--- title: "Paving AI rules: data, approvals, and spend" description: "Set paving AI rules for private bid files, site access, quote approvals, and model costs. Give each function a named reviewer and a firm spend limit" canonical: "https://scalewithsearch.com/articles/paving-ai-rules-data-approvals-spend" --- ## Site navigation - [Scale With Search](https://scalewithsearch.com/) - Services - Services - [AI systems](https://scalewithsearch.com/ai-systems) - [Site build](https://scalewithsearch.com/work#site-build) - [Whole website fix](https://scalewithsearch.com/work#whole-website-fix) - [Content library with SEO](https://scalewithsearch.com/work#content-library) - [Working session](https://scalewithsearch.com/audit) - Start here - [Send your brief](https://scalewithsearch.com/work#send-your-brief) - [Example scope](https://scalewithsearch.com/work#review-the-example-scope) - [Prices and terms](https://scalewithsearch.com/work#prices-and-terms) - Industries - Real estate - [Real estate agents and teams](https://scalewithsearch.com/for/real-estate) - [Platforms, ownership, and IDX](https://scalewithsearch.com/for/real-estate/real-estate-website-platforms-ownership-idx) - [Search, content, and AI](https://scalewithsearch.com/for/real-estate/real-estate-search-content-ai) - [Inquiries, campaigns, and handoffs](https://scalewithsearch.com/for/real-estate/real-estate-website-inquiries-campaigns-handoffs) - [Buyer, seller, and local pages](https://scalewithsearch.com/for/real-estate/real-estate-buyer-seller-local-resources) - [Rules, privacy, and trust](https://scalewithsearch.com/for/real-estate/real-estate-website-rules-privacy-trust) - Browse by business - [Trades and home services](https://scalewithsearch.com/for/#group-trades) - [Health, wellness, and animal care](https://scalewithsearch.com/for/#group-practices) - [Law, finance, and IT](https://scalewithsearch.com/for/#group-professional) - [Marketing and SEO agencies](https://scalewithsearch.com/for/#group-agencies) - [Shops and manufacturers](https://scalewithsearch.com/for/#group-manufacturing) - [Restaurants, shops, studios, and nonprofits](https://scalewithsearch.com/for/#group-local-services) - Chiropractic practices - [Chiropractic and wellness practices](https://scalewithsearch.com/for/chiropractic-and-wellness-practices) - [Chiropractic and physical therapy clinics](https://scalewithsearch.com/for/chiropractic-and-physical-therapy-clinics) - [All industries](https://scalewithsearch.com/for/) - Resources - Free tools - [AI readiness check](https://scalewithsearch.com/check) - [Free tools](https://scalewithsearch.com/tools/) - [Free Starter Kit](https://scalewithsearch.com/kit/business-memory-starter-kit.zip) - Guides - [AI-native library](https://scalewithsearch.com/ai-native) - [Industry intelligence](https://scalewithsearch.com/intelligence) - [Office job guides](https://scalewithsearch.com/guides/) - [Business memory](https://scalewithsearch.com/articles/business-memory-for-ai-agents-guide) - [Agent governance](https://scalewithsearch.com/articles/ai-agent-governance-guide-small-business) - [Migration and ownership](https://scalewithsearch.com/articles/leaving-vendor-ai-memory-guide) - Articles - [All articles](https://scalewithsearch.com/articles/) - [What changed](https://scalewithsearch.com/changes/) - About - Evidence - [Proof](https://scalewithsearch.com/proof) - Scale With Search - [About](https://scalewithsearch.com/about) - [How it works](https://scalewithsearch.com/how-it-works) # Paving AI rules: data, approvals, and spend Give each paving office AI function a short written rule before it reads a project folder. Name the files it may read, the draft it may prepare, and the person who may release it. Set its spending limit in the same document. A bid comparison and a customer progress update need different access. Keep their permissions separate. The recommendations below describe an internal control design. They do not establish that a particular service satisfies your contracts or the laws that apply to your company. Use the [paving industry hub](/for/paving) for the wider office workflow. The [public brochure review](/articles/paving-website-public-pdf-brochure-review) addresses website downloads. This article covers private operational records and AI approval boundaries. ## Classify the records before choosing an AI tool Ask the estimating lead to inventory a representative project. Include the invitation, plans, addenda, quote versions, site photographs, access instructions, customer correspondence, and handover material. Record who owns each item and what the firm may do with it. Use separate classifications for public material, internal business information, confidential project documents, and records excluded from the AI workflow. Classification should control access at the file connection. A sentence asking the model to be careful is insufficient as the only control. The FTC recommends restricting sensitive personal information to people with a business need. Use that principle when assigning access. [FTC information guide, checked 2026.10.26](https://www.ftc.gov/business-guidance/resources/protecting-personal-information-guide-business). Do