Why Kansas Small Businesses Are More Exposed to AI Risk Than They Realize
- Tom Foreman
- May 14
- 7 min read
There is a conversation happening inside your Kansas small business right now that you are not part of.
Not in a conference room. Not over email. It is happening at individual desks, on personal laptops, in browser tabs your team opened before you arrived this morning. Someone in your office is pasting a client proposal into ChatGPT. Someone in accounting is running vendor contracts through an AI summarizer they found for free online. Someone in HR — and this one is uncomfortable — ran your last hire's application materials through a tool that asked them to create an account using their work email.
They are not trying to cause problems. They genuinely believe they are doing their jobs better. And every one of them, in the thirty seconds it takes to hit paste, is making a decision about your company's data that you never got to weigh in on.
This is shadow AI. And in Kansas, it is running unchecked inside the majority of small businesses right now.
The Shadow AI Problem Kansas Small Businesses Are Not Talking About
Shadow AI is not a cybersecurity buzzword. It is not a problem reserved for tech companies or enterprises with thousands of employees. It is the specific, practical reality that your team is using AI tools — right now, today — that you did not approve, did not evaluate, and almost certainly cannot see.
The research is blunt about how widespread this is. Nine out of ten businesses have shadow AI running inside their operations. Seventy-eight percent of employees using AI tools brought those tools to work themselves. Seventy-seven percent of those employees paste sensitive business data into them as a normal part of their day — not occasionally, but routinely.
And only thirty percent of business owners and operators have any real visibility into what their teams are actually doing with AI.
That means if you are running a Kansas small business with twenty, fifty, or a hundred employees, the odds are overwhelming that AI is actively reshaping how your people work, where your information goes, and what your organization is actually worth — and you are watching none of it.
What Shadow AI Actually Looks Like Inside a Small Business
It rarely looks like a scandal. That is part of what makes it so difficult to catch and so easy to dismiss.
Shadow AI looks like your best salesperson using an AI writing tool to turn rough call notes into polished follow-up emails — because it saves her an hour a day and she closes more deals that way. It looks like your operations manager feeding process documentation into an AI assistant to pull out action items faster. It looks like your bookkeeper summarizing monthly reports with a free AI tool because your accounting software's built-in AI costs extra and this one does the same thing for nothing.
None of these people think they are doing anything wrong. Most of them are right that they are more productive. The problem is not their intentions. The problem is that in every one of those examples, your company data — client names, internal processes, financial summaries — left your organization and entered a third-party system you did not vet, did not agree to, and cannot audit.
When something goes wrong — and the research is clear that it does go wrong — it is not the employee who gets called to account. It is you.
Why Kansas Businesses Face a Particularly High Exposure
Shadow AI is a national problem, but Kansas small businesses carry some specific vulnerabilities that make the risk harder to manage than it might be for a mid-sized company in a major metro.
No dedicated IT infrastructure. The majority of Kansas small businesses — particularly those in the fifty to one-hundred-fifty employee range — do not have a full-time IT department. The person responsible for technology decisions is often the COO, the office manager, or whoever happens to be most comfortable with computers. That is not a criticism. It is a structural reality that means there is no one whose job it is to monitor what AI tools employees are accessing, or where company data is going when they do.
Regulated industries with informal AI habits. Kansas has a significant concentration of businesses in agriculture, insurance, financial services, healthcare, and legal services. These are industries with meaningful regulatory obligations around data handling — HIPAA, GLBA, state insurance regulations, client confidentiality requirements. They are also industries where employees under deadline pressure will reach for whatever tool makes the work go faster, without necessarily connecting that action to a compliance obligation. The gap between what your data policy says and what is actually happening on your devices is almost always wider than you think.
The trust problem. Small businesses run on relationships. Kansas business culture in particular tends toward tight-knit teams where a high degree of trust is both a genuine strength and a blind spot. When an owner trusts their team — as they should — they are often also the last person to suspect that unauthorized tools are being used, because the team is not hiding it maliciously. They just did not think to ask.
That combination — no dedicated IT, regulated industries, and a high-trust environment — creates ideal conditions for shadow AI to spread quietly and extensively before anyone realizes it is happening.
The Three Ways Shadow AI Is Damaging Your Business Right Now
The risk is not theoretical and it is not distant. Shadow AI creates three categories of real, immediate harm for small businesses.
Data exposure. When your employee pastes client information into a free AI tool, that data is processed by a third-party model trained on user inputs. Depending on the tool's terms of service — which almost no one reads — that data may be retained, used for model training, or accessible to the company's staff. Your clients trusted you with their information. They did not consent to it being shared with a tool you did not know your team was using.
Compliance liability. If your business operates in a regulated industry, shadow AI usage can create violations you have no knowledge of until someone files a complaint or an audit surfaces the activity. New York attorneys have already been sanctioned for submitting AI-generated legal briefs containing fabricated citations. Insurance companies are beginning to ask pointed questions about AI governance before renewals. The regulatory environment around AI is tightening and it is doing so faster than most small businesses are tracking.
Operational blind spots. This is the risk that gets talked about least and matters most for the long-term health of your business. When AI tools are embedded in how your team works but invisible to leadership, you lose the ability to understand how your own company actually functions. You cannot see which processes depend on AI outputs. You cannot assess what happens when a tool changes its pricing or shuts down. You cannot evaluate whether the AI your team is using is making your operations better or quietly introducing errors no one is catching. Your company has an operational model that you cannot see — and that gap is a liability whether you are thinking about growth, acquisition, or simply next quarter.
What Your Employees Think They Are Doing
Here is the part that most business owners find genuinely surprising when they first see their shadow AI data: their employees are not being reckless. They are being resourceful.
The accounting team that told you at the all-hands they do not use AI for sensitive work? They probably believe that is true. They may not categorize the tool they use every Friday as "AI" in the same way you do. They think of it as a shortcut, a time-saver, a trick they figured out. The connection between that tool and the company's data policy is one they have never been asked to make.
This is not a training problem. It is a visibility problem. You cannot enforce a policy you cannot see. You cannot close a gap you do not know exists. And you cannot have the honest conversation with your team about AI usage until you know what that usage actually looks like.
What Kansas Small Business Owners Can Do About This Today
The answer is not surveillance. Installing keyloggers, monitoring every screen, or demanding that employees report every tool they use will damage the trust your business runs on and will not actually solve the problem. Your team will find workarounds and they will do so with less transparency than before.
The answer is visibility — clear, non-invasive, factual visibility into what AI tools are being used across your organization and where your data is going when they are.
Crow, morriganAI's free AI footprint tool, was built specifically for businesses in this situation. It installs in under sixty seconds on Windows devices, collects zero personal data about your employees, stores no personally identifiable information, and begins surfacing your organization's AI activity within minutes. No IT department needed. No surveillance. No complicated setup. Just a clear picture of what is actually happening inside your business.
If you would rather hand the entire process to someone else, morriganAI's White Glove service handles everything for $500. We install Crow across your devices, monitor AI activity for ninety days, and walk you through exactly what we found in a dedicated readout session. You attend two calls. We handle the rest.
The Question Worth Sitting With
You already know your team uses AI. That is not the question anymore. The question is whether you know how — and whether, when something goes wrong, you will be able to say honestly that you did everything a reasonable business owner should have done to understand and manage it.
In Kansas and across the Midwest, most small business owners cannot answer that question yet. The ones who find out first will have the clearest advantage when it matters most.
morriganAI helps small and mid-market businesses understand and manage their AI Identity — how their people, systems, and AI tools actually interact inside their operations. Based in Des Moines and serving businesses across the Midwest.
Comments