TIMEWELL
Solutions
Free ConsultationContact Us
TIMEWELL

Unleashing organizational potential with AI

ISO/IEC 27001 (ISMS) certification mark (SGS / ISMS-AC)

ISO/IEC 27001:2022 certified Certificate No. JP26/00000255 Scope: Planning, development and operation of SaaS products utilizing AI technology

Services

  • ZEROCK
  • TRAFEED
  • TIMEWELL BASE
  • WARP
  • WARP 1Day
  • WARP NEXT Corporate
  • WARP BASIC
  • WARP ENTRE
  • Alumni Salon
  • WARP for Schools
  • FDE
  • AI Consulting
  • ZEROCK Buddy
  • EMC GLOBAL

Company

  • About Us
  • Team
  • Why TIMEWELL
  • News
  • Contact
  • Free Consultation

Content

  • Insights
  • Knowledge Base
  • Case Studies
  • Whitepapers
  • Events
  • Solutions
  • AI Readiness Check
  • ROI Calculator

Legal

  • Privacy Policy
  • Manual Creator Extension
  • WARP Terms of Service
  • WARP NEXT School Rules
  • Legal Notice
  • Security
  • Anti-Social Policy
  • ZEROCK Terms of Service
  • TIMEWELL BASE Terms of Service

Newsletter

Get the latest AI and DX insights delivered weekly

Your email will only be used for newsletter delivery.

© 2026 株式会社TIMEWELL All rights reserved.

Contact Us
HomeColumnsWARPHow Far to Insource AI: Drawing the Line Against Outsourcing
WARP

How Far to Insource AI: Drawing the Line Against Outsourcing

Published2026-09-20Ryuta Hamamoto
Generative AIInsourcingAI AdoptionOutsourcingCapability BuildingWARP

Insourcing is a means, not an objective. You do not need everything in house, and handing it all over causes its own problems. Two axes settle it: how often it changes, and how much your own operational knowledge matters. IPA found 85.5% of Japanese firms short of people to drive DX. Given that, here is how to decide what sits inside.

How Far to Insource AI: Drawing the Line Against Outsourcing
Share

Hello, this is Ryuta Hamamoto from TIMEWELL.

"We should be insourcing AI, right?"

I get asked this a lot, and it is hard to answer. Insourcing is a means, not an objective, so the answer depends on what it is a means to.

You do not need everything in house. Equally, handing it all over causes its own problems. The question is where the line goes. This piece is about drawing it, from the buyer's side.

The short version:

  • Insourcing is not the objective. The axes are how often it changes, and how much operational knowledge matters
  • Almost no company needs to build its own model
  • Assume you are short of people. 85.5% of firms are short of people to drive DX
  • When outsourcing, ask for the reasoning, not just the deliverable
  • The core of insourcing is not technical capability. It is holding the ability to decide

The word covers too much ground

Split the term first. "Insourcing AI" mixes about five different layers.

1. Building the model. Training a foundation model in house. Almost no company needs this. The costs and the people are an order of magnitude apart.

2. Tuning a model on your own data. Additional training, fine-tuning. Worth checking first whether retrieval gets you there.

3. Building the application. Screens and processing fitted to the work. This is where you build if nothing off the shelf fits.

4. Embedding it in the work, and operating it. Where in the process it gets used, where a human checks, what happens when accuracy degrades.

5. Deciding how it gets used. What to delegate, what not to, how to verify output.

Insourcing debates go in circles because people are talking about different layers. For most companies, 4 and 5 are what matter, and 1 and 2 are irrelevant.

And 4 and 5 are the layers that are intrinsically hard to outsource, because they cannot be decided without knowing the business.

Two axes are enough

I keep the criteria simple. Two axes.

Axis 1: does it change often?

Anything you want to adjust weekly belongs inside. If a single change needs a quotation, a purchase order, and two weeks, improvement stops.

Getting value out of AI never works first time. Adjust the prompt, swap out the reference material, change the review step. The number of those small loops determines the outcome. If every loop requires external capacity, you cannot run enough of them.

Conversely, insourcing something you touch once a year buys you almost nothing.

Axis 2: can it be decided without operational knowledge?

"Is this quotation reasonable?" "Is this the right way to phrase it for this customer?" "Can this step be skipped?" An outsider cannot make these calls, and teaching the basis for them is itself hard.