not connect the whole shared drive to a function that needs one approved package. Have the maintainer demonstrate the permitted folder and an attempted read outside it. Use harmless files for that check. ## Keep site access and payment secrets outside the model As a company rule, exclude alarm codes, gate credentials, door combinations, account passwords, and payment credentials from drafting inputs. The office can provide an internal project reference and arrange access through its existing authorized process. Separate payroll files and employee identity documents from estimating material. A progress draft should not inherit them because they happen to share a project folder. Inspect attachments and exported notes for copied private fields before enabling a connection. Where cards are handled, PCI DSS prohibits retaining card verification codes after authorization. That prohibition also applies to encrypted storage. [PCI Security Standards Council FAQ 1280, checked 2026.10.26](https://www.pcisecuritystandards.org/faqs/1280/). Keep card collection in the approved payment process. Give the office function only an authorized administrative status when needed. A model preparing a quote follow-up does not need the card number or verification code. If a customer sends an excluded detail in free text, route the record to a restricted human queue. Do not repeat it in a model error message or cost receipt. ## Treat commercial bid files as a separate access decision Require the estimator to approve each document package for the named function. Check the client's sharing terms and the proposed service's processing conditions before any confidential file leaves business-controlled storage. The approval record should name the project, package revision, purpose, outside processor, retention settings, and permitted users. Obtain a decision on subcontractor material separately when its terms differ. A file arriving by email does not answer those questions. Retain the source title, issue date, and revision with every extracted passage. Keep original files available to the estimator. Do not let a generated summary replace the accepted project package. Test a package with an unrelated attachment. The function should identify the mismatch and stop or omit it under the approved rule. Require the reviewer to see what was excluded and why, without exposing its contents unnecessarily. ## Define who approves each outward statement Use an approval matrix that names a person or office role. Replace the examples below with the company's actual responsibilities. | Output | Required reviewer | Stop condition | | --- | --- | --- | | Bid clarification | Estimator | Unresolved drawing revision | | Quote follow-up | Estimating lead | Changed scope or price | | Progress message | Project manager | Conflicting field notes | | Aftercare attachment | Qualified technical reviewer | Unknown material or instruction version | | Public project description | Business owner | Missing factual support or permission | Approval should identify the exact text, attachments, recipient, project, and source version. Recheck the draft after any material change. Keep sending permissions with the person or separate controlled process that executes the action. A rejected draft remains rejected. Store the reason and assign the correction. Avoid an automatic retry that changes wording until the output slips through a weaker review. ## Keep licensing and technical judgments with their owners An AI draft should not select a pavement design, certify site suitability, approve a mix, or announce that work meets an inspection requirement. Require qualified staff to supply the relevant technical statement and its supporting record. For a jurisdiction example, North Carolina's general contractor board provides license search and classification resources. Use the relevant authority for the actual project location. [North Carolina Licensing Board for General Contractors, checked 2026.10.26](https://www.nclbgc.org/). This source identifies the licensing authority. It does not establish your firm's status or determine which license a particular job requires. Have the responsible person resolve that question before a draft names a credential. Keep inspection status tied to the official project record. A crew note saying the inspector visited should not become an approval statement. Require the same restraint for completion dates and warranty language. ## Cap model spend by office function Give bid revision review, quote follow-up, and progress drafting separate budget lines. Name the monthly ceiling, alert threshold, person receiving alerts, and behavior when capacity is exhausted. Avoid one invisible pool for every office experiment. Require a pre-run allowance that includes document reading, model requests, tool charges, and permitted retries. Reserve that allowance before starting. Concurrent runs must count against the same remaining balance. When the estimate exceeds available capacity, queue the work for a person. Do not silently switch to another paid account. A warning that nobody reads is