A 30-person AI agency spent 11 months pursuing a deal with a publicly traded insurance company. The initial champion was the VP of Claims Operations who saw an opportunity to reduce claims processing time by 40% using AI. The agency navigated presentations to the CTO, the CISO, the Chief Data Officer, the procurement team, the legal department, and ultimately the CFO who controlled discretionary technology budgets. They completed a security review, a vendor risk assessment, a proof of concept, and a competitive evaluation against two larger consulting firms. When the $420K contract was finally signed, it represented the agency's single largest deal — and the beginning of a relationship that would grow to $1.8M over three years across four business units.
Publicly traded companies are the whales of AI services purchasing. They have the largest budgets, the most complex needs, and the longest sales cycles. They are also the most demanding buyers — governed by regulatory requirements, shareholder expectations, and corporate policies that add layers of complexity to every purchase decision. Agencies that learn to navigate these complexities access deals that can transform their business. Agencies that approach public companies with the same playbook they use for private businesses waste months and close nothing.
How Public Companies Buy AI Services
The Regulatory and Governance Context
Public companies operate under constraints that private companies do not face.
SOX compliance: The Sarbanes-Oxley Act requires public companies to maintain internal controls over financial reporting. Any AI system that touches financial data, customer data, or operational data that flows into financial reports must pass SOX compliance review.
SEC disclosure obligations: Material technology investments may require disclosure. This means the purchasing decision for a large AI engagement may involve the investor relations team and outside counsel advising on disclosure implications.
Board oversight: Public company boards increasingly exercise oversight of AI strategy, data governance, and technology risk. Large AI investments may require board-level briefing or approval, particularly if the AI system involves customer-facing applications or sensitive data.
Audit requirements: External auditors may review significant technology investments. Your AI solution may need to demonstrate auditability — the ability to explain model decisions, trace data lineage, and maintain logs that satisfy auditor requirements.
Data privacy regulations: Public companies face intense scrutiny on data privacy. GDPR, CCPA, and industry-specific regulations like HIPAA and GLBA create compliance requirements that your AI solution must address explicitly.
The Public Company Buying Committee
Public company AI purchases involve more stakeholders than any other buyer type. Expect 8-15 people to influence the decision.
Executive sponsor: The C-suite leader who champions the AI initiative. Without executive sponsorship, deals over $100K rarely close in public companies. The executive sponsor navigates internal politics and secures budget allocation.
Business unit leader: The person who owns the operational area where AI will be deployed. They define requirements, evaluate proposals, and measure success. They are typically your most engaged stakeholder.
CTO/CIO office: Reviews technology architecture, integration requirements, and alignment with the enterprise technology strategy. They evaluate whether your solution fits their technology standards and roadmap.
Chief Data Officer: Evaluates data governance implications, data quality requirements, and alignment with the company's data strategy. Increasingly, CDOs have significant influence over AI purchasing decisions.
CISO: Conducts security review of your solution, your company, and your data handling practices. The CISO has effective veto power over any AI deal that touches sensitive data.
Legal department: Reviews contract terms, intellectual property provisions, liability, and regulatory compliance. Public company legal reviews are extensive and can add 4-8 weeks to the sales cycle.
Procurement: Manages the vendor selection process, negotiates commercial terms, and ensures compliance with purchasing policies. In public companies, procurement is a formal function with defined processes and policies.
Finance/FP&A: Evaluates the financial justification, ROI projections, and budget allocation. They may require a formal business case document.
Internal audit/risk management: Assesses vendor risk, operational risk, and compliance risk associated with the AI engagement.
Preparing to Sell to Public Companies
Credibility Requirements
Public companies evaluate AI agencies on criteria that smaller buyers do not consider:
Insurance: Carry professional liability (errors and omissions) insurance of at least $2M, general liability insurance, and cyber liability insurance. Public companies will not work with uninsured vendors. Some require $5M+ in professional liability coverage.
Security certifications: SOC 2 Type II certification is effectively mandatory for public company deals. ISO 27001 certification adds additional credibility. If you do not have these certifications, invest in obtaining them before pursuing public company clients.
