AI automation and agents for small businesses
AI automation for a small business comes in two forms: fixed workflows that connect your apps, built with tools such as Zapier, Make, n8n, or Power Automate, and AI agents such as Claude Cowork, Copilot Cowork, or ChatGPT Work that choose their own steps. As of November 11, 2026, cybersecurity agencies in five countries advise starting with low-risk tasks and keeping human approval for actions that matter.
Automating routine work in a small business
Every small team has work that follows the same steps each week: copying form entries, chasing invoices, sorting email, sending the same follow-up. This guide is part of a practical guide to AI tools and covers the two ways to hand that work over, from the companies’ help pages and official guidance read on November 11, 2026. The OECD’s note on what agentic AI is and does separates single AI agents from systems of several coordinated agents, a distinction that product pages often blur.
The first way is a fixed automation: you define a trigger and the steps, and the tool repeats them exactly. The second is an AI agent: you give a goal, and the AI decides the steps, using your files, apps, or browser. The first breaks in predictable ways; the second can do something you did not ask for.
Automation, agent, or neither
| Fixed automation | AI agent | |
|---|---|---|
| How it works | A trigger and steps you define | A goal; the AI plans and uses tools |
| Examples | Zapier, Make, n8n, Power Automate | Claude Cowork, Copilot Cowork, ChatGPT Work, Gemini, Perplexity Computer |
| How it is billed | Tasks, credits, executions, or a license | Included in AI plans, or credits |
| Typical failure | A broken step | An unintended action, or hidden instructions followed |
| Best safeguard | Run history and error alerts | Approval before sending, paying, or deleting |
Our rules for choosing, as a recommendation:
- If the steps never change, use a fixed automation. It is cheaper, easier to check, and does exactly what you wrote.
- If the task needs reading and choosing, but the result is easy to check, an agent can help, with approval kept on.
- If a mistake would cost money, a client, or data, keep a person in charge and let AI prepare a draft at most.
- If the task comes up only a few times a year, do not automate it at all.
Australia’s business.gov.au puts the last word plainly: your business is responsible for everything your AI tools do.
What changed in 2026
- OpenAI replaced its ChatGPT agent with ChatGPT Work and a cloud browser, and retired its ChatGPT Atlas browser.
- Anthropic moved new Claude Cowork tasks on its Pro, Max, and Ultra plans to its own cloud on October 6, 2026.
- Microsoft bills Copilot Cowork for businesses in Copilot Credits and offers a consumer preview in the US and Canada only.
- Make opened its AI Agent app in beta on February 2, 2026, and Zapier began moving its Agents into AI steps billed in tasks.
- Cybersecurity agencies of Australia, Canada, New Zealand, the UK, and the US published joint guidance on adopting agentic AI carefully, and Australia’s agency warned on September 25, 2026 that AI agents had taken actions nobody had authorized.
What makes software an agent
A chatbot answers; an agent plans, uses tools, and acts, and security agencies advise starting it on low-risk tasks with the narrowest access. See what an AI agent is, in plain terms, with five rules drawn from their guidance.
Counting before you compare
The four automation tools bill different things, so their list prices mislead. For a five-step workflow that runs 300 times a month, the published annual prices come to $39 a month on Zapier, $11 on Make, and €20 on n8n Cloud, and possibly nothing extra on Power Automate for Microsoft 365 users. Our comparison of Zapier, Make, n8n, and Power Automate shows the calculation, the free plans, and where each one stores your data.
Agents that work in your files
Claude Cowork reads and writes in folders on your computer, Copilot Cowork only in OneDrive and SharePoint, and ChatGPT Work uses a browser in OpenAI’s cloud. See how the desktop agents compare, including what each asks before acting and where it is available.
Where to start
Official guides in the US, Canada, and Australia point to the same first tasks: sorting email, forms to a spreadsheet, invoice reminders, and meeting follow-ups. Our page on first automations for a small team gives five recipes, each with a human check, and what government trials found about time saved.
The one rule that covers everything
The UK’s National Cyber Security Centre says there is a good chance prompt injection, instructions hidden in content that an AI reads, will never be properly fixed. Its practical consequence is simple: a tool that reads email or web pages from strangers should not also be able to send, pay, or delete without you. Zapier, n8n, Power Automate, and every desktop agent covered here let you require approval, though not always by default, so check that it is switched on; we found no native approval step in Make.
More from this series
This is the last guide of the series. If you are starting out, begin with choosing an AI assistant and what AI assistants cost; before you connect an agent to client data, read what AI does with your data. The other guides cover getting real work out of AI and recording and summarizing meetings.