Version 1.0 · November 9, 2026
Dated facts in the book were checked on the dates shown in each chapter’s box. Settings, prices, and laws move, so open the source before you act on a line. Where a source is a news report rather than the vendor’s or agency’s own page, it says so.
Chapter 1. Are My People Already Using AI?
- US Census Bureau, Business Trends and Outlook Survey (BTOS), program page. How often the survey runs and who it samples.
- StartBusinessByState, reading of Census BTOS data, September 28, 2026. Trade-level AI-use figures.
- ACHR News, report on the ServiceTitan contractor survey, April 13, 2026. The 53 and 43 percent figures.
Chapter 3. Should I Just Ban It?
- Android Authority, April 6, 2023 (citing Economist Korea), and Bloomberg, May 2, 2023. The Samsung incidents.
- Hunton Andrews Kurth, December 10, 2024. An insurance application with AI questions.
Chapter 4. What Goes on the One Page?
- National Law Review, “Illinois Steps Up AI Regulation in Employment.” Who the Illinois Human Rights Act covers.
Chapter 5. What Can My People Never Paste In?
- OpenAI Help Center, Data controls in ChatGPT. “Improve the model for everyone” and temporary chats.
- OpenAI Help Center, How to delete and archive chats. Deleted chats removed within 30 days.
- Anthropic Privacy Center, How do I change my model improvement privacy settings?, August 3, 2026, and How long do you store my data?, July 1, 2026.
- Google, Gemini Apps Privacy Notice and Privacy Hub. Keep Activity, 18-month default, three years for reviewed chats.
- Microsoft Support, Copilot app activity history (the app updated August 18, 2026), and Privacy FAQ for Microsoft Copilot (the older app).
Chapter 7. Which AI Tools Should We Pay For?
- OpenAI Help Center, What is ChatGPT Business? and Data retention when a member is removed from a workspace.
- Claude Help Center, What is the Team plan?, What happens to a user’s data when they are removed, and Manage members on Team and Enterprise plans.
- Google Workspace Admin Help, Business edition pricing, and the Generative AI in Google Workspace Privacy Hub.
- Microsoft, Microsoft 365 Copilot Business pricing. $21 list, $18 first-year offer through December 31, 2026.
- Journal of Accountancy, May 14, 2026. AICPA peer-review guidance on SOC 2 work.
Chapter 10. What Do We Do When Something Goes Wrong?
- Tennessee Code Annotated § 47-18-2107(b), 2025 Code. Breach notice within 45 days.
Chapter 11. What Do I Tell Customers, Contractors, and My Insurer?
- Big I (IIABA); Gallagher, May 28, 2026; Insurance Journal, August 17, 2026. The ISO generative-AI exclusion forms.
- Trades Coverage filing review, reported by PHCP Pros (August 27, 2026), Insurance Business (August 25, 2026), and EC&M (September 17, 2026). 4,078 filings, 2,369 in effect.
- HSB, AI liability insurance for small businesses, March 18, 2026.
Chapter 13. What Changes When We’re Regulated or Audited?
- Eckert Seamans, June 12, 2026; Mayer Brown, May 20, 2026; Davis Wright Tremaine, May 21, 2026. Colorado SB 26-189.
- Moore and Van Allen and Hoog Law (status as of October 30, 2026). Colorado’s draft rules.
- CalMatters Digital Democracy, California SB 947 (Chapter 859, Statutes of 2026); Paul Hastings, October 15, 2026.
- Connecticut Public Act 26-15, at cga.ct.gov.
Chapter 14. What About the AI Already Inside Our Software?
- OWASP Top 10 for LLM Applications, 2026 edition, as reported by Invicti (August 5, 2026) and Help Net Security (August 6, 2026).
- UK National Cyber Security Centre, December 8, 2025. Prompt injection may never be fully fixed.
- State Farm Mutual Automobile Insurance Co. v. Bockhorst, 453 F.2d 533 (10th Cir. 1972); DLA Piper, June 2026; Quinn Emanuel, “When AI Agents Do the Transaction”.
- NIST, AI Agent Standards Initiative.
- Microsoft Learn, Manage app consent policies; Message Center MC1097272 (archive). The Microsoft-managed consent default.
- Google Workspace Admin Help, Control which third-party and internal apps access Google Workspace data.
- Claude Help Center, Get started with Claude Duet; OpenAI, ChatGPT Enterprise and Edu release notes (dots, November 4, 2026); Cursor, Grok Bot Terms and Grok Bot for Teams and Enterprise; Meta Help, How Muse works with your guidance and approval.
- TeslaNorth, “Grok Bot Phone Calls Go Live,” November 4, 2026 (news report). Reuters, report on Muse’s phone-calling feature, September 22, 2026 (news report).
- Google Business Profile Help, About automated calls from Google on behalf of customers and About automated calls and texts from Google to your business.
- Federal Communications Commission, Declaratory Ruling FCC 24-17, February 8, 2024, summarized by Mayer Brown. AI-generated voices are “artificial” under the robocall law.