A family friend once ran a business as its general manager. Every quarter he signed the financials. He was good at his job, but the numbers weren’t his world, and some of the practices behind them were kept from him. When it all came out, he spent years defending himself, and he lost the ability to run a business again. It was the nightmare scenario. His signature was on every page. He owned all of it, and he’d never understood any of it.
I keep thinking about him, because AI is handing every small business owner that same pen.
If you run a small business, you’ve spent years getting things done with too little time, too little money and too few people. That shortage forced discipline. When building something was expensive, you only built what really mattered, and you knew what you’d built because you paid for every piece of it.
AI took that friction away. Now you can set up a customer email bot before lunch, a pricing tool by dinner and a hiring filter over the weekend. Your scrappy instinct is still running, but the brakes are gone. So you build a lot, and none of it gets planned together.
That’s the setup. The danger underneath it has a name: drift.
Two kinds of drift
Drift comes in two kinds, and they fail in opposite directions.
Generative AI drifts by moving. The company behind the model updates it, and the answers shift. Your prompts didn’t change and your process didn’t change, but the thing talking to your customers did. If everything runs on one AI provider, that company controls your drift. Their roadmap becomes your risk.
Picture it. You set up an assistant to answer customer emails. You spent an afternoon getting the tone right: warm, short, never promise a refund without checking first. It works for months. Then the provider ships an update. Maybe nobody tells you. Maybe it’s buried in a changelog you’ll never read. The replies get a little longer, a little more eager to please. One week it starts offering refunds it was never allowed to offer. You find out when a customer forwards you the email and asks when the money’s coming.
Nothing you did caused that. That’s the point. You didn’t change anything, so you had no reason to check.
Rule-based automation drifts by standing still. You wrote the rules for the business you had last year. Since then the business has changed and so has the market, but the rules haven’t. One day a rule that made perfect sense is quietly doing something you’d never approve.
I don’t have to picture this one. I run my own work through a set of AI agents, and they follow a standing set of instructions I wrote. One line said weekdays belong to a product I was building. Then I shut that product down. I made the call, said it out loud, moved on. The line stayed. For weeks, a rule written for a business I no longer had kept quietly steering how my days got planned. Nothing flagged it. The agents were doing exactly what I’d told them to.
The same setup sent me alerts: a morning digest, alarms if something stalled. At one point I turned those notifications off on my phone. The alerts kept firing, right on schedule, every morning, to nobody. No error. No warning. By every measure the system could see, it was working perfectly.
That’s what makes standing-still drift so hard to catch: the system reports success the whole way down.
Drift isn’t only about skipped steps, either. Decisions drift: small calls nobody reviews pile up into positions your business never actually chose. Values drift too. A discount rule starts favoring some customers over others. A screening filter slowly narrows who gets an interview. Nobody meant for it to happen, and your name is still on it.
That’s where both kinds of drift end up. You own results you never chose, produced by systems you don’t fully understand.
Why the big-company fix doesn’t fit
Most of the advice about this goes by the name “shadow AI,” and it’s written for big companies. The worry is employees quietly using tools IT hasn’t approved. The fix is policy: an approved list, a review board, someone whose job is to say no.
That playbook assumes someone else is governing. In a small business, there is no someone else. Nobody is sneaking tools past the owner. The owner is the one doing the sprawling, late at night, between everything else, because that’s how small businesses have always gotten things done.
So the fix can’t be a policy you hand to somebody. It has to be a hat you put on yourself.
That’s an uncomfortable thing to hear when you already wear every hat in the building. It’s worse if you don’t really understand AI. Most people don’t. But here’s the thing: you don’t have to understand how it works. My family friend didn’t need an accounting degree. He needed to see the receipts. You need to know two things: what each piece is allowed to do, and what it actually did.
What to do about it
Three habits get you there. None of them are technical.
Keep a one-page list. Everything you’ve set up, one line each on what it’s allowed to do. If you can’t write the line, that’s your first finding.
Read ten real outputs a month. Not the dashboard. Ten actual customer emails, ten actual quotes, ten actual screening decisions. Hold them up against the line on your list.
Ask the same five questions every month. Pick five things your tools handle, like a refund request, a pricing question or a tricky customer, and ask them the same way each time. When the answers change and you didn’t change anything, that’s drift from someone else’s update, caught without reading a single changelog.
And yes, AI can help you with this. Just not the same AI that did the work. A second set of eyes, from a different tool or a different person, is a receipt. The tool grading its own homework is not.
One hour a month
Then make it a meeting. One hour a month, on the calendar like the bookkeeper. Bring the list, the ten outputs and the five answers. Bring the alerts that fired, and ask which ones should have fired and didn’t. Then ask the question the big-company playbooks skip: is it still doing what I’d stand behind? Who got the discount, who got the interview, what got promised in my name. That’s tuning your values, not just your settings. Write down what you changed and why. That page is your receipt.
The business has always asked this of you. You learned enough about taxes not to get burned. You learned enough about your lease not to get trapped. This is the next one, and it’s an hour a month.
He didn’t fail because he was careless. He failed because he signed off on something he couldn’t see into, and nobody ever showed him how to look. The question for every owner now isn’t whether you’re using AI, or even whether you understand it. It’s whether you can explain what you’ve signed, and once a month, prove it.