4. The likely administrative saving justifies setup, monitoring and maintenance.

Use the ToolThesis credit worksheet to model normal and peak activity. A workflow that saves five minutes a month may not justify another system to monitor.

How to interpret the score

ScoreDecisionWhat to do
16-20Proceed to a controlled pilotKeep the launch narrow and validate exceptions.
11-15Close the gaps firstResolve the weak categories before live use.
0-10Standardise before automatingThe process is not stable enough yet.

The score is editorial guidance, not a Make certification. Category balance matters. A team scoring four points for process and zero for recovery should not average the weakness away.

Worked example: a lead-intake workflow

Hypothetical scenario: a ten-person advisory firm wants website enquiries copied into its CRM and assigned to the correct partner.

  • Process: 4/4. The form, qualification fields and ownership rules are documented.
  • Data: 3/4. Required fields are defined, but duplicate-company logic needs improvement.
  • Technical and access: 4/4. The form and CRM expose the required functions and an administrator owns the connections.
  • Control and recovery: 2/4. Synthetic tests exist, but replay safety and the manual fallback are not documented.
  • Ownership and economics: 3/4. An owner and operator are named, but monthly volume has not been estimated.
Total: 16/20 - suitable for a controlled pilot after duplicate handling and recovery steps are documented.

The numerical threshold does not erase the remaining control work. It tells the team that the process is close enough to pilot without pretending it is ready for unattended operation.

A four-stage pilot for non-technical teams

  1. Observe. Run the current manual process for a short representative period. Record volumes, exceptions and correction steps.
  2. Build without live consequences. Use synthetic records and non-production destinations. Test the happy path, every branch and at least one failure.
  3. Run in parallel. Let the automation produce a draft, log or proposed action while the existing manual process remains authoritative.
  4. Launch narrowly. Activate one controlled segment, monitor every run and expand only after the team understands normal failures and real consumption.

Do not begin with automated contracts, invoices or client advice. A good first launch performs reversible administrative work and leaves a visible record.

Security and data handling questions

Make publishes information about encryption, audits and other controls on its security page ↗. Vendor claims are inputs to due diligence, not a conclusion that the platform is appropriate for every client dataset.

Before live use, document:

  • Which client and employee data enters Make.
  • Which connected applications receive it.
  • Who can view scenarios, connections and execution logs.
  • How long operational history remains available under the selected plan.
  • Whether client contracts, law or internal policy restrict the proposed flow.
  • How access is revoked when an employee or contractor leaves.

Who should not automate yet?

  • Teams still changing the process every week.
  • Firms unable to identify a reliable source record.
  • Workflows whose exceptions require undocumented judgement.
  • Processes involving sensitive data without an approved handling decision.
  • Teams with no time or owner for monitoring and correction.
  • Low-volume work that remains clearer and safer as a checklist.

The conclusion

Make can automate a stable process. It cannot supply the missing operating decisions that make the process safe.

A non-technical team is ready when it can name the trigger, trusted data, rules, exceptions, permissions, recovery steps and owner in plain language. The 20-point score helps prioritise preparation, while the five hard stops protect against the failures that matter most.

Passing the checklist is permission to run a controlled pilot, not permission to stop paying attention.

For the next decision, compare whether Make or Zapier is easier for a non-technical team.

Does your workflow pass the checklist? Build one controlled pilot with synthetic data, visible exceptions and a named owner before making an annual commitment.

Explore Make and create a free account ↗Affiliate link

Research method: Documentation analysis of Make's guidance on organisations, teams, scenario history, webhooks, incomplete executions, run replay, security and plan availability. Material claims were checked on 25 September 2026.

Evidence boundary: The checklist and score thresholds are ToolThesis editorial guidance. They are not a Make certification, legal advice or a hands-on production test.