meiika INDEPENDENT STUDIO
TECHNOLOGY WITH PURPOSE
BLOG · SALES AND ECOMMERCE

A quotation goes out unchecked: how to build a reliable approval workflow

A woman reviews paperwork beside a laptop and calculator.
Illustrative image.

Automating document approval means preparing versions, assigning reviewers and recording decisions without allowing the system to send or change a critical document on its own. For quotations, proposals and contracts, the useful improvement is often clarifying who reviews what and when, rather than asking AI to give the final approval on behalf of the business.

Where does email-based approval break down?

The difficulty starts with an apparently harmless sentence: “Here is the latest version.” Latest for whom? The document may change while another person reviews it. If a proposal goes out with previous terms, the business must explain the mistake to the customer even if nobody acted in bad faith.

Imagine an architecture studio preparing proposals with technical appendices. Sales adjusts scope, the technical team checks dimensions and management reviews conditions. Each person comments on a different file. At sending time, nobody knows which corrections made it into the final document. This is a hypothetical example, not a project attributed to meiika.

An email chain can support a conversation without forming an approval workflow. Questions remain: which version is being validated, who holds the pending decision, what happens if changes are requested and who may send the result? Explicit states make those decisions visible instead of relying on interpretation.

Starting with “we want AI to review quotations” skips an important distinction. Checking formatting, spotting missing facts and approving a commercial commitment are different actions. Only the last accepts conditions on behalf of the business. That action needs a defined authority, not merely a tool capable of reading the document.

Review recent documents that needed corrections. Group the causes: missing information, unchecked figures, wrong version, wrong recipient, unincorporated comments or decisions without an owner. That sample indicates which rules can be automated and where a person's judgement remains necessary. It also makes a trial easier to assess.

Which stages does a document review workflow need?

A useful starting point is draft, review requested, changes pending, approved and sent. The exact number matters less than the permitted transitions. A document needing review should not move straight from draft to sent. Editing it after approval should not leave an outdated approval silently in force.

Give each document a stable identifier and a version. “FINAL” in the filename is insufficient. The approved version must be linked to a specific decision. If scope, amounts or relevant clauses change, request a new review according to the rules agreed for that document type.

Assign reviewers based on the content. A proposal may require technical checking and validation of commercial terms. Not everybody needs to review everything. Too many approvals can stop work; too few let mistakes through. Aim for the minimum sufficient control, and make each reviewer's responsibility understandable.

Separate comments from decisions. “Change the date in the appendix” is an observation. “Approved for sending to the named recipient” is a decision. Record who did each and when, with traceability proportionate to the business. A collection of comments does not automatically establish permission to send.

Provide an authorised substitute or escalation path for absence. An approval stuck in someone's personal inbox moves the risk elsewhere. The substitute should receive the permissions needed for that class of document, rather than unrestricted access to everything the original reviewer could see.

Before automating notifications, agree what constitutes valid approval. Is pressing a button sufficient? Must the recipient be confirmed? Should an appendix be checked? A provisional estimate, binding offer and contract may require different rules. This is general information, not legal or professional advice; specific requirements depend on the case.

How can AI help without becoming the approver?

AI can identify missing fields, compare versions, summarise comments or suggest clearer wording. It may also prepare a checklist for the reviewer. Its role is to reduce reading and organisational work, not certify that a commercial condition is correct. The workflow should show where that responsibility ends.

Suppose a proposal mentions two deadlines in different sections. A system can flag the conflict. If the correct date depends on the team's capacity or a recent conversation, the model should not invent the most likely answer. The reviewer needs an authoritative source to settle the question.

Use the same care with amounts and obligations. Extracting a figure from a document cannot, by itself, establish that it matches the current commercial agreement. Checking requires an authorised reference, such as a project record, approved conditions or the person responsible. Do not treat extraction as verification.

