Strategy · 2026

AI strategy for SMEs.

Most AI strategies are a list of tools with a budget attached. That is a shopping list. A strategy says which business outcome you are chasing, which workflow you will change to get it, what you are deliberately not doing, and how you will know it worked. This is how to write one that fits on a page and survives contact with a normal trading year.

Operational dashboard built from an AI strategy for a mid-sized business
A one-page strategy template
A four-quarter roadmap
Real numbers, not ranges
Definitions

Digital strategy first, AI strategy second.

These get used interchangeably and they are not the same thing. Getting the order wrong is the most expensive mistake in this whole subject, because AI applied to an undigitised process produces confident nonsense at speed.

Digital strategy

How work gets done through software

Systems of record, integration between them, reporting people actually trust, and automation of the obvious repetitive steps. If your quotes live in one person's spreadsheet and your job history lives in an inbox, this is your strategy. Not AI.

AI strategy

Where judgement gets assisted

Sits on top of digital foundations. Concerns itself with drafting, summarising, classifying, extracting, forecasting and recommending — the parts of the work that used to require a person to read something and decide. It needs the digital layer to feed it.

The test

Can you answer four questions?

Name one repeated workflow worth improving. Point to the data it depends on. Name the human who approves the output. State how you will measure success. If any answer is missing, that gap is your first project. Our readiness assessment scores this properly.

The template

The one-page AI strategy.

Six fields. If you cannot fill them in, you do not have a strategy yet — and that is genuinely useful to know before you spend anything. Write it in a document, not a deck. Decks hide vagueness; prose exposes it.

The outcome

One sentence, with a number and a date. “Cut the time from enquiry received to quote sent from four days to one, by the end of Q2.” Not “improve efficiency with AI.” If a competitor read your outcome, it should tell them something specific about your business.

The workflow

The actual sequence of steps as they happen today, written in plain language, including the annoying bits people work around. This is the document that does the real work — most of the value shows up here, before any technology is chosen.

The inputs

Which data, documents and systems this workflow touches, where each one lives, and who can access it. If a step depends on knowledge that only exists in someone's head, write that down explicitly. That is a project risk, not a detail.

The owner

One named person accountable for the outcome and one named person who approves AI output before it reaches a customer, a payment or a legal document. These can be the same person in a small business. They cannot be nobody.

The non-goals

What you are explicitly not doing this year. This field is the one most people skip and the one that saves the most money. “We are not replacing the CRM. We are not building a customer-facing chatbot. We are not touching payroll.”

The measure

The baseline number today, the target number, and how you will collect both. Record the baseline before you deploy anything. Teams that skip this can never prove the return and end up defending the spend on vibes.

Sequencing

A twelve-month roadmap that a real SME can absorb.

This assumes a business without a dedicated technology team, running normally throughout. Each quarter has one theme, because a small business can absorb one significant change at a time and pretending otherwise is how programmes stall.

Quarter 1

Foundations and one proof

The temptation in Q1 is to plan. Resist it. Run the readiness assessment, write the one-page strategy, and simultaneously ship one small thing so the organisation learns what this actually feels like. The proof matters more than the plan, because it converts abstract anxiety into a concrete opinion.

  • Score readiness across the seven dimensions with your leadership group and identify the three lowest.
  • Write the one-page strategy including the non-goals. Circulate it. Argue about it. Revise it once.
  • Record baselines for the metrics in your measure field. This takes a fortnight and is the cheapest insurance you will buy all year.
  • Ship one narrow implementation — document question-and-answer over your own files is the usual candidate, because the data already exists and the risk is low.
  • Write the four governance lines covered further down this page. Half a day of work.
Quarter 2

Data plumbing

Almost every SME hits the same wall in Q2: the second use case needs data that three systems each hold a different version of. This quarter is unglamorous and it is where the compounding value comes from. Everything you build afterwards is cheaper because of it.

