What the King's AI summit at Dumfries House means for Scottish small businesses
by Ross Gordon, Founder, Assist IQ
On 17 September 2026 the King convened AI industry leaders at Dumfries House in East Ayrshire to discuss the future of AI. Nothing binding came out of it. No declaration was signed. For a small business owner in Scotland, there is no new rule to follow. There is a signal: trust and governance are becoming part of how customers and buyers judge AI use, and that is worth acting on now rather than waiting for legislation that may be months away.
What happened at the summit?
The gathering brought together representatives from Nvidia, Google DeepMind, OpenAI and Anthropic, facilitated by The Ditchley Foundation, with UK AI minister Kanishka Narayan in the room alongside figures from The King's Trust and The King's Foundation. According to the official readout, delegates "considered whether a shared set of principles could be established" to guide how AI is developed and applied. That is the honest summary: a conversation about principles, not a signed framework.
In his speech, the King put it plainly: "The decisions taken at this formative time will shape the world inherited by future generations." He asked delegates two questions, how AI's benefits can be harnessed with safety at its heart, and how international cooperation can be built so no nation, and no person, is left behind. Those are big-picture questions for governments and the largest AI labs. They do not land on a small business as new compliance obligations. But the direction they point in, that AI use is expected to be safe, considered and accountable, is the same direction customers are increasingly expecting from the businesses they buy from.
Is Scotland actually investing in AI, or just talking about it?
Both, and the gap between the two is the story. Five days after the summit, AI minister Kanishka Narayan marked a construction milestone on the UK's next national supercomputer, being built in Edinburgh by the University of Edinburgh's EPCC and due to come online in early 2028. That is a real, physical commitment to AI infrastructure in Scotland.
At the same time, the politics of where that infrastructure actually sits on the ground are far from settled. The day before the summit, MSPs at Holyrood voted (on a non-binding basis) to pause planning decisions on AI data centres until the Scottish Government publishes national guidance for planning authorities, which ministers have pledged to deliver by Christmas. Two weeks later, developers lodged plans for a large data centre at the former Chapelcross nuclear site in Dumfries and Galloway. And at the start of October, the Scottish Greens called on the First Minister to open a public consultation on that guidance before it is finalised.
None of this directly touches a small business using AI tools for quoting, admin or customer service. But it shows the same pattern at national scale that we see with individual business owners: enthusiasm for what AI can do, running well ahead of agreed rules for how it should be done.
Why does this matter if nothing was actually agreed?
Because the absence of binding rules does not mean the absence of expectations. Larger clients and customers are more likely to ask a small supplier how it uses AI, whether a human checks AI-generated work, and what happens to the data they hand over. A royal summit on AI principles, a national supercomputer build, and a parliamentary vote on data centre planning all land in the news in the same few weeks. Governance is becoming part of the conversation, and a business that can answer those questions calmly is in a stronger position than one that has never thought about them.
This is not a call to overreact. Nothing that happened at Dumfries House changes what a small business is legally required to do. But it is a reasonable moment to check whether your own house is in order, in the same way a data security guide or a basic compliance review would prompt you to check.
What to do this month
Three small, concrete steps, none of which require waiting for government guidance:
- Write a short AI policy. A page is enough. What tools are approved, what data should never go into them, and who signs off on anything customer-facing. Ours is public, if you want an example: our AI policy.
- Know what your team is actually using. Staff often adopt AI tools quietly, tool by tool, without anyone keeping a list. Ask, and write down what you find.
- Keep a human in the loop on anything a customer sees. Draft with AI if it helps, but have a person check it before it goes out the door.
If you want a second pair of eyes on where your business stands, an AI operations review looks at exactly this, alongside the day-to-day systems AI already touches. We cover related funding questions in our piece on AI grants for Scottish small businesses, and more on how AI consultancy works in Scotland is on our AI consultancy Scotland page.