Opsergo
Back to blog

Keeping AI safe in a small business

5 Oct 2026 5 min read

Keeping AI safe in a small business

When owners tell us they're nervous about AI, we ask what worries them. Most of the time it isn't the AI itself. It's a picture in their head of a computer making a decision on its own, getting it wrong, and nobody noticing until a customer's already annoyed. That's a fair thing to worry about. It's just not the actual risk.

The real risk is letting AI guess: acting on rules nobody actually wrote down, making decisions nobody checks. Give it clear rules and a person checking its work, and it causes no trouble. Leave it to work things out for itself, on top of a process that was never written down properly, and that's where the real risk sits. It's avoidable, and it's worth taking seriously.

We work with owner-run businesses, usually 10 to 70 staff, where the owner still has a hand in everything and work is steady but admin is quietly eating the margin. If that's you, and you're curious about AI but worried about getting it wrong, here's how we think about keeping it safe, in four plain principles.

1. Rules before robots

The tool only follows rules the owner has personally written and signed off. Nothing is left to the AI's judgement. If a price depends on site access, job size or how quickly it needs turning around, that logic gets written down first, in plain language, checked by the person who actually knows the business.

This matters because AI doesn't know your business. It only knows what it's told. If the rules are vague or missing, the AI fills the gaps with guesses, and a guess dressed up as automation is still a guess. Writing the rules down first means there's nothing left to guess about.

2. A person approves everything

Nothing goes to a customer without a person checking it first. Mistakes happen, and the point of having a person in the loop is that mistakes get caught before they reach anyone outside the business.

Take invoicing. A common problem we see is invoices going out late because nobody knows the job's actually finished. It sits in someone's head, they get busy, the invoice waits. Here's the fix: when the job sheet is signed off on site, the invoice is drafted automatically and lands with the office to check and send. Nobody has to remember the job was done. But nobody's cutting a person out of the loop either. The drafting is automatic. The sending still has a pair of eyes on it.

3. The data stays theirs

Client and job details stay inside the business's own systems. They never get fed into a public chatbot. Nothing sensitive leaves the building.

This one matters more than owners often realise at first. It's easy to paste a customer's details into a free AI tool to save five minutes, without thinking about where that information goes afterwards or who might see it. Keeping everything inside systems the business already controls means there's no new place for data to leak out of. The AI works with the information. It doesn't take it anywhere.

4. Easy to switch off

If the tool ever stops working, the business can fall back to doing it by hand. It isn't stranded. This is only possible because the process was written down on paper before any AI was built. The written rules are the real asset. The tool is just a faster way of running them.

If the internet goes down, if the tool needs fixing, if anything at all goes wrong, the job sheet still gets signed off, the invoice still gets drafted, someone just does it by hand for a day instead of the tool doing it. Nothing grinds to a halt because nobody remembers how things used to work.

Why the order has to be this way round

This is why we insist on writing the process down before building anything. An AI layered onto an undocumented process doesn't remove the guesswork. It automates it. That just means the same inconsistent decisions happen faster, and with more confidence behind them.

Safe AI comes down to clear rules, a person checking, data that stays put, and a business that isn't stuck if the tool ever stops.

We also build the tool with someone on the client's own team. That way the business understands how it works and can run it without depending on outside help to keep it going.

Nervous about AI is the right instinct

Being cautious about AI is sensible. The mistake is assuming that caution means avoiding AI altogether, rather than putting the right safeguards around it. Rules written down, a person checking, data that stays where it belongs, and a fallback that always works. That's what makes AI safe for a business that can't afford to get it wrong.

If admin is eating your margin and you're curious about AI but not sure where the risk actually sits, the first step isn't to buy a tool. It's to see where your process needs writing down properly first.

Talk to us and find out what's actually going on before anything gets built.