  • Map every source — CRM, accounting, e-commerce, support desk, scheduling, site data — and note which fields disagree between them.
  • Pick a single source of truth per entity. One place that is authoritative for “customer”, one for “job”, one for “invoice”. Write it down and enforce it.
  • Build the integrations that remove manual re-keying. Nightly batch is fine and much cheaper than real-time for most SME cases.
  • Stand up reporting people trust. Our guide on going from spreadsheet to internal dashboard covers the usual path.
  • Complete a data protection impact assessment for anything involving personal data.
Quarter 3

The workflow build

Now you build the thing the strategy was actually about. With clean inputs and a measured baseline, this is a normal software project rather than a research exercise — which is exactly the position you want to be in before spending real money.

  • Build against the workflow document, not against a feature list. If the build drifts from the workflow, the workflow was wrong or the build is.
  • Keep a human in the approval path for anything touching money, legal wording, safety or a client promise. This is a design decision, not a compliance afterthought.
  • Run change management in parallel, not after. Communicate before deployment, train by role, name internal champions, and open a feedback route on day one.
  • Instrument everything. You want usage, override rates and time-to-completion, not just uptime. Override rate is the single most informative number you will collect.
Quarter 4

Measure, prune, and decide what is next

The quarter that separates businesses with an AI capability from businesses with an AI subscription. Be genuinely willing to switch something off. Killing a use case that did not work is a success, not a failure, and doing it publicly makes the next experiment cheaper politically.

  • Compare against the Q1 baseline. Not against how it feels. Against the number.
  • Interview the people using it about what they work around. Workarounds are the most reliable signal you have.
  • Cut what is not earning. Cancel the licence, remove the step, document why.
  • Re-score readiness. Your scores will have moved and probably not in the dimensions you expected.
  • Write next year's one page using what you now know rather than what you assumed twelve months ago.
The decision

Build, buy, or partner.

This is the decision most SMEs get wrong in both directions — building commodities and buying differentiators. The rule is straightforward once you separate the two.

Buy

When the capability is generic

Transcription, translation, OCR, meeting notes, basic support chat, scheduling, grammar and drafting assistance. Someone has already solved these at scale and their version is better and cheaper than yours will ever be. Buy it, integrate it, move on.

Warning sign: you are about to build something that has four established competitors with free tiers.

Build

When the value is in your data or process

Anything where the useful output depends on your own historical records, your specific pricing logic, your compliance rules, or a workflow no vendor has modelled because your industry is too small for them to care about. This is where a custom build earns its cost.

Warning sign: every vendor demo requires you to change how you work to fit their model.

Partner

When you need it built once, properly

You need custom software but not a permanent engineering team. A partner builds it, documents it, hands it over and stays available. For most SMEs this is dramatically cheaper than hiring, and far more likely to finish than an internal side project.

Warning sign: the project has been “nearly done” internally for eight months.

A useful tiebreaker: if the thing you are considering would still be valuable to a direct competitor with no changes, buy it. If it would be useless to them without rebuilding it around their data, build it.

Money

What this actually costs.

The AI consulting market runs on vague ranges, so here are our real figures. They are the same numbers on our pricing page and our offers page, because a studio that quotes differently depending on which page you landed on is telling you something.

Idea Validation Sprint

£495
  • 90-minute working session
  • Feasibility review
  • Architecture outline
  • Roadmap and budget estimate
Start a brief

Rapid MVP Sprint

From £2,995
  • Two-week build path
  • Authentication, dashboard, backend
  • Deployment
  • Demo-ready product proof
Compare packages

Prototype / PoC

From £2,800
  • Clickable prototype or technical proof
  • Investor and stakeholder visuals
  • Feasibility validated in build, not slides
See scope

Branded MVP

From £9,000
  • Web apps, dashboards, internal tools
  • Full brand treatment
  • Pilot-ready release
See scope

Advisory / Retainer

From £1,500per month
  • Ongoing technical direction
  • AI implementation support
  • Product and architecture guidance
Discuss a retainer

On running costs: for most SME implementations the model and hosting bill lands in the tens to low hundreds of pounds a month, not thousands. If a proposal treats inference cost as a major line item for a business your size, ask to see the arithmetic. And treat any six-figure quote for a first SME AI project as a signal to get a second opinion.

