Trinity College Dublin and Microsoft found organisations with a formal AI policy are ten times more likely to report major productivity gains. Fewer than half have written one.
The AI Economy Ireland 2026 research from Trinity College Dublin and Microsoft Ireland found that organisations with a formal AI policy are ten times more likely to report major productivity gains than organisations without one. Fewer than half of those surveyed had written a policy at all.
That number reads backwards to most owner-managers. A policy is the thing the insurer asks for. It is the document that slows people down, adds a sign-off, and sits in a shared drive nobody opens. It is not supposed to be the thing that makes the tools work.
The document is not doing the work. The decisions behind it are.
You cannot write an AI policy without answering four questions. Which tools are approved. What data may be typed into them. Who checks the output before it reaches a client. Who owns the answer when it turns out to be wrong.
A firm with no policy has not decided against any of that. Nobody was ever asked. So the answers get made individually, by whoever is under the most pressure that afternoon, and they never get compared.
The pattern turns up in almost every diagnostic we run. A firm is confident it has no AI exposure because it has bought nothing, and an afternoon of asking staff directly surfaces a long list of tools already in daily use, most of them on personal accounts and several of them touching client material. Somewhere in that list is one genuinely good piece of work, usually a single person who has taken days off a recurring monthly task, and nobody else in the firm knows it exists. The organisation is carrying the full risk of AI use and capturing a fraction of the benefit.
That is the mechanism behind the ten-times figure. The policy is what turns a private habit into a firm-wide method. Once there is an approved tool and a stated way of working, the thing that worked for one person can be handed to the next four. Without it, every good use of AI in the organisation stays a personal secret and every bad use stays invisible.
Irish SMEs are getting more out of this than the multinationals
The same research found that SMEs investing in AI report significant productivity gains at more than twice the rate of large organisations, 18% against 8%. That is not the story most people expect, and it is not an accident.
In a 40-person business the person with the problem and the person who can change the process are often the same person, or they share a kitchen. There is no architecture review, no change advisory board, no eighteen-month enterprise licensing cycle. When something works on a Tuesday it can be standard practice by Friday.
The offsetting number is on breadth. Large firms are far ahead on the share of staff saving two or more hours a week, 54% against 25%, and 15% of SMEs report no formal AI training at all against 6% of large firms. Small firms are better at the first success and much worse at the second, third and fortieth. The gap is distribution, and distribution is exactly what a written standard fixes.
What a usable SME policy actually contains
One page. If it runs to twelve, it was written for a regulator rather than for staff, and it will not change what anyone does on Monday.
Name the approved tools, by product and by account type, and say plainly that work accounts are used and personal ones are not. Set out three data classes: what can go into an AI tool freely, what can go in only under the firm's own tenancy, and what never goes in at all. Client-identifying material, HR files and anything covered by privilege belong in the third bucket, and staff need that list in concrete terms rather than as a principle.
State the review rule. Every output that leaves the firm is checked by a named human who is accountable for it, and the AI is not a defence if it is wrong. Cover disclosure, because Article 50 of the EU AI Act has applied since 2 August 2026 and anything conversing with a customer has to say what it is. And put one name against the document, with a review date, so it does not quietly expire.
Add the training line while you are there. Article 4 requires AI literacy for staff using these systems, and the 15% figure above suggests most Irish SMEs are relying on people teaching themselves from social media.
Adoption is not capability
Ninety-two per cent of Irish organisations are using or planning to use AI. Ten per cent of leaders describe their deployment as advanced. The distance between those two numbers is where almost every Irish business currently sits, and it is not closed by buying more licences.
The firms that move are the ones that write down what they have decided. It is an afternoon's work and it is the only intervention in this field that costs nothing and shows up in the productivity numbers.
We run diagnostics for Irish SMEs and mid-sized firms that establish what AI is actually in use, where the value and the exposure sit, and what a one-page policy needs to say to fit the way your people already work. If you want that conversation, get in touch with Acuity AI Advisory.