4 Main Types of RPA: Attended, Unattended, Hybrid

On this page
- What are the Main Types of RPA
- Attended RPA: where it fits, common tasks, and operational benefits
- Unattended RPA: ideal use cases, scheduling, and scale considerations
- Hybrid/Orchestrated RPA: combining human steps with automated flows
- Intelligent Automation (RPA + AI): when to add cognitive capabilities
- Choosing the right RPA type: evaluation criteria, ROI signals, and governance for scale
Main types of RPA are different approaches to robotic process automation: attended, unattended, hybrid or orchestrated, and intelligent automation. Each one fits different operational needs, integration complexity, and levels of human involvement. Choosing the right type matters because it shapes your risk profile, how you govern changes, what you can scale, and whether you get durable savings or a fragile bot that breaks on the next system update.
What are the Main Types of RPA
RPA is software that performs repeatable digital tasks the way a person would: clicking through screens, moving files, copying data between systems, and triggering workflows. The “main types” describe how much the bot runs on its own versus alongside a person, and whether it can handle messy inputs like emails, PDFs, and free text.
At an operations level, the types answer four questions:
- Who is in the loop? A human agent, no one, or both in sequence.
- Where does it run? On a user’s desktop, a server, or a managed environment.
- How is it controlled? Local triggers, centralized scheduling, or orchestration across steps.
- How “smart” does it need to be? Rules-only versus RPA combined with AI for interpretation and decisions.
You do not need a big “automation program” to get value, but you do need a clear fit between process and RPA type to avoid wasted effort.
A bot is only “automation” if it keeps working after the pilot team stops watching it.
Here is a quick reference view.
| RPA type | Human involvement | Best for | Typical control model | Primary risk |
|---|---|---|---|---|
| Attended RPA | Human initiates and supervises | Frontline, exception-heavy work | Desktop triggers, guided steps | Inconsistent use, limited scale |
| Unattended RPA | Fully autonomous | High-volume back office | Central scheduler + monitoring | Breakage from app changes, governance gaps |
| Hybrid / Orchestrated RPA | Human and bot alternate steps | End-to-end processes crossing teams | Orchestrator routes work items | Handoffs and ownership confusion |
| Intelligent Automation (RPA + AI) | Varies | Unstructured inputs and decisions | Orchestrator + model governance | Accuracy, compliance, auditability |
Attended RPA: where it fits, common tasks, and operational benefits
Where it fits: Attended RPA works when a person is already doing the work live, the process has many exceptions, and you want faster handling without taking full control away from the operator. Think call centers, service desks, finance analysts, and coordinators who hop between systems all day.
Attended bots typically run on an employee’s machine and are triggered by the user (a button, hotkey, or the bot detecting a screen state). The employee remains responsible for the final outcome.
Common tasks (examples):
- Customer support: open CRM record, copy order ID, check shipping portal, paste status back, draft response
- HR: create a new hire in multiple systems, generate a checklist, create a ticket to IT
- Finance: pull invoice data from an email attachment, populate ERP fields, attach documents
- Sales ops: create account and opportunity records, validate required fields, route for approval
Operational benefits (what leaders feel):
- Shorter handle time: A rep finishes the “swivel-chair” steps faster, especially when work is mostly repetitive with some judgment.
- Fewer copy-paste errors: The bot is consistent about where it gets data and where it writes it.
- Faster training: New hires rely on the bot to follow standard steps while they learn edge cases.
- Safer change management: With a human in the loop, the blast radius of a bot error is smaller than full autonomy.
A concrete scenario (illustrative):
A mid-size distributor has a customer service team processing order status requests. An agent toggles between the CRM, an ERP interface, and a carrier portal. If each request takes several minutes and the team handles a steady daily volume, an attended bot that automates navigation and data copy can save meaningful time per request. Over a month, that can translate into real capacity without hiring, while keeping the agent responsible for judgment calls like escalation.
Where attended RPA can disappoint:
- If adoption is optional, usage varies by person and results are uneven.