Governance

Four lines of governance, not forty pages.

Enterprise AI governance frameworks are written for organisations with a compliance function. You probably do not have one. Here is the minimum that is genuinely defensible under UK GDPR and holds up in a client due-diligence questionnaire.

One

An acceptable use position

What staff may and may not use AI tools for, in plain language, on one side of a page. Silence here does not mean nobody is using AI — it means they are using it without telling you, which is the worse outcome.

Two

A data boundary

An explicit list of what must never be pasted into a third-party tool: client personal data, unredacted contracts, credentials, anything under NDA. Name the approved tools so people have a compliant path rather than only a prohibition.

Three

A named human approver

For any AI output touching money, legal wording, safety, employment or a promise to a client. Written down, by role. This single line is what most due-diligence questionnaires are actually asking about.

Four

A systems register

Which AI systems you run, what data each one touches, who the vendor is, and where it processes. A spreadsheet is fine. You will need it the first time a client asks, and increasingly they do ask.

If you sell into the EU, add risk-classification of each system under the EU AI Act, and technical documentation plus logging for anything classified high-risk. If you operate in the UAE, add data residency checks and Federal Data Protection Law No. 45 of 2021. The regional section of the readiness assessment covers all three in more detail.

Pattern recognition

Five ways SME AI strategies fail.

These are the ones we see repeatedly, in roughly the order of how often they show up. None of them are technology problems.

1. The pilot that never had a baseline

Six months in, nobody can say whether it worked, so it gets renewed out of sunk cost or cancelled out of scepticism. Both decisions are guesses. Record the number before you start.

2. The platform bought before the workflow was written

Licence paid, nobody changes how they work, quiet cancellation at renewal. The workflow document costs a day and prevents this entirely.

3. The strategy with no non-goals

Everything is in scope, so priorities shift with whoever spoke last, and nothing finishes. Writing down what you are not doing is the highest-leverage half hour in the whole exercise.

4. The rollout staff found out about on launch day

Adoption stalls, workarounds proliferate, and the tool gets blamed for a communication failure. Change management runs alongside the build, not after it.

5. The internal project that is always nearly done

Built in spare time by whoever is most enthusiastic, no deadline, no owner, no handover. It is not a budget problem — it is that nobody's actual job depends on it shipping.

6. Building what you should have bought

Three months rebuilding transcription or a booking form because it felt more impressive than integrating one. Spend your build budget where your data makes you different.

Questions

Common questions about AI strategy.

What is an AI strategy for a small business?

A short written document stating which business outcomes you are chasing, which workflows you will change, what data and tools that requires, who owns each decision, what you will not do, and how you will know it worked. For an SME it should fit on one page. Longer than that and it is a wish list.

How is it different from a digital strategy?

A digital strategy covers how work gets done through software generally. An AI strategy sits on top and only makes sense once those foundations exist. If your data still lives in spreadsheets and email, the honest first move is digital strategy.

Build or buy?

Buy where the capability is generic and someone else does it well. Build where the value comes from your own data, process or a workflow no vendor has modelled. Partner where you need it built once, properly, without hiring a permanent team.

How much should we budget in year one?

A validation exercise in the hundreds, a first working implementation in the low thousands, and running costs in the tens to low hundreds per month. Our figures are £495 to validate, £1,995 for a first AI integration, from £2,995 for a Rapid MVP.

How long until we see a return?

A narrow, well-chosen first use case should show measurable time saved inside a quarter. No signal in ninety days means the scope was too broad, the baseline was never recorded, or adoption never happened. All three are fixable — but only if you measured the start.

Do we need to hire an AI person?

Usually not in year one. A blend of AI literacy training for existing staff plus an external build partner covers most SME needs. Hire when you have a portfolio of live systems that need continuous ownership, not before.