Small businesses are building AI faster than they can manage it

Small businesses are no longer just trying AI. They are building with it. A Pax8 survey published this week of 1,150 small business leaders in the US, UK, Germany and Sweden found that 67% of businesses using AI have built at least one AI tool of their own that is now in regular use.
That is good news. It also brings a new problem.
AI nobody approved
The same survey found that 35% of those businesses discovered "shadow AI" in the last six months: tools, workflows or agents running at work that nobody officially signed off on. Someone connected a chatbot to the shared inbox, or built a spreadsheet automation that sends customer data to an AI service, and nobody else knew.
Data security and privacy came out as the top worry about AI that staff build themselves. And 49% of the businesses paying for AI got at least one bill that was higher than they expected.
A simple plan that works for a small team
You do not need an AI department to stay in control. Here is what we suggest to the businesses we work with:
- Keep one list. Write down every AI tool, automation and agent in use: what it does, who owns it, and what data it can see. A shared document is enough to start.
- Decide what data is off limits. Customer records, health information, payment details and passwords should never be pasted into a tool that is not on the list.
- Put a cap on spending. Most AI services let you set a monthly limit and an alert. Turn both on before the surprise bill, not after.
- Review once a month. Ten minutes to go through the list: is each tool still used, still worth the money, still safe?
- Make the approved way the easy way. People build their own tools because they need them. If there is a quick, approved option, most shadow AI disappears on its own.
How we build AI into apps
In OwnSites, every AI call is logged with its cost, and the model each job uses is a setting rather than hard-coded. We build the same habits into the apps we make for clients. That way the business owner can always see what the AI did, what it cost, and change it without a rebuild.
Building fast is the right instinct. Pair it with a list, a limit and a monthly check, and you get the speed without the surprises.