Divider line
AI for Small Business

AI for Small Business UK: Useful, Safe and Under Control

Your staff are already using AI, whether you have decided on it or not. We make sure it only sees what it should, your team knows the rules, and it saves time instead of creating risk. For UK businesses with 20 to 80 staff.

21 min
Median first response, office hours
24/7
Monitoring and support
1,100+
Devices under management

Response and device figures measured across our managed clients over the last 90 days.

AI Security Risks for Small Business: Where It Goes Wrong

Most businesses assume Microsoft backs up their data, Cyber Kaizen

Staff are using it already

ChatGPT, Copilot and a dozen browser tools are already in daily use in many small firms. Nobody chose them, so nobody checked what goes into them.

Deleted files disappear, Cyber Kaizen

It can see everything you can see

Microsoft Copilot answers from whatever the user has permission to open. If the salary spreadsheet is in a shared folder, Copilot will quote it.

Ransomware does not care where your files are, Cyber Kaizen

Client data leaves the building

Pasting a contract or a patient note into a free AI tool sends it to a server you do not control. Under UK GDPR that is still your responsibility.

Ex employees take data with them, Cyber Kaizen

Confident answers, not always right

Microsoft says Copilot output is not guaranteed to be factual. Without a rule to check before you act, a wrong figure ends up in a quote or a letter.

Compliance requires IT, Cyber Kaizen

No policy means no defence

If something goes wrong, the first question an insurer, regulator or client asks is what your policy said. Most of the businesses we meet do not have one.

What We Put in Place

AI Readiness for Small Business: What We Put in Place

Most businesses assume Microsoft backs up their data, Cyber Kaizen

Permissions review

We check who can open what across email, OneDrive, SharePoint and Teams, and close the gaps before any AI tool goes live.

Deleted files disappear, Cyber Kaizen

An AI policy your staff will read

One page, written with you: which tools are approved, what must never be pasted in, and the rule to check before you act.

Ransomware does not care where your files are, Cyber Kaizen

AI training for the whole team

A short session for everyone, repeated for new starters, covering safe use and the AI-written scams now hitting inboxes.

Ex employees take data with them, Cyber Kaizen

Quarterly checks

Permissions, tools and policy are looked at again at every quarterly review, because teams, folders and AI tools all change.

Divider line
How It Works

How Our AI Readiness Review Works

Set IT once never think about IT again, Cyber Kaizen
Step 1: See what AI would see

We run an AI readiness review across your Microsoft 365 and show you, in plain English, what each person can open today. That is exactly what Copilot or any connected AI tool could read.

Step 2: Fix the foundations

We tighten permissions, label sensitive data, agree which AI tools are approved and write a one-page policy with you. Staff get a short session on what is allowed and why.

Step 3: Switch on and keep checking

Copilot or your chosen tools go live for the people who will use them. Permissions and policy are re-checked at every quarterly review, because teams and folders change.

Divider line
Two Ways to Do It

AI Governance for Small Business, in Plain Terms

AI governance sounds grand. For a small business it means the five rows below, and most of the businesses we meet are in the first column without realising it. Moving to the second is mostly tidying up what you already have, not buying anything new.

Switching it on
Putting it in properly
Permissions
Whatever grew up over the years
Reviewed and tightened before AI goes live
Approved tools
Whatever each person found
An agreed list, licensed properly
Client and staff data
Can end up in free tools
Stays inside your Microsoft 365
Policy
None, or a template nobody read
One page, written with you, signed off
Training
Learn by trial and error
Short session, repeated for new starters
Checking the output
Down to the individual
A simple rule: check before you act
Who keeps it right
Nobody
Us, at every quarterly review

None of this slows people down. It means the time AI saves is not paid back later in a data breach, a complaint or a wrong number in a client document.

Divider line
What It Costs

AI Readiness Is Part of Our Managed IT Support

We do not sell AI as a separate product. The permissions review, the policy and the training are part of how we look after Microsoft 365 for every client.

What
Cost
Notes
Permissions review and who-can-see-what report
Included
Part of every onboarding and every quarterly review
AI policy and staff training
Included in Standard and Premium plans
Security awareness training covers AI and phishing
Managed IT support with security built in
From £45 per user per month
See our pricing page for what each plan includes

Not sure where you stand? The free IT Health Check includes the permissions picture, so you can see what AI would see before you switch anything on.

Divider line
FAQ

AI for Small Business: Your Questions Answered

Is AI safe for a small business to use?

Yes, if the basics are in place: tidy permissions, an agreed list of tools, a short policy and a habit of checking output before acting on it. The risk is not the AI itself, it is what it can reach and what people paste into it.

Not necessarily. Microsoft 365 already includes Copilot Chat at no extra cost. The paid Copilot licence is worth it for people who live in Outlook, Word, Excel and Teams all day. We will tell you honestly which of your staff would get value from it.

That is your call, and it should be a deliberate one. Many businesses allow it for general tasks and ban client, staff or financial data from going into it. We help you write that rule and make sure people know it.

A plain-English report of who can open what across your email, OneDrive, SharePoint and Teams. In our experience most businesses find at least one folder that far more people can see than anyone intended.

Yes. Personal data you put into an AI tool is still personal data you are responsible for. Keeping it inside your Microsoft 365, with the right permissions, is the simplest way to stay on the right side of that.

One page is enough. Which AI tools are approved, what must never be pasted into them (client, staff and financial data), who to ask when unsure, and the rule to check output before acting on it. We write it with you, and AI training for employees is built into onboarding so new starters get it on day one.

Divider line
READY TO START?

See What AI Can See Before You Switch It On

Book a free IT Health Check. We will show you the permissions picture across your Microsoft 365, tell you which AI tools make sense for your team, and what to put in place first. No obligation.

Call us: 0800 208 8456  |  Email: hello@cyberkaizen.co.uk

✓ Permissions review included · ✓ Plain-English report · ✓ No obligation