Meanwhile, "which model do we use," "how is the infrastructure configured," "how does authentication work" can all be settled without knowing the business. Those go outside without issue.

Split on those two and it usually falls out like this.

Changes often Changes rarely
Needs operational knowledge Insource (top priority) Lean insource; keep the criteria inside
No operational knowledge needed Insource, or an outsourcer who can move fast Outsource

Top left is what belongs inside. And because that is about operational knowledge rather than technical skill, it usually sits with people close to the work rather than with IT.

Looking for AI training and consulting?

Learn about WARP training programs and consulting services in our materials.

Book a Free ConsultationDownload Resources

Being short of people is the premise

Every insourcing discussion reaches "we don't have the people."

Which is true. In IPA's survey published in July 2026, covering 1,799 Japanese companies, 85.5% described themselves as somewhat or severely short of people to drive DX1.

The same survey shows a majority reporting shortages across most categories of AI-related talent, with a persistently high shortage of employees who combine operational knowledge with basic AI literacy and can drive AI adoption inside the company1.

That is precisely the profile needed for the top-left box. The scarcest capability is the one that most needs to sit inside.

Which inverts the conclusion. Being short of people is a reason not to insource everything. Concentrate the few you have in the top left and send the bottom right out. Try to bring it all inside and nobody is left where it matters.

When outsourcing, ask for the reasoning

For the part that goes out, settle something at contract time.

Ask for the reasoning, not just the deliverable.

Being given something that works is table stakes. The issue is what comes after: without why the design is what it is, and what was tried and rejected, every future change starts with explaining everything from scratch.

Concretely, put these in the contract:

  • Documentation including the rationale for design decisions
  • Options considered and rejected, with reasons
  • The metrics to watch in operation, and what to do when they degrade
  • Enough information for a different supplier to take over

The fourth matters. Do not create a state only one company understands. This is not about distrust — people move on, and strategies change.

One more. Always have at least one person from your side working alongside them. Hand it all over and receive only the deliverable, and the next change is another procurement. With one person who was in the room, you have an internal point of contact, and the next engagement gets smaller.

The core of insourcing is not technical skill

This is the part I most want to land.

Insourcing is usually pictured as hiring engineers so you can build things. That is part of it. It is not the core.

The core is holding the ability to decide.

  • You can decide for yourselves which processes to apply it to
  • When it does not work, you can form a hypothesis about why
  • You can judge whether a vendor's proposal is reasonable
  • You can judge when to stop

Get those four and you are effectively insourced even with the implementation outside. Conversely, if you build everything in house but let a vendor decide what it is for, that is not insourcing.

Getting to the point of judging requires some hands-on exposure. Outsource everything and that exposure never happens. That is the real cost of handing it all over: not the missing technical skill, but the judgement that never develops.

How to start

A realistic sequence.

1. Inventory what currently goes outside. What, at what cost, changed how often. Anything where changes take a long time is an insourcing candidate.

2. Pick one top-left item. Changes often, needs operational knowledge — exactly one. Bringing several inside at once usually fails.

3. Name one person and protect their time. Part-time on top of everything else does not move. State how many hours a week.

4. Ask the supplier to work alongside you. Not "please do all of it" but "do it with us so we can do it next time." That changes the contract, so raise it at the start.

5. Once it runs, pick the next one. One at a time, in sequence.

There is more on pilots in getting out of PoC limbo, and on organisational retention in why generative AI does not stick.

Through WARP we work in that "do it together so you can do it next time" shape. It takes longer than building and delivering, and the right outcome is that the next engagement is smaller.

In summary

  • Insourcing is not the objective. The axes are frequency of change and operational knowledge
  • Almost no company needs to build its own model
  • Assume a shortage. 85.5% are short of people to drive DX
  • Because of that shortage, do not insource everything. Concentrate the few in the top left
  • Outsourcing should yield the reasoning, in a state another supplier could pick up
  • The core of insourcing is holding the ability to decide, not technical skill
  • Start with exactly one, with a named owner and protected time

To talk through where your line should sit, get in touch.