Financial stability: Public companies may request financial statements or evidence of financial viability. They need assurance that you will be in business for the duration of the engagement and beyond.
References: Public company buyers want references from other public companies. Each public company reference you build makes the next deal easier. Your first public company client is the hardest to win.
Data handling practices: Documented data classification, data retention, data destruction, and data breach notification procedures. Public companies will review these documents during vendor assessment.
Building Your Public Company Sales Kit
Prepare these materials before pursuing public company prospects:
- Company overview with history, team bios, and financial summary
- Security documentation including SOC 2 report, security policies, and incident response plan
- Case studies from comparable engagements with quantified outcomes
- Technical architecture documentation showing how your solution integrates with enterprise environments
- Standard contract templates reviewed by your own legal counsel
- Insurance certificates ready to share on request
- Vendor assessment questionnaire responses for common questionnaire formats (SIG, CAIQ, custom)
- Data privacy impact assessment template for AI solutions
The Public Company Sales Process
Stage 1 — Access and Entry (Months 1-2)
Getting your first meeting with a public company decision-maker requires strategic entry points.
Entry strategies that work:
- Industry events: Public company leaders attend industry conferences. Building relationships at events is the most natural entry point.
- Board and advisor networks: Public company board members and advisors often recommend vendors. Build relationships with people who sit on public company boards.
- Analyst recommendations: Industry analysts at firms like Gartner, Forrester, and IDC influence public company technology decisions. If analysts recommend your firm, public companies notice.
- Partner ecosystem referrals: Cloud providers (AWS, Azure, Google Cloud), system integrators, and enterprise software vendors refer AI agencies to their public company customers.
- Published thought leadership: Public company decision-makers research thoroughly before engaging vendors. Being cited in relevant publications, speaking at industry events, and publishing authoritative content builds awareness.
Initial meeting objectives: Your first meeting with a public company prospect should accomplish three things:
- Understand their strategic AI priorities and current initiatives
- Identify the specific business problem or opportunity driving their interest
- Map the initial stakeholder landscape — who influences the decision
Stage 2 — Discovery and Qualification (Months 2-4)
Public company discovery is a multi-meeting process that unfolds over weeks.
Business discovery: Conduct separate discovery sessions with the business unit leader (operational needs), the technology team (architecture requirements), and the executive sponsor (strategic priorities). Each stakeholder group has different information and different evaluation criteria.
Qualification criteria for public company deals:
- Is there executive sponsorship at the VP level or above?
- Is there an identified budget or a budget request in progress?
- Is the AI initiative aligned with a stated corporate priority?
- Has the company invested in data infrastructure that supports AI?
- Is there a defined timeline tied to a business event or strategic milestone?
- Are you able to meet their security, compliance, and insurance requirements?
If you cannot answer yes to at least five of these six questions, the deal is not worth pursuing. Public company sales cycles are too long and too expensive to invest in unqualified opportunities.
Competitive landscape: Public companies almost always evaluate multiple vendors. Expect to compete against one or two of the following: large consulting firms (Deloitte, Accenture, McKinsey), specialized AI firms of similar or larger size, cloud provider professional services (AWS, Azure, Google Cloud), or internal build proposals. Understand who you are competing against and how you differentiate.
Stage 3 — Proof of Value (Months 4-6)
Public companies typically require proof of value before committing to a full engagement.
Paid proof of concept: Propose a 4-8 week paid PoC with a budget of $30K-$75K. The PoC should have clearly defined success criteria agreed upon by both parties. Never agree to a free PoC for a public company — free work signals desperation and devalues your expertise.
PoC success criteria: Define metrics that are meaningful, measurable, and achievable within the PoC timeframe. Avoid vague criteria like "demonstrate AI potential." Instead, use specific targets: "Process 1,000 insurance claims with 92%+ accuracy and 50%+ reduction in average processing time."
