Guide · 9 minute read
How to choose an AI platform for a small business
Field testedThe six questions that decide whether a tool is safe to put your business into, why the feature list is the least useful column, and how to check a vendor's answer rather than take it.
By Nate Weigel, Protection Director · September 2026
Consumer AI tools send whatever you paste out of the building. Enterprise editions keep it in your tenant. The policy has to say which is which.
An AI policy in two pages Gold Star survey"Everyone I've worked with at Midwest IT has been fast and efficient in helping me, all while being pleasant as well."
Client, 2021 to 2025 surveyMore from the survey wallStart with where the data goes, not what it can do
Every one of these platforms can write an email. The differences that matter to a business are about custody: whose servers your words land on, whether they are used to improve the model, how long they are kept, who at the vendor can read them, and what happens to all of that if you stop paying. A feature comparison will not tell you any of it, which is why most feature comparisons are useless for this decision.
The six questions
- Is our data used to train the model? On consumer accounts, frequently yes, and the setting that turns it off is not always where you would look. On business and enterprise agreements, usually no, and the vendor will commit to it in the contract rather than a help article.
- How long are prompts retained, and can we control it? Retention drives what a regulator, an auditor or an opposing attorney can ask for later.
- Where does it run? Region matters for some contracts and for some clients' own obligations.
- What is the compliance posture, in evidence? A SOC 2 report is a document with a scope and a date. Ask which, and read what it covers.
- What does it cost at our size, on the plan that has the protections? The safe tier is rarely the advertised price.
- What is it actually good at? Drafting, summarising, searching your own documents, restructuring text. Not arithmetic you cannot check.
Check the answer, do not take it
Vendors answer these questions in several places and the places do not always agree. The marketing page, the trust centre, the terms of service, the enterprise agreement and the privacy policy can each say something slightly different, and only one of them is the one you could enforce. When we put an answer in front of a client we say which document it came from and how confident we are, because a line in a signed agreement and a claim on a product page are not the same kind of fact.
The boring answer is usually right
If your business already runs on Microsoft 365, the tool you are already licensed for, configured properly, beats a new subscription for most of the first year. It inherits your tenant's retention, access and audit rules, your IT company can administer it, and nobody has to learn a second login. Start there, prove the value, and buy something else when you have a reason that survives a sentence out loud.
Then write the rule down
Whatever you choose, the decision is only real once it is a policy: approved tools named, prohibited data listed, who checks output, who to ask. One page. The tool you picked matters less than everyone knowing which one it is.
Proof it works
The stories where we did this, and what the clients said afterwards.
If a vendor tells you your setup is fine, ask them to put it in writing. The answer changes once it has to be written.
The ERP under a desk Small businessSunk cost is real. A backup server you bought last year deserves a plan before it goes in a dumpster because a move made it convenient.
Server or cloud, honestlyQuestions this guide gets asked
Which AI tool should our company use?
It depends on where your data is allowed to go, what you already pay for, and what you want it to do. For most offices already in Microsoft 365 the honest first answer is the one you are already licensed for, configured properly.
The full answerWill our data be used to train the AI?
On a consumer account, often yes. On a business or enterprise agreement, usually no, and the vendor will say so in writing. That difference is the most important thing to get right.
The full answer
"Awesome "Johnny on the Spot" service! You guys made a scary situation a lot easier to work through."
Debra, packaging companyMore from the survey wall- A technician who knows your setup takes every request. Not a dispatcher, not a queue.
- Every closed ticket is surveyed and a partner reads every response.
- 99.5% of surveys come back positive.
- Family-owned since 2005. 21 years in the same corner of Wisconsin, not going anywhere.
"Service is excellent, quick to respond and quick to complete. Thank you!"
Cheri, small businessTalk to a partner, not a sales script.
Tell us what is going on. A partner will call you back the same business day, look at what you have, and tell you honestly whether we are the right fit. No pricing pressure, no pitch deck.