References

Footnotes

  1. Key points on DX and AI adoption trends among Japanese companies (IPA, 16 July 2026, Japanese). The combined 85.5% describing themselves as somewhat or severely short of people to drive DX, and the persistently high shortage of employees combining operational knowledge with basic AI literacy, come from this material. 1,799 responses, fielded 17 April to 12 June 2026 ↩ ↩2

This article was produced with the help of AI. A human verified the primary sources and edited the text before publication.

Considering AI adoption for your organization?

Our DX and data strategy experts will design the optimal AI adoption plan for your business. First consultation is free.

Book a Free Consultation
Book a Free Consultation45-minute online sessionDownload ResourcesProduct brochures & whitepapers

Share this article if you found it useful

Share

Newsletter

Get the latest AI and DX insights delivered weekly

Your email will only be used for newsletter delivery.

Related Knowledge Base

AI Adoption Roadmap

Solutions

AI Adoption & DX SupportEnd-to-end support from strategy to adoption

Learn More About WARP

Discover the features and case studies for WARP.

Contact UsView WARP Details

Related Articles

Getting Out of PoC Limbo: Decide the Exit First

Getting Out of PoC Limbo: Decide the Exit First

A proof of concept that goes nowhere is rarely a failure of enthusiasm or technology. It is a failure to define, before starting, what would justify going to production. In IPA's 2026 survey of Japanese firms, 91.6% reported AI made work faster; 3.9% reported higher revenue or profit. That gap is what PoC limbo actually looks like.

2026-09-20
Should You Cancel Your Expensive SaaS and Build It Yourself? Seven Tests for the AI Era

Should You Cancel Your Expensive SaaS and Build It Yourself? Seven Tests for the AI Era

For IT heads, corporate planning teams, and CFOs who opened a SaaS renewal quote and thought "we could build this for less," here are seven tests for deciding whether to cancel a SaaS you already pay for and build a replacement in-house: price increases and currency exposure, per-seat pricing growth, how slowly the data and features change, legal and accounting complexity, the number of integrations, who will maintain it, and the cancellation and migration terms. It does not hide the evidence on the other side, including public guidance that favors SaaS and research showing AI-assisted development can be less stable. The first article in a five-part series.

2026-09-29
Running Business Apps in Your Own Cloud Tenant: Access, Data Location, and Personal Data

Running Business Apps in Your Own Cloud Tenant: Access, Data Location, and Personal Data

If you are dropping a SaaS product and building the business app yourself, my view is that it usually runs better inside your own cloud environment, your own tenant. The fifth and final article in this series covers how that differs from multi-tenant SaaS, what you gain in identity, access, data integration, and audit logs, why "who can touch the data" rather than where it sits decides whether Japan's APPI treats a vendor as an entrusted party, why choosing a Tokyo region does not remove the duty to understand foreign rules, and how operational responsibility shifts to you. It draws on NIST, AWS, the Japanese Personal Information Protection Commission's Q&A and the 2026 APPI amendment, and ISO/IEC 27001.

2026-09-29
Which Business Systems Can You Build Yourself? Sort Them by How Often the Data Changes

Which Business Systems Can You Build Yourself? Sort Them by How Often the Data Changes

Internal FAQs, ledgers, and intranet portals rarely change their data, and with generative AI they have become realistic to build and own yourself. But read plainly, Gartner's pace-layered model says the opposite: slow-changing systems of record belong on standard packages. This article adds a second axis, weight (complexity, volume, and regulation), sorts business functions into four groups, and gives a quick-reference table showing what to build and what, like accounting and payroll, should stay on SaaS.

2026-09-29
Why Generative AI Does Not Stick Inside Companies

Why Generative AI Does Not Stick Inside Companies

Usage is no longer the problem. Japan's 2026 information and communications white paper puts the share of firms intending to use generative AI at 68.9%. Yet 27.0% report no organisational effort around transforming how work is done. People are using it and nothing is changing, because the practice stays private to individuals. Here is what to put in place instead.

2026-09-20
Is Jev Enterprise-Ready? Reading the Terms and the DPA

Is Jev Enterprise-Ready? Reading the Terms and the DPA

Getting an API key and running a sample takes thirty minutes. Answering "can we put our data in this?" takes reading the terms. Here is what TypeSafe AI's terms, privacy policy, DPA, and trust center actually say, and where the line sits. One trap: the published terms of use cover the website only.

2026-09-20