Here’s a number that should make you uncomfortable: 62% of small and mid-sized businesses are already using AI. Not planning to use AI. Not evaluating AI. Using it.

That data comes from Pax8’s inaugural Pulse survey, released March 24, covering 400 U.S. small business leaders. The margin of error is ±4.9 points. The story is not what Pax8 headlined.

They called it a “gap between operational leaders and owners on AI urgency.” That’s accurate but undersells the problem. What the data actually shows is that your clients have moved on without you.

The Real Story in the Numbers

A 14-point gap between operational leaders and owners is interesting. But the gap I care about is different: 62% of SMBs are already running AI tools, while most MSPs are still working through what their AI service offering is going to look like.

Think about what that means on the ground. Your client’s ops manager found a tool, deployed it, connected it to company data, and is using it daily — without a security review, without governance controls, without any visibility from their IT provider. The MSP wasn’t asked because the MSP hadn’t yet positioned themselves as the person to ask.

The survey makes this explicit. 22% of SMBs cite security or privacy concerns as their biggest barrier to AI adoption. They know the risks. They’re doing it anyway. And 84% say they’d trust an outside technology advisor to help implement AI. That’s the opening. The question is whether your practice is positioned to walk through it.

The Dead Playbook Here

Most MSPs reading this are thinking about AI in one of two ways. Either they’re waiting for a clear vendor-led motion to emerge before building a practice, or they’re treating AI as a product add-on — one more thing to put in the stack and invoice for.

Both are wrong.

Waiting for clarity is how you become the MSP who had to catch up after their clients already made commitments. The clients who are 62% of the way through adoption right now will have vendor relationships, integrations, and internal expertise by the time you arrive with a service offering. You’ll be selling to someone who already has opinions.

The product add-on approach is worse. Clients don’t need more tools. They need someone to help them make sense of the tools they already have, figure out which ones are actually secure, and build a coherent strategy instead of a pile of one-year contracts.

Nick Heddy, Pax8’s president, said it directly: “The MSPs that recognize this shift and position themselves as strategic advisors rather than IT support will be the ones who thrive. Trust is the product.” That’s not marketing language. It’s a description of how the competitive landscape is reshaping.

What the Governance Gap Means for You

The Pax8 data points at something the industry has been dancing around: SMBs are adopting AI tools faster than anyone — including the vendors selling those tools — expected. The governance structures to manage that adoption don’t exist yet at most companies.

That’s your business opportunity if you’re willing to define it.

The MSPs who are going to win the next three years aren’t the ones with the most impressive vendor certifications or the tightest NOC. They’re the ones who can sit across from a business owner and give them an honest answer to four questions: What AI tools are actually running in your business right now? Which of them have access to sensitive data? What happens if one of them gets compromised? And what does a defensible AI governance policy look like for a company your size?

Most business owners can’t answer those questions. Most MSPs can’t help them yet either. The window where that’s acceptable is closing fast.

The Math That Should Drive Your Decision

The Pax8 survey found that 73% of SMB operational leaders report AI investments are already delivering measurable results. That number is self-reported, so take it with appropriate skepticism. But even directionally, it means SMBs aren’t going to stop. The momentum is established.

Meanwhile, 87% of MSPs plan to increase AI investments — but planning to invest is not the same as having a service you can sell tomorrow. There’s a lag, and in that lag, your clients are making decisions.

The addressable market for managed AI governance, AI readiness assessments, and AI implementation services inside the SMB segment is real and growing. Pax8 Beyond 2026 in Salt Lake City in June will show you what the vendor-led motion looks like. But don’t wait until June to start building the conversation internally.

Pick one client — ideally one in a regulated vertical or one you know has been experimenting with AI tools — and do an AI audit. Find out what they’re running, what it’s connected to, and what governance they have in place. If the answer is “not much,” you have your first AI services engagement and your best case study.

This isn’t complicated. The clients are already asking for it, even if they’re not framing it that way. They’re looking for someone to help them move fast without breaking things. That used to be infrastructure. Now it’s intelligence.

The MSPs who figure that out in the next six months will own their market. The ones who wait until there’s a SKU in the distributor catalog will be competing on price for a service that’s already commoditized. You’ve seen this movie before — this is just the AI chapter.