"SMEs Have No Data Worth Stealing" — The Most Dangerous Myth in AI Adoption

There's a line we keep hearing — often from AI startup founders themselves: "SMEs don't have data anyone wants, so there's no real risk in putting everything through a cloud LLM." It sounds pragmatic. It's also wrong on both halves: your data is more valuable than you think, and "someone wanting it" was never the main risk in the first place. In industry surveys, 64% of small businesses believe they're not an attractive target — while 80% experienced a cyberattack in the past year.

To be clear about where we stand: we run an AI-driven MSP and we push clients toward AI adoption, not away from it. This isn't an anti-AI post. It's a correction of the reasoning — because a good decision made for a wrong reason eventually becomes a bad decision.

Where the myth comes from

The logic goes: we're not a bank, we don't hold state secrets, our "secret sauce" wouldn't interest anyone. Therefore nobody is going to steal our prompts from OpenAI's servers, so why pay for enterprise plans or worry about data controls?

The mistake is picturing a human attacker deciding whether your company is "worth it". That's not how any of this works. Modern attacks are automated and indiscriminate — nobody needs to want your data specifically, the same way a phishing botnet doesn't care whose mailbox it lands in. And the biggest AI data risks don't involve an attacker at all.

What your "boring" data is actually worth

Take a typical 30-person Singapore SME and list what actually sits in its systems — and now, in its staff's chat histories with AI tools:

• Customer PII — names, NRIC numbers, phone numbers, addresses. Personal data appears in roughly 46% of all breaches because it sells, powers scams, and fuels identity fraud. Your customers' data is exactly as valuable as a bank's customers' data — it's the same people.
• Credentials — still the single most common way attackers get in anywhere. Staff paste config files, connection strings and API keys into chatbots more often than anyone admits.
• Your clients' secrets — the quotation you're preparing for a listed company, the payroll file you process for a client, the M&A discussion in your mailbox. SMEs are the documented backdoor into bigger organisations: attackers compromise the small vendor to reach the large customer. You may not be the target — you're the door.
• Your own money — the average breach costs a Singapore SME around S$120,000 in local industry estimates. Ransomware operators don't check your revenue before encrypting your server; they price the ransom after.

What actually happens to data you paste into a cloud LLM

"Being stolen by hackers" is the least likely fate of your prompts. These four are the realistic ones:

1. On consumer plans, your chats train the model — by default

As of 2026, the free and personal-paid tiers of every major AI assistant — ChatGPT, Gemini, Claude, Copilot, Grok — use your conversations for model training by default. ChatGPT's "Improve the model for everyone" toggle ships switched on; Anthropic moved consumer accounts to default-on training in September 2025. Business, Enterprise and API tiers are the opposite: no training by default. That single tier difference — not the model, not the price — is the main data-protection line. Most SME staff are on the wrong side of it, on personal accounts the company can't see.

2. Your prompts sit in retention on someone else's infrastructure

Whatever you paste is stored, for weeks to indefinitely depending on plan and settings. Stored data inherits every risk of the provider: their breaches, their misconfigurations, their legal obligations. AI providers have already had chat histories exposed by database misconfigurations, and court orders have forced providers to preserve user conversations they would otherwise have deleted. Your data's safety is now someone else's operational discipline.

3. Chat history turns one stolen password into a full archive

A year of an employee's AI chat history is a searchable archive of everything they worked on: client names, pricing, contracts, internal disputes. One phished password on a personal ChatGPT account — usually without MFA — hands all of it over at once. This is the "stolen data" scenario that actually happens, and it doesn't require anyone to target you.

4. The AI wrapper you bought has its own data problem

Here's the uncomfortable part for the founders repeating this myth: many SME-facing AI products are thin layers over the same cloud LLMs, and the data handling behind them is often undocumented — which API tier, what logging, what retention, which country. When a vendor answers your data question with "SMEs don't have data anyone wants", that's not a security architecture. Ask instead: where does my data go, who stores it, for how long, and is it used for training? A serious vendor answers in one paragraph.

The PDPA point nobody mentions

Even if you accept the myth entirely — suppose nobody on earth wants your data — the compliance obligation doesn't care. Under the PDPA, pasting customer personal data into a cloud AI tool is a disclosure and, for overseas-hosted services, a cross-border transfer. Both need to satisfy the Act regardless of whether any attacker is interested, and the PDPA applies to a 5-person company the same as a 5,000-person one — with penalties up to 10% of annual Singapore turnover or S$1 million. The PDPC has published guidance on personal data in AI systems, and its framing puts responsibility on the organisation deploying the AI — you — not the model provider. We covered the fundamentals in our PDPA guide for Singapore SMEs.

The right conclusion is not "avoid AI"

The opposite overcorrection — banning AI tools — fails too, and predictably: staff just use personal accounts on their phones, and you lose the productivity and the visibility. Surveys of workplace AI use find most sensitive pastes already happen through personal accounts outside company oversight. The goal isn't less AI. It's the same AI, through accounts and tiers you control.

A minimal AI usage policy for an SME — five rules

You don't need a 40-page governance framework. You need these five rules, written down and enforced:

1. Company AI accounts only. Business-tier ChatGPT / Claude / Copilot, provisioned and off-boarded like email. No work data in personal accounts — this one rule eliminates the training-by-default problem and most of the visibility problem.
2. Classify before you paste. A one-line rule staff can remember: customer personal data, credentials, and client-confidential documents don't go into any AI tool without approval. Everything else is fine.
3. MFA on every AI account. Chat history is an archive of your business. Protect it like your mailbox.
4. Vet AI vendors with four questions. Where is my data processed? Who stores it and for how long? Is it used for training? Can you delete it on request? No clear answers, no deal.
5. Name an owner. Someone — internal or external — owns AI usage: which tools are approved, who has access, and reviewing it quarterly. Governance that belongs to nobody doesn't exist.

Frequently asked questions

Is it safe for my business to use ChatGPT?

Yes — on a business or enterprise tier, with MFA, under a simple usage policy. The risk isn't the tool; it's free personal accounts handling customer data with default settings.

Does ChatGPT or Claude train on what my staff type?

On free and personal paid plans — yes, by default in 2026, unless the user opts out. On business, enterprise and API tiers — no, not by default. Check the tier, not the brand.

Does the PDPA really apply to a company our size?

Yes. The PDPA has no small-company exemption. If you hold personal data of customers, staff or prospects, the obligations — including how that data flows into AI tools — are yours.

Should we run a local LLM instead?

For most SMEs, no — self-hosting trades a manageable data-governance problem for a hardware, patching and quality problem you're less equipped to run. Business-tier cloud AI with proper controls is usually the right risk balance. Local models make sense for specific high-sensitivity workflows, not as a default.

An AI vendor told us our data isn't sensitive enough to worry about. Red flag?

Yes. It means they either haven't thought about data handling or hope you won't ask. Put the four vendor questions above to them — the answers (or the silence) tell you everything.

Our approach

We sell AI adoption for a living — which is exactly why we won't repeat the "nobody wants your data" line to win a deal. Evernet's VCAIO service exists to give SMEs the adoption and the governance in one motion: the right tools on the right tiers, a usage policy people actually follow, and PDPA obligations handled from day one.

Rolling out AI and not sure where your data is going? Book a discovery call — we'll map where AI is already being used in your company (there's always more than you think) and what to fix first.