SMBs without legal teams sign AI vendor MSAs that lock them in via seven recurring clause patterns: (1) data-portability narrowness (prompts/embeddings/agent state excluded from 'your data' definitions), (2) auto-renewal with short notice windows, (3) model-deprecation rights without credit, (4) sub-processor expansion without consent, (5) output-IP ambiguity, (6) pricing escalator without cap, (7) termination-data export window too short. Pattern recognition + a 1-page checklist applied before signature is the practical defence. Five questions emailed to the vendor sales rep before signing — and their willingness to answer in writing — is itself a signal.
SMB-specific procurement piece. Lead-magnet pair with RES-005 (AI MSA Red-Team Checklist downloadable). Cadence 45-day (vendor MSA template revisions + EU AI Act enforcement guidance both move at this cadence). Trigger conditions: major AI vendor MSA template revision (Microsoft, OpenAI, Anthropic, Google all publish public MSAs); new EU AI Act Article 16 implementation guidance affecting deployer obligations; SMB-tier consumer protection rulings on auto-renewal / data-portability. Sister claims: AM-145 (enterprise-tier exit clauses), OPS-014 (vendor due diligence small business), RES-005 (MSA red-team checklist).
/holding/OPS-059/Embed this claimiframe + oEmbed
The card auto-updates when the claim's status, last-reviewed date, or correction log changes. Embedders never need to refresh — the card is rendered live from the canonical record.
Email-me when OPS-059's status, next review date, or correction log changes. One email per change. No newsletter subscription, no other mail.
The claim: SMBs without legal teams sign AI vendor MSAs that lock them in via seven recurring clause patterns: (1) data-portability narrowness (prompts/embeddings/agent state excluded from 'your data' definitions), (2) auto-renewal with short notice windows, (3) model-deprecation rights without credit, (4) sub-processor expansion without consent, (5) output-IP ambiguity, (6) pricing escalator without cap, (7) termination-data export window too short. Pattern recognition + a 1-page checklist applied before signature is the practical defence. Five questions emailed to the vendor sales rep before signing — and their willingness to answer in writing — is itself a signal.
About this register
The Operators register tracks claims published from practitioner-advisory pieces addressed to solo founders, micro-SMB, and small businesses up to around fifty people. Claims are reviewed on a 30–45 day cadence — tooling and SMB-relevant pricing shift faster than enterprise procurement signals.
Recent corrections in Operators
- OPS-002 · Partial · 28 May 2026
Price drift: Notion Business with bundled AI now about $15/seat annual ($20 monthly) vs cited $19.50; ClickUp Brain now $7/seat vs cited $9. Verdict logic unchanged; figures need updating.
- OPS-036 · Partial · 29 Apr 2026
Initial publication 29 Apr 2026. Status set to Partial at publication because clause 6 commentary references an order-of-magnitude remediation-cost gap derived from the IAPP 2024 AI Governance Profession Report; the report characterises the gap as material but does not publish a precise multiple, so the wording is annotated source: our-estimate.
- OPS-035 · Holding · 29 Apr 2026
Initial publication 29 Apr 2026. Status set to Partial at publication because category 5 lacks the same regulatory/cited-consequence anchor as categories 1-4.
Reviews coming up in Operators
- OPS-062 · Holding · next +2d (02 Jun 2026)
For a UK sole trader, Claude Pro and ChatGPT Plus subscriptions are allowable expenses under HMRC's wholly-and-exclusiv…
- OPS-065 · Holding · next +11d (11 Jun 2026)
A solo agency delivering AI-assisted work to a client needs four contract clauses by Aug 2026 — disclosure of AI use, I…
- OPS-064 · Holding · next +11d (11 Jun 2026)
For a freelance translator below 0.10 €/word, accepting MTPE rates at agency-standard 40–60% of full rate is rational o…