Original analysis and frameworks for small business AI adoption and operational maturity.
In APQC's 2021 survey of 982 knowledge workers, respondents estimated they spent about 30 of 40 weekly hours on productive work, and 2.8 hours a week looking for or requesting information. For a small business the cost shows up when the one person who knows a process is away, and when growth means the same job is done three different ways. This brief covers what the survey says, what it does not, and which processes to write down first.
Cookieless analytics tools count visits without storing an identifier on the visitor's device. Plausible, for example, builds a daily identifier from a hash of a rotating salt, the site, the IP address and the browser, and deletes the salt every 24 hours. You keep page views, traffic sources and daily unique visitors; you lose the ability to recognize a returning visitor across days or devices. Whether you still need a consent banner depends on where your visitors are: France's CNIL, for example, exempts audience measurement only under specific conditions.
Verizon's 2025 Data Breach Investigations Report found ransomware in 88% of breaches at small and medium businesses, compared with 44% across all organizations, and third-party involvement doubled to 30% of breaches. IBM's 2025 Cost of a Data Breach report put the average time to identify and contain a breach at 241 days. Every US state has a breach notification law. The practical step for a small business is to know, before anything happens, what data it holds, where it lives and who makes the calls.
Whether an AI tool trains on what your team types depends less on the brand than on the plan. As of October 2026, OpenAI says it may train on content from individual ChatGPT accounts unless the user opts out, but does not train on business-plan or API data by default. Anthropic asks individual Claude users to choose, while its business plans and API fall under commercial terms. Google says Workspace does not use customer data, including prompts, to train models without the customer's permission. The practical question is which plan each person is actually using.
Census Bureau survey data show business AI use around 20% nationally as of May 2026, rising with firm size: 37% of firms with 250 or more employees, and under 20% of firms with four or fewer. Among workers who use AI, Microsoft's 2024 Work Trend Index found 78% bring their own tools. Put together, the small businesses that do use AI often use it through personal accounts, which is where a written list of tools does the most good.