How should a small UK firm set up AI properly in 2027?

Quarter 1: foundations

Tidy your files and permissions before you connect any tool to them. One folder structure, one current version of each key document, and a review of who can open sensitive folders. See our guide on organising your data before Copilot.

Write a one-page AI policy. Name the approved tools and plans, the data rules, and who checks the output. Give it a review date. Our guide on what goes in an AI policy sets out the headings.

Check each tool's data settings and write down what you find, with the date.

Quarter 2: one task, done well

Pick a single task that eats time every week, for example first drafts of routine client emails or summarising long documents. Run it with two or three people. Measure the time it takes before and after, using a stopwatch for a fortnight, not a guess.

Keep what works. Drop what does not. A task that saves nothing measurable is not worth keeping.

Quarter 3: widen, with limits

Add a second task or a second team. If you want an AI tool to read email or files, start with read-only access and one folder, as we set out in our guide on connecting AI to email and files.

Hold a short refresher for the team. Use real examples from the last six months.

Quarter 4: review and decide

Look at the numbers. Which tasks saved time, which cost more in checking than they saved, and which tools nobody opened. Cancel what is unused.

Re-read your policy against how people actually work. Update it, and set the next review date.

Dated changes worth watching

Microsoft's UK page shows Microsoft 365 Copilot Business as an add-on at £13.80 per user per month, against a list price of £16.10, for the first year only. It says this applies between 1 July and 31 December 2026, and that prices exclude VAT. If you plan to buy, that end date comes before the new year. Check the page again before you commit.

The Model Context Protocol publishes dated revisions of its specification, the latest we read being 2026-07-28. If you rely on connectors, ask your supplier which revision they support, and check again each quarter.

Anthropic's consumer terms changed on 28 August 2025, with a choice about training and a longer retention period for those who opt in. The change did not apply to business plans. It shows why a written check of settings, with a date, is worth doing.

What we are not predicting

We have not tried to forecast prices, features or regulation for 2027. Plans change, and a forecast that cannot be checked is a guess. The plan above works whatever the vendors do, because it is built on your data, your rules and your own measurements.

Where this leaves you

Start with the first step in the first quarter, and do not wait for January. This is a general guide, not legal advice. If you would like help running this plan, get in touch through our Contact page.

Sources

Microsoft UK, Microsoft 365 Copilot Business pricing page, microsoft.com/en-gb. Read 3 November 2026.

Model Context Protocol, changelog for revision 2026-07-28, modelcontextprotocol.io. Read 3 November 2026.

Anthropic, 'Updates to our consumer terms', anthropic.com/news, 28 August 2025. Read 3 November 2026.