Your Staff Are Already Using AI. Nobody Decided That.

Three people on your team are already using AI. You know because you found out by accident — someone mentioned, mid-meeting, that they'd used it to draft a funder update, summarize the board package, or write last week's social caption. Nobody asked permission first. Nobody's tracking it. And you can't tell if that's fine or a problem, because nobody at your organization actually owns the answer either way.

That's the position most nonprofit leaders are in right now, whether they've said it out loud or not.

Why "write a policy" is the wrong first move

The instinct is to treat this as a skills gap or a compliance gap: get staff trained, publish an AI policy, move on. It's not that those things are useless. It's that they're solving the wrong layer.

This isn't a technology adoption problem. It's the same held-not-owned pattern behind every other stalled digital initiative I've seen in nonprofits, with a new tool sitting on top of it. Held work runs on whoever happened to pick it up, with no name attached and no record that survives them. Owned work has both. Right now, almost nobody's AI use is owned — it's just widely held.

The number that proves it

Virtuous's 2026 Nonprofit AI Adoption Report (n=346) found that 92% of nonprofits have adopted AI in some form. Only 7% report it's made a major difference to their mission. Eighty-one percent use it ad hoc, with no documented process, and 47% have no AI governance policy at all. (virtuous.org)

Imagine Canada's January 2026 survey of 963 Canadian nonprofits shows the identical shape: 80% are using AI, but only 10% have a formal policy, and 64% aren't even building one. (imaginecanada.ca) Two surveys, two countries, the same gap: near-universal use, almost no organizational ownership of what that use is doing.

That's not a training problem. Training makes people better at something the organization has already decided to be ambivalent about.

Why the gap exists

Adoption is free. Anyone with a laptop and five minutes can start, and nothing in a typical nonprofit org chart requires permission first. Ownership costs something — a named decision-maker, a documented process, someone accountable if a donor's data ends up somewhere it shouldn't. Nothing in most org charts assigns that cost to anyone either. So the organization gets the free thing and skips the expensive one.

This didn't start with AI. NTEN's 2024 research on nonprofit digital investment found that 45% of respondents personally hold responsibility for every technology choice at their organization — no mandate, no title, just whoever ended up closest to the keyboard. (nten.org) AI adoption landed on top of an ownership gap that was already there. It's just the sharpest version of it yet, because it's the first tool that spreads without anyone installing anything.

What ownership actually requires

Not a forty-page policy nobody reads. Three things: a named person who's accountable for how AI gets used, not just whether it's used; a written line on what it can touch — donor data, financial figures, anything going out under the organization's name — and what it can't; and an actual review of what's happening, since right now most leaders are finding out the way you did, by accident.

None of that requires slowing down. It requires someone deciding, on purpose, what your organization's staff are already doing without you.

Where to start

You don't have to solve this today. You do now know the actual question to bring to your next leadership meeting, and it isn't "should we use AI." It's "who owns this decision, and can they name the three rules governing it?" If nobody can answer that in under a minute, that's the whole diagnosis — not a reason to panic, just a reason to assign it to someone before the next accident is the one that matters.

(For what it's worth: about a third of the time, a Signal Check ends with me telling someone to keep their current consultant instead of hiring me. I bring that up because the same logic applies here — the point of naming this isn't to sell you a policy. It's to make sure someone's actually holding the question.)

Francis Quintal is the founder of Quartermaster, a fractional digital operations practice working with charities, foundations, and associations. He runs every Signal Check personally.