- If the value depends on 24/7 execution, attended is the wrong tool.
- If the process is stable and standardized, you may be ready for unattended sooner.
The best attended candidates are high-frequency, moderate-complexity, human-facing tasks where workflow automation supports a person rather than replacing them.
Unattended RPA: ideal use cases, scheduling, and scale considerations
Where it fits: Unattended RPA is for processes that can run end-to-end without human intervention most of the time. It fits best when work arrives in predictable batches, rules are clear, and the organization needs reliability and scale.
Ideal use cases:
- Nightly reconciliations (bank vs ERP vs billing system)
- Scheduled report generation and distribution
- Master data updates (for example, price list changes across systems)
- High-volume transaction processing (validate fields, create records, route exceptions)
- File-based integrations where APIs are unavailable (download, transform, upload)
Scheduling and control:
Unattended bots are usually managed through a centralized controller:
- Triggers: time-based schedules, file arrival, queue depth, or upstream system events
- Queues: work items are stored so multiple bots can pull from the same backlog
- Retries and idempotency: the bot can retry without duplicating transactions
- Monitoring: alerts for failures, SLAs, and throughput
This is where “just build a bot” becomes operational engineering. To run unattended bots safely, you typically need:
- Standardized credential management (no shared passwords)
- Non-prod environments for testing
- Change control when upstream apps update UI or fields
- Logging that supports audits (who/what/when)
Scale considerations leaders should ask about:
- Bot capacity planning: How many bots do you need at peak? What happens at month-end close?
- Exception routing: When the bot cannot proceed, who receives the case, and with what context?
- Resilience: What breaks when the ERP adds a new mandatory field?
- Security: Are credentials vaulted? Are actions traceable to a bot identity?
- Operational ownership: Who is on-call when a critical bot fails overnight?
If your operations team wants “lights-out” processing, unattended RPA is the backbone. Treat it like production software, not a macro.
Hybrid/Orchestrated RPA: combining human steps with automated flows
Where it fits: Hybrid (often called orchestrated) RPA is for end-to-end processes where some steps are best done by bots and others must be done by people. The differentiator is orchestration: managing work items, handoffs, SLAs, and visibility across the whole flow.
This is common in real operations because few processes are fully automatable. Approvals, customer conversations, compliance checks, and exception handling often require a person.
Best-fit examples:
- Claims processing: ingest claim, validate, request missing docs, adjudicate, pay
- Accounts payable: intake invoice, match PO/receipt, route exceptions, schedule payment
- Order management: validate order, check credit, allocate inventory, confirm shipment
- KYC/onboarding: collect docs, verify identity, run screenings, approve account
Step-by-step hybrid flow (example: accounts payable exception handling)
- Invoice arrives (email inbox or supplier portal).
- Bot captures and creates a work item in a queue (invoice ID, supplier, amount, due date, source link).
- Bot performs rule checks (duplicate invoice search, PO present, vendor active).
- If straight-through: bot posts the invoice to ERP and schedules payment.
- If exception: bot routes the work item to the right person with context:- Missing PO → buyer or requestor
- Price mismatch → procurement
- Tax issue → finance - Human resolves via a guided screen (attended assist can speed this up).
- Bot picks up the resolved case from the queue and completes posting.
- Audit trail is written (who approved, what changed, timestamps, attachments).
- Dashboards show throughput and bottlenecks (exceptions by type, time-to-resolve, aging).
The hybrid value is not just speed. It is control. You can enforce routing, block work that lacks approvals, and keep a traceable record without making the process brittle.
Operational benefits:
- Fewer handoff failures: work items do not get lost in email threads
- More predictable SLAs: the orchestrator can prioritize urgent cases and escalate aging ones
- Clear ownership: each exception type has a named resolver and backup
- Better continuous improvement: exception analytics highlight what to fix upstream
Hybrid is also a practical bridge when you want to scale but the business is not ready to hand everything to unattended bots.
