Navigating AI Adoption and Governance for Small Businesses: Interview with David Espindola

Navigating AI Adoption and Governance for Small Businesses: Interview with David Espindola

20:50 Feb 1, 2026
About this episode
The episode centers on practical approaches for Managed Service Providers (MSPs) and IT leaders assessing artificial intelligence (AI) adoption, with David Espindola detailing the crucial distinction between “maker,” “shaper,” and “taker” strategies. David Espindola emphasizes that organizations must intentionally decide their role in AI development and use—whether building proprietary systems, shaping solutions atop existing models, or simply consuming pre-built capabilities. This decision, he notes, is foundational for aligning risk tolerance, investment, and technical capacity with business goals, especially given the rapid pace and inherent uncertainty in AI’s evolution.Supporting this framework, David Espindola references insights from a Small Business Administration project, which found that most small businesses are struggling to define applicable use cases for AI and tend toward risk-avoidant stances despite external pressures to adopt the technology. He stresses that AI implementation should not be a solution in search of a problem; rather, an organization’s readiness, risk, investment capability, and specific industry context must determine its approach. Key recommendations include conducting readiness assessments, appointing internal AI champions, and starting with small, low-risk pilot projects to build internal understanding and governance processes before scaling.The discussion broadens to ethical and governance considerations, with both David Espindola and the host cautioning that responsible AI adoption is a business necessity rather than a compliance checkbox. They advocate for formal employee training, the establishment of clear usage policies, and strict controls over tool access to mitigate risks such as data leakage, hallucinated outputs, and misaligned communications. The emphasis is on building practical safeguards rather than pursuing AI for its own sake, reflecting a pragmatic, risk-managed approach tailored to each organization’s context.For MSPs and IT service providers, the practical takeaways are clear: pursuing AI adoption requires a methodical, risk-aware strategy focused on business relevance, operational governance, and targeted experimentation. The harms of rushed deployments, poor change management, or lack of internal education are underscored, with the implication that long-term value and reduced exposure are found in deliberate, well-governed adoption efforts. Readiness assessments, pilot programs, and robust policy frameworks emerge as the primary enablers of sustainable outcomes in this rapidly evolving landscape.  ? All Our SponsorsSupport the vendors who support the show:? https://businessof.tech/sponsors/ ? Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more.?
Select an episode
0:00 0:00