Two-Thirds of Small Businesses Using AI Now Build Their Own Tools: Write a 10-Minute Build Card Before the Next One Goes Live
A Pax8 survey of 1,150 business leaders found most AI-active small businesses now build their own AI tools, and 35% found AI running without approval in the last six months. One page per tool fixes the part most of them skip.
What happened: On October 12, Pax8 released its Q3 2026 SMB AI Pulse survey of 1,150 business leaders in the US, UK, Germany, and Sweden. About two-thirds of businesses already using AI have built their own AI tools: custom GPTs, automations with an AI step, agents. 35% found AI tools, workflows, or agents running without approval in the past six months. In the US, only 36% of businesses that build their own AI have a written review process.
The so-what: The risk has moved. Last year the worry was an employee pasting client data into a chatbot. Now someone on your team builds a tool that reads your inbox or updates your CRM every hour, and nobody wrote down what it touches or how to turn it off. When it misfires, you lose an afternoon working out what it even does.
The move: one Build Card per tool. Before any AI tool your team built goes live, fill in one page. Paste this into Claude or ChatGPT with a plain description of the tool:
I am about to turn on an AI tool someone on my team built. Here is what it does, in my words: [DESCRIBE IT]
Write a one-page Build Card with these fields. Ask me about anything you cannot fill from my description. Do not guess.
1. Name and one-sentence purpose
2. Owner (one person, by role)
3. What it reads: every inbox, folder, sheet, or system
4. What it can do: send, spend, delete, change records, or only draft
5. Who uses it and how often it runs
6. Who reviewed it, and the date
7. What goes wrong if it is wrong, and who would notice first
8. How to turn it off in under 5 minutes
9. Next review date (90 days out)
After the card, list any field where the answer is "it can send, spend, or delete without a person approving." Those need a human approval step before launch.
Then:
- Save every card in one shared folder called AI Tools.
- Ask your team one question this week: "What have you built or connected that uses AI?" Write a card for each answer.
- Put the review dates on a calendar.
Keep it safe: Describe the tool. Never paste passwords, API keys, or connection tokens into the chat.
What it's worth: Ten minutes per tool. The first time one breaks, the card tells you in one minute what it touched and how to stop it.