Intelligent Automation (RPA + AI): when to add cognitive capabilities
Where it fits: Intelligent Automation combines RPA with AI to handle tasks that are hard to codify with rules alone: reading unstructured documents, classifying emails, extracting fields from varied formats, summarizing notes, or recommending next actions.
It is also where risk rises. AI can be highly useful, but it is probabilistic. You need controls.
When to add AI (good signals):
- Inputs are unstructured (emails, PDFs, scanned forms, chat transcripts)
- The same concept appears in many formats (for example, invoice layouts vary by supplier)
- Decisions require interpretation (is this a refund, a replacement, or a warranty claim?)
- The current process relies on “tribal knowledge” and inbox triage
- Value is blocked by data entry, not by core system transactions
Common patterns:
- Document understanding + RPA: AI extracts fields; RPA enters them into ERP/CRM; low-confidence cases route to humans.
- Email triage + orchestration: AI classifies intent, suggests priority, and fills a case template; orchestrator assigns to queues.
- Knowledge retrieval (RAG) for agents: AI drafts responses grounded in policy docs; attended RPA logs the interaction and updates CRM.
Controls you should insist on (especially in regulated or customer-impacting work):
- Confidence thresholds and human review for low-confidence outputs
- Grounding requirements (approved knowledge sources, versioned policies)
- Logging of model prompts, outputs, and decisions for auditability
- Data privacy boundaries (what can be sent to a model, where it is stored)
- Clear escalation paths when AI output is uncertain or conflicting
Intelligent automation works best when it supports a broader AI strategy rather than a one-off experiment.
Choosing the right RPA type: evaluation criteria, ROI signals, and governance for scale
The 60-second decision framework (answer-first)
Use this mapping to pick a starting point and next step.
- If a person must decide in real time, and exceptions are frequent → Attended RPA.
Controls: desktop rollout, standard work instructions, light monitoring.
Next step: pick one role and one repetitive task, measure handle time and error rate for two weeks. - If the process is rules-based, high volume, and can run in batches → Unattended RPA.
Controls: scheduler, queues, credential vault, runbooks, change control.
Next step: design the happy path plus the most common exceptions, then pilot with production monitoring. - If the process needs both people and bots, with handoffs and approvals → Hybrid/Orchestrated RPA.
Controls: queue ownership, SLAs, audit trail, exception taxonomy.
Next step: map the end-to-end process and define work item states (new, in review, approved, failed, complete). - If inputs are messy (emails, PDFs) or decisions require interpretation → Intelligent Automation (RPA + AI).
Controls: confidence thresholds, human-in-the-loop, model governance, privacy review.
Next step: benchmark extraction/classification on a representative sample, then automate only high-confidence segments first.
Evaluation criteria that prevent expensive mistakes
Teams choose the wrong type when they evaluate based on “can we automate this?” instead of “can we run this safely at scale?” Use these criteria:
- Process stability- Stable UI and fields, low change frequency → unattended is safer
- Frequent app changes, lots of edge cases → attended or hybrid first - Volume and time sensitivity- High volume, consistent demand → unattended
- Burst demand with live customer interaction → attended
- Mix of both with SLAs → hybrid/orchestrated - Exception rate- Low exceptions (a small set of repeatable patterns) → unattended
- High exceptions and judgment calls → attended or hybrid
- Exceptions driven by unstructured data → intelligent automation - Compliance and audit requirements- Need traceability and approvals → hybrid/orchestrated with strong logging
- Sensitive data crossing boundaries → revisit architecture before adding AI - Integration constraints- APIs available → consider API-first automation; RPA may still fill gaps
- No APIs, legacy systems → RPA can be a fast bridge, but governance matters
ROI signals (without hand-wavy math)
You do not need a perfect ROI model to make good decisions, but you do need leading indicators. Look for:
- Cycle time compression: fewer days in “waiting” states, not just faster data entry
- Rework reduction: fewer returned forms, fewer duplicate records, fewer corrections
- Capacity release in bottleneck roles: the team that is always behind should feel relief
- Exception analytics: a small number of issues dominate, so you can fix root causes
A practical approach is a narrow pilot with a clear before/after measurement plan. For example (illustrative): a finance team that spends ~20 hours a week manually downloading bank statements, formatting files, and uploading to an ERP can often validate value quickly by automating the transfer and standardization steps first, while keeping reconciliation decisions with the analyst until confidence is high.
