After watching 150 people across three merged companies all use their own AI tools, I've landed somewhere clear.
You won't win by picking the right LLM. You won't win by buying the right AI suite.
You'll win by drawing a line in the sand around three things — and not caring what anyone does on the other side.
The three things:
I. Your data.
Single source of truth. Whoever owns the database owns the moat.
- Code is commoditized.
- Models are commoditized.
- Your data — invoices, contracts, customer history, ten years of revenue — is the only thing structurally yours.
II. Authentication + a standardized tool set.
This is what MCP is for.
You stand up an MCP server that knows:
- Which operations are allowed against your data (tools)
- By which roles
- In what context
The toolset IS the contract.
III. Brand guidelines on anything that leaves the building.
Anything an agent produces that goes to a client, a partner, the press — has to look like your company. Not Claude's brownish AI-default theme. Yours.
That's the line. That's all I care about as a CTO.
What Lives On the Other Side of the Line
On the other side, I don't care what AI my account executives use.
- Claude Co-Work
- ChatGPT
- A custom thing they built over the weekend
- The next agent Anthropic ships in eight weeks
Whatever they want.
As long as:
- ✅ They pull from the single source of truth
- ✅ They have permission to access it
- ✅ They use the standardized MCP tool set
- ✅ Anything shipping externally meets brand
…they can go as creative as they want.
Build an artifact. Run an agent. Generate a proposal, a deck, a follow-up sequence, a forecast. Have at it.
The intelligence sits on top. The data, the auth, the tools, the brand — those are mine.
This Ends the AI Containment Problem
I wrote in Issue #12 about death by a thousand subscriptions. Five PowerPoint generators in a 150-person org. Three meeting transcribers. A different model running on every laptop.
The line solves it.
Not by banning tools. By making the data only accessible through one door — the MCP — and letting people use whatever they want on top.
They can't bypass the door because the data isn't anywhere else.
There's no shadow IT when the only IT that matters is the data layer.
Containment by gravity, not by policy.
What I'm Watching
- The Startup Ideas Podcast — Greg Eisenberg — best feed I've found for fresh AI startup angles that don't sound like a McKinsey deck. Greg and a rotating cast of operators walk through specific business opportunities every episode — what to build, who to sell it to, why it works now. Practitioner-grade. No "agentic synergy" deck-speak. If you're trying to find the painkillers in the AI gold rush, start here.
- Anthropic — Model Context Protocol — the actual spec. If you're a CTO trying to figure out what the "line" looks like in practice, start here. The whole point is a standardized contract between agents and your data. Free, open, already supported by Claude, Cursor, Zed, and most of the tooling that matters.
What I'm Building
- MediaSignals.ai — this is the line drawn at Q1Media. Seven years of proprietary data: thousands of media plans across hundreds of advertisers, every campaign tagged with what we spent, where we spent it, and what came back. Performance, audience, creative, exchange, geo. That corpus is the moat. We're building MCP servers on top of it so our sales team — and eventually our agents — can pull from the real history when they build a plan, not from whatever a foundation model imagined in training. The most informed media plans on the planet, period — because no model anywhere else has seen this data, and through the MCP, no model ever will. It stays ours. The intelligence sits on top. The 7-year corpus is the line.
- Essentialist.io — I built it the way I'd want any CTO to think about AI infrastructure. Clean tool surface. Deterministic dedup. No surprises in the data layer. The agent on top can be anything; the platform is the line.
- Salesnado.com — the same idea applied to outbound. Your data, your contacts, your messaging, your sender identity. The AI sits on top. The line is the platform.
The Bottom Line
The CTOs winning at this aren't the ones with the most aggressive AI roadmap.
They're the ones who:
- Drew the line at the data
- Published an MCP
- Set brand standards on outputs
- Got out of the way
You are not the AI tool buyer.
You are the gatekeeper to the most valuable assent: Data
Got a take on this? Drop a comment on this issue at theaiplaybook.com/issues/cto-line-in-the-sand — I read every one. Push back, share where you've drawn your line, tell me where this is wrong.
Need something? Just reply.
If you need any of this, I can help:
- A CTO sounding board on a specific AI decision — 1:1 with me. Just reply and I'll send the link.
- A dev team that actually ships — worked with mine 10+ years, free intro.
- Enterprise-level media services that get proven results — free intro.
The rest of my stack
- salesnado.com — your own AI sales agent
- emailnado.com — launch a fleet of agents, tournament-bracket the winning message
- agents.essentialist.io — have an agent? point it here