Blog

Shadow AI in small business: work laptop with a lock, a phone running an AI chat app, and a magnifying glass, from PDX IT Portland

Shadow AI in Small Business: How to Find It and Fix It in 2026

Shadow AI is the AI your team already uses without IT knowing: personal ChatGPT accounts, free notetakers, and AI browser extensions. Here is how a Portland-area small business can find it without a witch hunt, give people a safer option, and lock down the risky parts in 30 days.

Restaurant table card with a menu QR code covered by a fake QR code sticker peeling at the corner

Restaurant QR Code Scams: How a Fake Menu Sticker Steals Your Card

At a lot of Portland restaurants these days, there’s no paper menu. You get a little QR code on a table tent, you scan it, and you order. It’s convenient, and I get why restaurants switched. But I run an IT company, and I worry about a simple trick that turns that little square into…

Stacked client files and a cracked office filing cabinet leaking streams of gold data, illustrating a data breach at a professional or medical office

Hacked? What Portland CPAs, Financial Advisors, and Medical Offices Must Report After a Data Breach (and the Fines If You Don’t)

If you run a CPA firm, tax practice, financial advisory office, or medical clinic anywhere from Hillsboro to Gresham or Wilsonville to Vancouver, WA, a breach starts several reporting clocks at once, and some of them run in days, not months. This guide covers the data breach reporting requirements for small and mid-size offices in…

Scales of justice, law books, a confidential file and a laptop showing a secured AI network on a law office desk

AI for Law Firms in 2026: A Portland Guide to Using AI Without Risking Client Confidentiality

A practical guide to AI for law firms in the Portland metro: where generative AI saves time, what the ethics rules expect, why fake citations and client confidentiality are the real risks, and the IT guardrails a small firm needs before rolling out Copilot or ChatGPT.

HIPAA Security Risk Analysis walkthrough graphic for small Portland clinics from PDX Information Technology Services

What a BAA Means When You Hire an IT Provider for a Medical, Dental or Therapy Office

A plain-English look at the Business Associate Agreement (BAA) for IT providers: why an IT company that touches patient data is usually a business associate, what the agreement should cover, what it does not do, and what to ask before you sign. For Portland-area medical, dental and therapy offices.

Hard hat, blueprints and laptop showing an AI network on a desk overlooking a Portland construction site, illustrating AI productivity and bid security for contractors

AI for Construction Companies in 2026: Jobsite Productivity Without Leaking Bids or Plans

Practical AI for construction companies in the Portland metro: where AI helps (estimating drafts, RFIs, scheduling), what never leaves the job trailer (bids, plans, owner data), and how managed IT keeps field phones from becoming shadow AI.

Laptop showing a one-page AI acceptable use policy checklist with approved tools and never-paste rules for small business

AI Acceptable Use Policy for Small Business: A Practical Template for 2026

A practical AI acceptable use policy for Portland metro SMBs: what to approve and ban, never-paste rules, shadow AI, human review, rollout and training, plus a one-page template your team will actually follow.

Managed IT services Portland: what to look for (2026 buyer's guide)

What to Look for in Managed IT Services: A Portland Buyer’s Checklist

2026 buyer’s checklist for managed IT services in Portland: monitoring, help desk, on-site coverage, security, backups, pricing clarity, and exit terms.

HIPAA Security Risk Analysis walkthrough graphic for small Portland clinics from PDX Information Technology Services

HIPAA Security Risk Analysis for Small Clinics: A Plain-English Walkthrough

A plain-English walkthrough of the HIPAA security risk analysis for small Portland-area clinics: what the rule requires, seven practical steps, the free HHS SRA Tool, Oregon breach notice rules, and common mistakes.