AI liability for MSPs: missing policies create audit risk — Ignacio Lopez, Work-Smart.ai

A persistent governance gap is emerging in organizational AI implementations, especially among clients of MSPs. Despite the integration of AI in regulated sectors like wealth management and construction, most MSPs are neither engaged at project inception nor maintain oversight through formal policies or audit-ready documentation. Specific examples include deployments using technologies such as Claude, where neither roles for approving AI configurations nor processes for tracking data access are uniformly established.

A key development is the insufficiency of existing evidence and controls around AI use. Fewer than 20% of current client projects have written AI policies, and among 53 surveyed family offices, 80% are using AI without documented policy guidance. Insurers have started to introduce generative AI exclusions (e.g., CG4047), shifting the liability and evidentiary burden onto clients and their MSPs. Auditors now require dated, traceable documentation demonstrating that controls align with enacted policy, especially when AI accesses sensitive platforms like Microsoft 365.

Related discussions further illustrate the depth of this issue. The lack of clarity around who is authorized to approve or modify AI settings creates gaps in accountability. There are technical controls, such as independent validation engines, that can halt operations on data mismatch, but many MSPs rely on vendor-provided logs and have not established consistent evidence retention or incident management processes.

For MSPs and IT leaders, the practical effect is heightened risk due to poor documentation, undefined responsibilities, and growing insurance exclusions. Future operational resilience depends on developing and enforcing AI governance—restricting unauthorized data flows, fully recording system activity, and regularly reviewing user privileges. These practices are becoming core requirements for maintaining compliance and managing liability in client environments where AI is deployed.

Supported by:
WebPros(Comet Backup) https://cometbackup.com/?utm_source=mspradio&utm_medium=podcast&utm_campaign=sponsorship
HaloPSA https://usehalo.com/halopsa

NinjaOne On-Demand Webinar: https://go.businessof.tech/p/ninjaone-pod

💼 All Our Sponsors

MSP Radio is supported by our partners:
ABC Solutions — https://go.businessof.tech/p/abc-solutions-yt
CometBackup — https://go.businessof.tech/p/cometbackup-yt
FireTail — https://go.businessof.tech/p/firetail-yt
HaloPSA — https://go.businessof.tech/p/halopsa-yt
LogMeIn — https://go.businessof.tech/p/logmein-yt
Mailprotector — https://go.businessof.tech/p/mailprotector-yt
Pax8 — https://go.businessof.tech/p/pax8-yt
Rythmz — https://go.businessof.tech/p/rythmz-yt
ScalePad — https://go.businessof.tech/p/scalepad-yt
TimeZest — https://go.businessof.tech/p/timezest-yt
Transit AI — https://go.businessof.tech/p/transit-ai-yt

Supporting the IT services community through insights, analysis, and transparency.

⸻

🚀 Join The Small Biz Thoughts Community

The membership for independent MSP owners: vendor intelligence, member-only briefings, a private peer forum, and direct access to Dave.

👉 https://smallbizthoughts.org/join/

⸻

🎧 Subscribe to the Business of Tech

Want the show on your favorite podcast app or prefer the written versions of each story?
📲 https://www.businessof.tech/subscribe

⸻

📰 Story Links & Sources

Looking for the links from today’s stories?
Every episode script — with full source links — is posted at:
🌐 https://www.businessof.tech

⸻

🎙 Want to Be a Guest?

Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights:
💬 https://www.podmatch.com/hostdetailpreview/businessoftech

⸻

🔗 Follow Business of Tech

LinkedIn: https://www.linkedin.com/company/28908079
YouTube: https://youtube.com/mspradio
Bluesky: https://bsky.app/profile/businessof.tech
Instagram: https://www.instagram.com/mspradio
TikTok: https://www.tiktok.com/@businessoftech
Facebook: https://www.facebook.com/mspradionews