Blog · Essay · AI budget and data foundation

AI budget and data foundation: What breaks when the data base isn’t ready

Accounting Finance
"Accounting Finance" by Wilfred Iven is marked with CC0 1.0. To view the terms, visit https://creativecommons.org/publicdomain/zero/1.0/.

In a recent conversation about the partnership between Singapore Management University and Legora to bring agentic AI to its law school, the headline Singapore Management University partners with Legora to bring agentic AI to its law school, the press release celebrated the AI‑first curriculum. What the announcement didn’t mention was the behind‑the‑scenes data work that had to be re‑engineered before any model could be trusted in a classroom. That is the gap I see repeatedly when CEOs approve larger AI budgets while the data foundation is still a patchwork.

In this essay I’ll walk through a recent client failure, the symptoms that should have raised red flags, and a concrete set of actions you can take on Monday to protect your investment.


1. The hidden cost of a rushed AI budget

When a CEO signs off on a $10‑million AI spend, the first line item is usually the model‑building team, cloud compute, and a few data scientists. The data foundation—catalogues, quality checks, lineage, and governance—often stays in the “we’ll get to it later” pile. That assumption is dangerous for three reasons:

  1. Bad data multiplies cost – Every hour a data engineer spends cleaning a dataset that should have been vetted earlier is an hour that eats into the model‑training budget.
  2. Compliance risk – In regulated sectors, a single mis‑labelled column can trigger an audit that stalls the entire rollout.
  3. Operational shock – When the model goes live, downstream systems can break if they receive unexpected data shapes.

The pattern is the same whether you’re a mid‑market SaaS company or a multinational bank. The data foundation is the floor; without it, the AI budget builds a house of cards.


2. What actually broke: a client case study

A fintech client of mine decided in Q1 2025 to double its AI budget to accelerate credit‑risk scoring. The plan was simple on paper: ingest more transaction data, train a deeper neural network, and push the model into production by Q3.

What we discovered on day 12 of the sprint:

  • Schema drift – The ingestion pipeline pulled raw CSV files from three legacy vendors. Two of them had added a new column “promo_code” without notifying the data team. The model’s feature matrix expected exactly 27 columns; the extra column caused a runtime exception that halted the training job.
  • Stale master data – Customer master records were stored in a separate Oracle instance that was refreshed only monthly. The model required up‑to‑the‑minute KYC flags, but the data lag meant 15 % of records were missing critical risk tags.
  • Privacy blind spot – A GDPR audit flagged that the data pipeline was moving personal identifiers (full name, national ID) into a sandbox that was not encrypted. The ISO 27001 auditor I work with immediately halted the pipeline.

The immediate impact was a three‑month delay, a $1.2 million overrun, and a loss of confidence from the board. The root cause? The data foundation had never been audited against the upcoming AI scope.


3. Monday‑day checklist: inspect before you spend

If you are about to approve a larger AI budget, spend the first half‑day of the next week running through this list. Treat it as a non‑negotiable gate before any additional spend is released.

  1. Data inventory audit – Pull a list of every source that will feed the AI model. Verify schema, refresh cadence, and ownership. Use a lightweight data catalog tool (e.g., the open‑source framework highlighted in the Weiser AI‑friendly data quality framework).
  2. Quality baseline – Run a data‑quality test suite on a representative sample. Look for null‑rate spikes, out‑of‑range values, and duplicate primary keys. Document the findings.
  3. Lineage mapping – Draw a simple diagram that shows how raw data moves to the feature store, then to the model training environment. Identify any manual hand‑offs.
  4. Compliance snapshot – Cross‑check each data source against GDPR, CCPA, or local regulations. Flag any personal identifiers that are not encrypted at rest.
  5. Compute‑to‑data ratio – Estimate how much compute you need relative to the volume of clean data. If the ratio looks unusually high, you probably have hidden data‑quality work.
  6. Stakeholder sign‑off – Get a brief written acknowledgment from the data owner that the inventory and quality baseline are accurate.

Completing this checklist will surface the same issues that derailed the fintech client, giving you the chance to fix them before the next budget cycle.


4. Building a resilient data pipeline

Once the audit is done, you need a pipeline that can survive change. Here are three pragmatic steps that have worked across industries:

a. Schema‑tolerant ingestion

Instead of hard‑coding column positions, use a schema‑registry (e.g., Confluent Schema Registry) that validates incoming records against a versioned contract. When a vendor adds a column, the contract can be updated without breaking downstream jobs.

b. Incremental master‑data sync

Move from monthly full dumps to change‑data‑capture (CDC) streams. CDC tools keep master data fresh with sub‑hour latency, eliminating the stale‑record problem that plagued the fintech model.

c. Automated privacy enforcement

Apply field‑level encryption at the source. Open‑source tools like Dingo can scan incoming payloads and automatically mask or encrypt identifiers before they hit the lake.

These technical knobs reduce the chance of a surprise break‑age when the model goes live.


5. Governance that scales with the budget

A larger AI budget often means more teams, more vendors, and more data. Governance must evolve from a “check‑list” mindset to an ongoing risk‑management process.

  • Data stewardship council – Convene a quarterly forum of data owners, security leads, and product managers. The council reviews any new source or schema change.
  • Continuous audit – As an ISO 27001 Lead Auditor, I recommend embedding automated audit logs that capture who accessed which dataset and when. These logs feed into your SIEM for real‑time alerts.
  • Performance guardrails – Define acceptable drift thresholds (e.g., <2 % change in feature distribution month‑over‑month). If drift exceeds the guardrail, the pipeline automatically triggers a re‑validation run.

By institutionalising these practices, the data foundation becomes a living asset rather than a one‑off project.


6. The human side: aligning expectations

CEOs often think the AI budget is a lever for rapid growth. The reality is that a solid data foundation buys time for the model‑building team to experiment without firefighting. Communicate this to your board as a risk‑mitigation line item, not a cost centre.

When I explain the “data‑first” approach, I use a simple analogy: you wouldn’t build a skyscraper on sand. The same principle applies to AI—build on rock, not quick‑sand.


FAQ

What is the minimum data‑quality threshold before training a model?

A practical rule is to aim for less than 1 % missing values in any critical feature and no duplicate primary keys. Anything higher should trigger a data‑cleaning sprint before model work proceeds.

How often should the data inventory be refreshed?

At least quarterly, or whenever a new data source is added. Treat it as a living document that reflects the current AI scope.

Do I need a full‑blown data lake to meet these requirements?

Not necessarily. A well‑governed data warehouse or even a curated data‑mesh can satisfy the audit and lineage needs if you enforce schema‑registry and CDC practices.

Can I outsource the data‑foundation work?

You can, but ensure the vendor provides transparent audit logs and adheres to your compliance framework. A hands‑off approach often re‑introduces the same blind spots.

How does ISO 27001 fit into AI projects?

ISO 27001 gives you a baseline for information‑security controls—encryption, access management, and audit logging. Aligning your AI pipeline with those controls reduces regulatory risk and builds board confidence.


Take the next step

If you’re about to raise your AI budget and want to ensure the data foundation won’t be the weak link, let’s talk. I can walk you through a rapid audit and help you set up the guardrails that keep your AI initiatives on track.

Book a discovery conversation or explore more of my work at the homepage and the blog index.

In the market

Headlines this post is responding to — not invented stats.

AI budget and data foundation: What breaks when the data base isn’t ready | Rohan Girdhani