Record the task performed by AI separately from the person's decision. “Reviewed by AI” does not mean “approved”. Proposed edits should be visible and capable of acceptance or rejection. Otherwise the team may be unable to explain whether a change came from a model or an authorised reviewer.

Before sending complete documents to an external service, review processing conditions, permissions and the information included. Files may contain personal data, commercial secrets or confidential terms. The tool assessment should be proportionate to both the contents and the operations the integration will perform.

A useful boundary is that the system may prepare, notify, compare and record. Decisions committing the business should belong to authorised people, unless a particular tightly defined and validated situation permits something else. Do not broaden that exception simply because a model produces a confident answer.

What do the Google Docs and Workspace developments allow?

On 1 October 2026, Google documented new operations for reading and managing document comments through its MCP server in a developer preview. Its release notes also describe replies and suggestions through the Docs API. That does not mean every account has all those functions enabled. Source: Google Docs API release notes, accessed 13 October 2026.

These capabilities can support a process in which a review is recorded in the document and automation prepares the next task. An API creating comments does not decide who can approve, which version is current or what should happen after rejection. Those are workflow rules the business still needs to define.

The 30 September 2026 notes distinguish generally available comments and suggestions operations in the Docs API from the MCP server's developer preview. They are different mechanisms with different availability conditions. Check the chosen integration's permissions and scope before allowing it to act on documents.

A supplier announcement is not a deployed solution. Before selecting an approach, check availability in your edition, administrator permissions, API limits, event recording and export options. A tool may cover only part of the circuit and need another layer of business logic to complete it.

If you already use shared documents, run a small trial: one template, two roles, a request for changes and an approval. Observe where uncertainty arises. The decisive improvement may be preventing a changed version from being sent after approval, rather than adding AI to an already unclear process.

How should you test approval before rolling it out?

Design cases that make the workflow fail in a controlled way: an incomplete document, a reviewer requesting changes, a figure edited after approval, an absent authorised person and a failed send. Testing only the happy path does not show whether the process protects the business in these situations.

For each case, define what should appear on screen, who receives a notice and which action stays blocked. A relevant condition change should mark the earlier approval as no longer applicable. A failed send should not appear as delivery. These states matter more than a reassuring success message.

Check that the reviewer receives enough context without searching through five files. A useful notice identifies the document, version, reason for review and indicative date. It need not replicate sensitive attachments through every channel. Access can be granted through appropriate file permissions instead of copying the information indiscriminately.

Measure observable incidents: documents corrected after sending, reviews returned for missing facts and requests stuck without an owner. Compare similar periods and document types before attributing improvements to a tool. A working trial demonstrates its tested behaviour, not a guaranteed result for every future document.

Test the way out as well: exporting versions and decisions, changing owners and continuing if a supplier becomes unavailable. Documented rules and recoverable data reduce dependence on one implementation. They also give the next person maintaining the process a way to understand what each state means.

How do we approach this at meiika?

At meiika, custom systems start with the business rule: which document is created, who may review it and which actions require authorisation. Automation should keep the status visible and allow intervention.

Where the journey also includes forms, proposals or enquiries, it can connect with a business website without turning every submission into automatic approval. The intended operation defines the integration, not the other way round.

FREQUENTLY ASKED QUESTIONS

Questions worth answering.

Can approval be automated without AI?

Yes. States, notifications, permissions and decision records can use deterministic rules. AI adds value only when it helps with a specific reading or preparation task.

Does a Google Docs comment count as approval?

No. A comment is an intervention on the document. Approval requires an identifiable decision linked to a version. Define that rule in your process.

What happens if someone changes an approved document?

It depends on the business rules, but relevant changes should invalidate approval or reopen review. Retain the previously approved version so events can be reconstructed.

Can every account use these Google Docs functions?

Do not assume so. Some capabilities in the October 2026 notes are in developer preview. Check edition, permissions and availability before designing the implementation.

Do proposals pass through many hands but still contain errors?

Tell us about your situation. We can review the approval journey before selecting the technology.

Sources and references