When a business wants a computer to make a decision automatically, such as routing an email, approving an expense or flagging a suspicious order, there are two fundamentally different ways to do it. You can write the logic down as explicit rules, or you can let a model learn the logic from examples. The machine learning vs rule based choice affects cost, accuracy, explainability and how the system behaves when the world changes. Neither is always better. This article shows the difference on a concrete example and gives a checklist for choosing.
Two ways to automate a decision
Rule-based automation
A person who understands the process writes the logic: if these conditions hold, do this. Rules can live in application code, a workflow tool or a dedicated rules engine that lets business users edit them. The system does exactly what the rules say, no more and no less.
Machine learning
Instead of writing the logic, you supply many past examples with known outcomes. A training algorithm finds patterns linking inputs to outcomes and produces a model. Given a new case, the model outputs a prediction, often with a probability or score. Nobody writes the logic explicitly; it is inferred from the data.
A worked example: flagging risky orders
An online store wants to hold suspicious orders for manual review before shipping.
The rule-based version
function needsReview(Order $o): bool
{
if ($o->total > 50000 && $o->customer->orderCount === 0) return true;
if ($o->shippingCountry !== $o->billingCountry) return true;
if ($o->paymentAttempts >= 3) return true;
if (in_array($o->email, $blockedEmails, true)) return true;
return false;
}
Anyone can read it. When an order is held, the reason is obvious. It is quick to build and costs nothing to run. But it has weaknesses. Fraudsters learn the thresholds and stay just under them. Legitimate customers who travel get flagged every time. And as the team adds rules for each new pattern, the list grows into dozens of interacting conditions nobody fully understands.
The machine learning version
The team gathers past orders labelled as genuine or fraudulent, with features such as order value, customer history, device and location signals, time of day, and how quickly the checkout was completed. A model learns how these combine. It might pick up that a particular combination of new account, express shipping and late-night ordering is risky, even though no single factor is suspicious alone.
The model can catch subtler patterns and adapt when retrained on new data. But it needs a good volume of labelled fraud cases, which a small store may not have. Its decisions are harder to explain, it costs effort to build, deploy and monitor, and it will sometimes be wrong in ways that are hard to predict.
Machine learning vs rule based: side by side
| Rule-based | Machine learning | |
|---|---|---|
| Where logic comes from | Human experts | Historical data |
| Data needed | Little or none | Many labelled examples |
| Explainability | Fully transparent | Partial; needs explanation tools |
| Handles complex patterns | Poorly once rules multiply | Well, given enough data |
| Handles unstructured input (text, images) | Badly | Well |
| Behaviour on new situations | Predictable, may miss them | May generalise, may fail unpredictably |
| Changing the behaviour | Edit the rule | Retrain with new data |
| Build and running cost | Low | Higher: data work, infrastructure, monitoring |
When rules are the better choice
- The logic is known and stable, such as approval limits, tax calculations or eligibility criteria.
- Regulation or policy requires exact behaviour that must be auditable line by line.
- You have little historical data, or outcomes were never recorded.
- Errors are expensive and must be predictable.
- Volume is low, so a person can handle exceptions without strain.
When machine learning earns its place
- The pattern is too complex to write down, with many factors interacting.
- Inputs are unstructured: free-text emails, documents, images, audio.
- The patterns shift and the system needs to keep up through retraining.
- You have plenty of labelled history and a way to keep collecting outcomes.
- A probability is useful, for example ranking leads or prioritising reviews rather than making a yes-or-no decision.
The practical answer: combine them
Most robust systems use both, each where it is strongest:
- Hard rules as guardrails. Rules enforce what must always or never happen, regardless of the model: blocked accounts are always held, orders under a small amount are never held.
- Model scores within the guardrails. The model ranks everything else by risk.
- Thresholds set by business cost. Scores above a high threshold are held; a middle band goes to quick human review; low scores pass.
- Feedback. Reviewers' decisions become new labelled examples for retraining.
Rules are also a good way to start. A rule-based system that records its decisions and their outcomes builds the labelled history a model will later need. When the rule list becomes unwieldy and you have enough data, machine learning becomes a sensible next step rather than a leap of faith.
Large language models add a third option for unstructured inputs: an LLM can classify an email or extract facts from it, after which ordinary rules decide what to do. This avoids training a custom model, at the cost of per-call fees and occasional errors that need checking.
Questions to decide
- Can an expert write down the logic in a page or two?
- Do we have hundreds or thousands of past examples with known outcomes?
- Must every decision be explainable to a customer, auditor or regulator?
- How often does the pattern change?
- What does a wrong decision cost, and who catches it?
Our AI and machine learning development team helps decide where models add value, and our software consulting service can design the rules and workflow side.
Key takeaways
- Rules are transparent, cheap and predictable; machine learning handles complexity and unstructured input.
- In the machine learning vs rule based decision, data availability and explainability needs are usually decisive.
- Combine them: rules as guardrails, models for ranking, people for the uncertain middle.
- Starting with logged rules builds the data you need for machine learning later.