TL;DR
Pax8’s Q3 survey of 1,150 small-business leaders in the US, UK, Germany, and Sweden found 67% of AI-engaged companies have built at least one AI tool now in regular use — while 35% found tools, workflows, or agents running without anyone’s approval. Formal documented review tops out at 45% in the best market surveyed. The build-versus-govern gap is now the story.
The headline numbers
Pax8 released the Q3 2026 edition of its SMB AI Pulse Report on Monday, October 12. It is the third edition of the quarterly survey and the first to cover both sides of the Atlantic: 1,150 business owners, executives, functional leaders, and managers at companies with 5 to 499 employees across the United States, the United Kingdom, Germany, and Sweden.
Among businesses already engaged with AI, 67% have built one or more AI solutions now in regular use, another 19% are prototyping, and only 13% rely exclusively on off-the-shelf tools. The pressure is real: 66% say their business will not stay competitive without AI in the next three years, and 65% say they need to move immediately or within six months.
What they are actually building
These are not toy projects. Of the businesses building AI, 52% are developing automated workflows that connect AI to other business systems, 46% are building or testing AI agents that complete multi-step tasks on their own, and 39% have built custom integrations using an AI provider’s API.
The report makes an honest point about what that means: a business that deploys an agent or connects AI to its finance system takes on work that used to belong to software vendors — maintaining what it built, securing it, and paying for the compute it consumes.
The three bills coming due
First, shadow AI. Thirty-five percent of AI-engaged businesses found tools, workflows, or agents operating without official approval in the past six months alone. Formal, documented review of internally built AI tops out at 45% across all markets surveyed — as low as 23% in the UK, and in the US only 36% of builders have it, with another 41% relying on consistent but undocumented review.
Second, the bill. Among businesses that paid for AI in the past year, 49% got at least one bill or usage charge higher than they expected — 57% in the US and 65% in Sweden. Usage-based charges are the hardest to forecast, and they grow as businesses build more agents and workflows.
Third, the trust tax. AI freed up capacity for 69% of businesses, but 55% of decision-makers personally spend three or more hours a week reviewing, editing, or fact-checking AI-generated work — and 7% spend ten hours or more. Data security or privacy exposure is the top-cited risk of employee-built AI in every market (30% to 35%), and 70% of SMBs say they would pay at least 6% more for greater control over how their data is stored and used.
What to do about it
The report’s prescription is unglamorous: inventory what your business has actually built, secure it, govern it, and get a handle on what it costs. Start with a written list of every AI tool, workflow, and agent running in the company — the 35% that found shadow AI did it by looking. Then give one person or team the job of approving new builds, and put usage alerts on every API bill.
“SMBs are moving from using AI tools to building AI into the way their businesses operate,” said Nick Heddy, Pax8’s president and chief commerce officer. “The opportunity is significant, but so are the new demands around governance, security, cost, and accountability.” The build is the easy part now. The managing is not.