AI Data Discovery in Small Business Litigation: Preserve Before You're Sued

If your business uses ChatGPT, Copilot, a customer-service bot or an AI note-taker, you are already generating evidence. AI data discovery in small business litigation is the stage of a lawsuit where the other side asks for those prompts, outputs and system logs, and courts in 2026 treat them as fair game. The practical takeaway is narrow. The moment you reasonably anticipate a claim, your duty to preserve extends to AI records, not just email. Set up the hold while nothing is on fire, because that version is cheap.

Why your AI tools became evidence overnight

Adoption ran ahead of caution. In its August 2025 Empowering Small Business report, the U.S. Chamber of Commerce found that 58% of small businesses now use generative AI, up from 40% a year earlier. Most of that use leaves a trail.

Courts have caught up. A February 2026 analysis from K&L Gates concluded that AI-generated content is discoverable electronically stored information under the same rules that govern email. The American Bar Association has described the same shift, explaining how AI is reshaping discovery and data governance rather than sitting outside it.

What AI data discovery in small business litigation actually reaches

The records accumulate quietly. You rarely decide to keep them. The tools keep them for you, and in a dispute opposing counsel can request:

• Prompt histories in ChatGPT, Claude, Copilot or Gemini, including the versions you rewrote and discarded
• AI outputs you pasted into a contract, an email, a pricing model or an invoice
• Chatbot transcripts from your website, where a bot may have promised a customer something you never authorized
• System and audit logs from AI features buried inside CRM, accounting, HR or scheduling software
• Metadata showing when a document was generated and by which account

That last category surprises people. Metadata often decides who knew what and when.

The litigation hold most owners get wrong

A litigation hold is not a folder. It is a documented instruction to stop routine deletion the moment you reasonably anticipate a claim. Under Federal Rule of Civil Procedure 37(e), when electronically stored information that should have been preserved is lost because you failed to take reasonable steps, a court can order measures to cure the loss. Where a judge finds you acted with intent to deprive the other side of that evidence, the penalties climb. The court may instruct the jury to assume the missing data was harmful to you, or enter default judgment outright.

Judges are already applying this to AI platforms. In May 2025, in In re OpenAI, Inc. (S.D.N.Y., No. 1:23-cv-11195), Magistrate Judge Ona T. Wang ordered OpenAI to preserve ChatGPT output logs that its default thirty-day deletion policy would otherwise have erased. The order treated a chatbot’s records as ordinary electronically stored information, subject to a hold like any inbox. Read it as a warning about your own tools. Many auto-delete by default. An August 2026 review of spoliation law warned that businesses which fail to halt automatic deletion of AI-generated content risk a finding that they did not take reasonable steps to preserve it. The convenience turns on you. A thirty-day auto-purge on a chat tool feels tidy right up to the day it erases the one exchange that would have proved your case, or sunk it.

This is the same reasonable-steps standard that governs protecting trade secrets after a law firm data breach. Act early, and write down that you did.

Five moves before a complaint lands

You do not need new software or a compliance department. You need a short list, done once and revisited when your tools change.

• Inventory your AI tools. Write down every AI system the business touches, including the ones staff signed up for without asking.
• Learn each tool’s retention setting. Find out what it keeps, for how long, and whether you can export it on demand.
• Keep an instruction log. A dated record of what you told an AI to do is often the evidence that decides authorization, a point we cover in who pays when an AI agent infringes.
• Write a plain hold procedure. One page naming who flags a dispute and which accounts get frozen.
• Ban selective editing. Once a hold is on, nobody trims or cleans a transcript. Altering context reads as spoliation.

Where an attorney earns the fee

You can run the inventory yourself. The judgment calls are harder. When does anticipation of a lawsuit become a legal duty to preserve? Which logs are proportionate to a demand, and which are burden you can push back on? A demand letter, a fired employee threatening suit, a regulator’s questionnaire, an insurer’s notice: each may start the clock, and the timing is a legal question rather than a technical one. An attorney with litigation experience can tell you when that duty attached and scope a hold that captures your AI records without freezing the whole business. If you use AI every day and have never mapped what it retains, that conversation is worth having before you need it.