An AI tool cannot respect a business boundary that has never been made explicit. Telling it to be helpful, professional and accurate sounds sensible, but those instructions do not explain whether it may quote a price, approve an exception, discuss a customer record or answer a question outside the company's expertise. For a small business, a good AI brief is therefore less like brand copy and more like an operating manual for permitted behaviour.
Begin with the job, not the personality
State what the tool is there to accomplish in practical terms. It might answer approved routine questions, gather information for an enquiry or draft responses for staff review. A narrow purpose makes later rules easier to interpret.
Tone can be added after the operational role is clear. A friendly voice does not compensate for uncertainty about what the AI is authorised to do.
Write a positive scope and a negative scope
List what the tool may handle and what it must not handle. The second list is essential. A customer-service assistant might explain published service information but be prohibited from making bespoke commitments, interpreting specialist advice or changing an account without the required checks.
Use examples around the boundary so similar-looking requests do not depend on vague interpretation.
Separate facts, actions and decisions
An AI may be allowed to retrieve a fact without being authorised to act on it. It may explain a refund policy while lacking permission to issue a refund, or show available appointment options while requiring another system to confirm the booking.
Brief these as different capabilities. This prevents access to business knowledge from quietly becoming unintended decision-making authority.
Define the approved sources of truth
Tell the tool which information should govern its answers and who maintains it. Current service information, policies and operational guidance should be distinguishable from old documents, informal notes or general model knowledge.
Also define behaviour when the approved sources do not answer the question. The safest instruction is often to acknowledge the limit and escalate rather than construct a plausible answer.
Make escalation a normal business rule
Specify situations that should go to a person: uncertainty, complaints, sensitive data, commercial discretion, safety issues or requests outside scope. Explain what context should accompany the hand-off and what the AI may tell the customer while they wait.
A strong brief treats escalation as successful handling of a boundary, not as a failure of automation.
Control the personal information the tool can request
Define which information is necessary for each task rather than allowing an open-ended conversation to collect whatever seems useful. The ICO's guidance on AI security and data minimisation discusses the need to consider what personal data an AI system actually requires and the security implications of AI processing.
The brief should therefore cover both what the AI may say and what it may ask customers to disclose.
Test the brief with adversarially ordinary questions
The most useful tests are not bizarre attempts to trick the model. Use realistic requests that blur the rules: a routine question containing a complaint, a customer asking for an exception, conflicting information or a request that begins in scope and ends outside it.
Check whether the tool recognises the boundary, preserves the customer's context and follows the intended escalation route. Revise the rule where two reasonable readers could interpret it differently.
Treat the brief as maintained operational documentation
Business rules change. Services are added, policies are revised and staff discover new edge cases. Assign an owner to the AI brief and review it when the underlying operation changes or monitoring reveals repeated uncertainty.
The best briefing document gives a small business a way to explain its own boundaries clearly enough that both people and software can follow them. It does not attempt to anticipate every sentence a customer might type. Instead, it establishes purpose, authority, trusted information and escalation so the AI can be useful inside a controlled area and reliably stop where human judgement should begin.