PoC to full engagement conversion: Structure the PoC so that success naturally leads to a full engagement. The PoC should address a real business need (not a toy problem), use real data (not synthetic), and involve real stakeholders (not just the technical team). A well-designed PoC converts to a full engagement 60-75% of the time.
Stage 4 — Proposal and Evaluation (Months 6-8)
The formal proposal: Public company proposals are comprehensive documents, typically 20-40 pages covering:
- Executive summary with business case and ROI
- Current state assessment
- Proposed solution architecture and approach
- Implementation methodology and timeline
- Team composition and qualifications
- Risk assessment and mitigation
- Pricing and commercial terms
- References and case studies
- Security and compliance documentation
- Service level agreements
Evaluation process: Public companies evaluate proposals through formal scoring processes. Common evaluation criteria include:
- Technical capability and approach (25-30% weight)
- Relevant experience and references (20-25% weight)
- Team qualifications (15-20% weight)
- Pricing and commercial terms (15-20% weight)
- Security and compliance (10-15% weight)
Presentations and demonstrations: Expect to present your proposal to multiple stakeholder groups — a business presentation for leadership, a technical deep-dive for the technology team, and a security review for the CISO and risk management team.
Stage 5 — Procurement and Contract (Months 8-11)
This is the stage that catches most agencies off guard. After you have been selected as the preferred vendor, the procurement and legal process can take 2-4 months.
Procurement process: Public company procurement involves vendor registration, commercial negotiation, legal review, security assessment, and executive approval. Each step has its own timeline and requirements.
Contract negotiation: Public companies will negotiate extensively on:
- Indemnification: They will push for broad indemnification against third-party claims arising from your AI solution. Negotiate scope carefully.
- Liability caps: They may resist liability caps or push for caps that exceed your insurance coverage. Standard practice is to cap liability at 2-3x the contract value.
- IP ownership: Most public companies expect to own all work product. Protect your pre-existing IP and general methodologies through clear carve-outs.
- Data handling: Extensive data processing agreements covering data storage, transfer, retention, destruction, and breach notification.
- Performance guarantees: SLAs with specific uptime, accuracy, and response time commitments.
- Termination provisions: Both termination for convenience and termination for cause, with defined transition assistance obligations.
Accelerating procurement: Build relationships with procurement contacts early in the process. Provide complete and accurate documentation on the first request. Respond to questions within 24 hours. Anticipate common requirements and prepare responses in advance.
Managing Public Company Relationships
Governance and Reporting
Public company clients expect formal governance structures:
Steering committee: Establish a monthly steering committee meeting with senior stakeholders to review progress, discuss challenges, and make strategic decisions.
Status reporting: Provide weekly written status reports covering accomplishments, plans, risks, and issues. Use formats that align with the client's internal reporting standards.
Change management: Formal change order processes for scope changes. Document every change request, its impact on timeline and budget, and the approval from the appropriate authority.
Expansion Within Public Companies
Multi-business unit expansion: Public companies have multiple business units, each with independent budgets and priorities. Success in one business unit creates opportunities to expand to others. Build relationships across business units from the beginning.
Contract vehicles: Establish a master service agreement (MSA) that makes it easy to add new statements of work. An MSA eliminates the need to repeat the full procurement process for each new engagement.
Internal advocacy: Your champion within the client organization is your most valuable asset. Support them by providing materials they can use to advocate for your work — executive summaries, ROI reports, and success metrics that they can present to their leadership.
Your Next Step
This week: Assess your readiness for public company sales. Do you have SOC 2 certification, adequate insurance coverage, and documented security practices? Identify the gaps and create a plan to address them. Research 10 publicly traded companies in your target vertical.
This month: Begin building entry points to public companies — attend an industry event where public company leaders will be present, reach out to analyst firms covering AI in your vertical, and connect with cloud provider partner programs. Prepare your public company sales kit.
This quarter: Secure initial meetings with 3-5 public company prospects. Conduct thorough discovery and qualification. Submit at least one formal proposal. Begin building the reference base and credibility signals that accelerate future public company sales.