Governance for scale (what changes after the first 2 bots)
RPA programs fail when bots spread without ownership. Governance does not need to be heavy, but it must be explicit:
- Bot inventory: what exists, what it does, and who owns it
- Change management: how bots are tested when upstream apps change
- Access management: least-privilege bot accounts, credential vaulting
- Runbooks and incident response: who is paged, how work is recovered
- Performance monitoring: throughput, failure rate, exception reasons
- Standards: naming, logging, error handling, documentation
The more you rely on automation across operations, the more you need shared standards that business and IT both accept.
Closing: turning RPA into measurable business results
RPA is a practical way to turn digital investment into outcomes you can measure: faster cycle times, fewer errors, and freed capacity in critical roles. The main lever is not picking the fanciest tool. It is matching the main types of RPA to the realities of your process, then scaling with controls that keep the bots reliable.
If you want to move from pilot to operational impact, a structured engagement helps de-risk the work. Zealsight uses a Discover → Pilot → Scale → Operate approach to clarify where RPA fits, where AI should be added (and where it should not), and how to build governance that makes results stick. You can book an AI assessment via Zealsight’s contact page to map a practical path from opportunity to production that leadership can support.
Frequently asked questions
Does RPA fall under AI?
RPA is not inherently AI. Classic RPA follows rules and mimics clicks, typing, and file moves the same way a person would. AI is about learning patterns and interpreting unstructured information. Many teams combine them as “intelligent automation,” where AI extracts data from emails or PDFs and RPA executes the steps in business systems. The key difference is governance: AI adds accuracy and compliance considerations.
What are the three types of RPA?
People often group RPA into three buckets: attended (assistant to a human), unattended (runs end-to-end without people), and hybrid (mixes both). In practice, many leaders also separate “intelligent automation” as a fourth category because adding AI changes risk, testing, monitoring, and audit needs. If you only remember one thing: choose based on who owns decisions and how the work is triggered and controlled.
What are the top 5 RPA tools?
“Top” depends on your stack, security requirements, and how much orchestration you need. Commonly considered enterprise options include UiPath, Automation Anywhere, and Microsoft Power Automate. Some teams also evaluate open-source or developer-first tools when they need more code control. Instead of starting with brand names, define your needs: attended vs unattended, orchestrator features, credential handling, logging, and how changes will be tested and approved.
Which is better, RPA or Python?
Neither is universally better. RPA is usually faster to deploy for UI-driven tasks where APIs are missing and business users need visibility into runs, schedules, and exceptions. Python is better when you need robust data processing, custom integrations, or long-term maintainability in a software engineering workflow. Many teams use both: Python for data and services, RPA for last-mile execution in legacy apps. Decide based on control, security, and support ownership.
When should you use attended vs unattended RPA?
Use attended RPA when work happens live with a person on screen, exceptions are frequent, and you want a safer blast radius while you standardize the process. Use unattended RPA when the process is stable, inputs are structured, volume is high, and you can define clear rules and exception queues. If your goal is 24/7 throughput, unattended is usually the right starting point, with strong monitoring and change control.
What is hybrid or orchestrated RPA and why does it matter?
Hybrid (or orchestrated) RPA connects multiple steps where bots and humans alternate. An orchestrator routes work items, triggers bots, pauses for approvals, and resumes after human input. It matters because end-to-end value often depends on handoffs: ownership, SLAs, and audit trails must be explicit. Without orchestration, teams can end up with fragile “bot islands” that work locally but break when processes cross departments or systems.