not a spending limit. Keep a receipt for each attempt. Include function name, run identifier, source references, model identifier, measured cost, reserved amount, and final status. Retain a pending cost when the final charge is unavailable. Resolve it against billing records before releasing the reservation. Review costs beside the accepted output count and unresolved exceptions. A cheap unreadable summary is still a failed function. A repeated input error needs a source correction before another paid attempt. ## Test the rules before using real project records Prepare a synthetic paving package with an old drawing, a current addendum, a copied access code, and contradictory progress notes. Define the expected behavior for each item before the builder runs the test. Require the code to stay out of model inputs and logs. Require the revision conflict to reach the estimator. Require the progress draft to withhold a completion claim. Check the resulting stored files, rather than accepting a description of intended behavior. Repeat a case with the spending limit exhausted. The function should stop before new paid work and leave an understandable receipt. Test an unavailable model and a rejected draft as separate cases. Have the office coordinator practice recovery. They should locate the input record, identify the failed rule, and route the work to a person. The system needs a usable manual path when model work stops. ## Preserve corrections and handoff evidence Store approved rules, acceptance cases, and receipts in readable files the business controls. Identify the maintainer who updates them when a client changes document terms or the office changes its process. Before switching models, repeat the bid revision and excluded-data tests. Keep the model identifier in each receipt without tying the operating instructions to a single supplier. Teach the estimator how to reject an output and record the correction. Scale With Search scopes [AI systems](/ai-systems) by working function. Send the proposed function, document boundaries, approval matrix, and acceptance cases through the [written scope form](/work#send-your-brief). Continue the website review: [AI-native paving: the first functions to build](/articles/ai-native-paving-first-functions); [Paving before-and-after photos: explain the work shown](/articles/paving-contractor-before-after-website-photos); [How should a paving contractor reply to a negative review?](/articles/paving-contractor-negative-review-reply); [Paving contractor SEO: separate the services you sell](/articles/paving-contractor-seo-service-pages); [Which paving services belong on your Google profile?](/articles/paving-google-business-profile-services); [How to build an aftercare library for a paving website](/articles/paving-website-aftercare-guides); [Paving website call tracking: check who receives the call](/articles/paving-website-call-tracking-number-check); [How should a paving website receive commercial bid files?](/articles/paving-website-commercial-bid-document-uploads); [Should your paving website have a driveway cost calculator?](/articles/paving-website-driveway-cost-calculator); [Paving estimate form: collect a request the office can use](/articles/paving-website-estimate-request-form); [Paving website PDFs: check public brochures before indexing](/articles/paving-website-public-pdf-brochure-review); [What should your paving website say outside the season?](/articles/paving-website-seasonal-estimate-requests). [paving, concrete, and flooring contractors](/for/paving): website and search resources. ## Related: paving, concrete, and flooring contractors - [Paving before-and-after photos: explain the work shown](/articles/paving-contractor-before-after-website-photos) - [How should a paving contractor reply to a negative review?](/articles/paving-contractor-negative-review-reply) - [Paving contractor SEO: separate the services you sell](/articles/paving-contractor-seo-service-pages) ---- ```text .|########||. .|########||. .|########||. |##||. .||##|. |##||. .||##|. |##||. .||##|. |#|. .|#|. |#|. .|#|. |#|. .|#|. |#| |#| |#| |#| |#| |#| .#| |#. .#| |#. .#| |#. .#. .#| .#. .#| .#. .#| |#. .#| |#. .#| |#. .#| |# ...... #| |# ...... #| |# ...... #| .# ||#########| #| .# ||#########| #| .# ||#########| #| .#. |######||######|. .#. .#. |######||######|. .#. .#. |######||######|. .#. #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# # .||####|###########################|. # # .||####|###########################|. # # .||####|###########################|. # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || #. .######|#|#########| .# #. .######|#|#########| .# #. .######|#|#########| .# .#. |#####||||#####| .#. .#. |#####||||#####| .#. .#. |#####||||#####| .#. |# ||########|| #. |# ||########|| #. |# ||########|| #. |# ...... #| |# ...... #| |# ...... #| |#. .#| |#. .#| |#. .#| |#. .#. |#. .#. |#. .#. .#| |#. .#| |#. .#| |#. |#| |#| |#| |#| |#| |#| .|#|. .|#|. .|#|. .|#|. .|#|. .|#|. |##||. .||##| |##||. .||##| |##||. .||##| .||########||. .||########||. .||########||. Scale With Search 2026 [scalewithsearch.com](https://scalewithsearch.com) ```