Who Should Own AI in a 50- to 200-Person Company?

Turn this article into takeaways for your work.

Each assistant summarizes the article only for you and suggests best practices for your work.

Every company between 50 and 200 people eventually hits the same awkward meeting. Someone asks who is in charge of AI, and four people look at the table. The CTO says it's a tooling question. The head of marketing says she's been experimenting. The CFO says he's just seen the invoices. Nobody says "me."

At this size you can't justify a Chief AI Officer, and you shouldn't try to fake one. But "everyone owns it" means no one does. Our position is simple: in a company too small for a Chief AI Officer, AI should be owned by a business operator who holds budget and process authority. Not by IT, and not by whoever is most enthusiastic.

This piece is about ownership and accountability, which is a different question from whether to create an executive title (we cover that in the CAIO case for mid-market companies) or whether to hire a dedicated manager (see the first AI ops manager hire). Here we ask a prior question: whose job is it, starting Monday, with the people and money you already have?

Key Facts

Why "Everyone Owns It" Fails at This Size

Large companies fail at AI because of bureaucracy. Companies of 50 to 200 people fail because of diffusion.

Look at what's already happening in your building. The Work Trend Index figure above means most of your AI use is bring-your-own: individuals paying for their own tools, choosing their own prompts, and quietly putting customer or financial data into things you've never reviewed. Gallup's numbers show the other half of the problem. Employees can see AI arriving, but only about one in five has been told the plan.

That's what unowned AI looks like. It isn't a crisis. It's a slow leak: duplicate subscriptions, inconsistent output quality, a few good habits that never spread, and one or two data-handling incidents waiting to happen. And when the CEO asks "what are we getting for this?", no one can answer, because no one was ever asked to find out.

Ownership fixes that, but only if you define it properly. In our experience, three things have to sit with the same person.

The Three Keys of Ownership

1. Budget authority. The owner can approve, cut, and consolidate AI spend without going to a committee. If every tool request routes through three other budgets, nothing gets decided; things just get tolerated.

2. Process authority. The owner can change how a team does its work, not just which software it uses. AI value shows up when a workflow changes: a proposal that used to take two days now takes three hours, a support queue is triaged before a human sees it. BCG's finding that leaders put the bulk of their resources into people and processes, not algorithms, points the same way. Someone who can recommend but not require will get polite nods and no change.

3. Accountability for outcomes. The owner is named, measured, and answers to the CEO for results: hours recovered, cycle times, quality, risk. This is also the part regulators and frameworks care about. The NIST framework treats clear, documented roles and executive responsibility for AI risk decisions as part of governance.

Notice what isn't on the list: technical depth. At this scale you will buy almost everything, not build it. The scarce skill is making a change stick across people, which is an operating skill.

The Four Candidates, Compared

Most companies end up with one of four owners, usually by default. Here's how they hold up against the three keys.

Owner Budget authority Process authority Accountability Typical failure mode
IT lead or CTO Strong over tools and security Weak outside engineering Often on risk, rarely on business results AI becomes a procurement and security review. Teams route around it
Volunteer enthusiast (a power user in any function) None None, only influence Informal Great demos, no scale; burns out or leaves; owns nothing when it goes wrong
Business operator (COO, head of operations, chief of staff, GM) Strong Strong, across functions Natural fit, already measured on throughput and cost Can lack technical confidence; fixed with an advisor and a good IT partner
CEO directly Strongest Strongest Complete Doesn't have the hours; AI becomes one more thing in the founder's head

Two of these deserve a harder look, because they're the ones executives lean toward.

Why not IT?

IT is the instinctive home, and the instinct is understandable: AI arrives as software, and IT owns software. But the work that creates value isn't software administration. It's changing how sales qualifies leads, how finance closes the month, how support answers tickets. IT usually has no authority over those processes and, to be fair, shouldn't want it.

IT should be a partner with a clear remit: security, data access, vendor risk, integrations. It should have a seat on the decision, not the decision. When IT owns AI outright, the usual outcome is a locked-down environment that employees then bypass with their own accounts, which is the exact bring-your-own pattern the survey data describes.

Why not the enthusiast?

The volunteer is the most dangerous option because they're the most pleasant one. They're excited, they're capable, and they're free. They're also holding a job already, they have no authority over their peers, and their programme lasts only as long as their energy.

Enthusiasts are an asset. Put them to work as champions inside the program the operator runs. We've written about how peer-led AI programs can spread skills effectively once someone with authority sets the frame. What you don't want is the champion as the owner, because an owner has to be able to say no, and a peer can't.

What the Operator Actually Does

An operator-owner doesn't need to be an AI expert. Here's the job, in plain terms.

  • Keeps one list. Every AI tool in use, who pays for it, what data it touches, and who uses it. Most 100-person companies have never seen this list, and it's usually longer than anyone guessed.
  • Sets the rules of the road. A short usage policy: which data may go where, which tools are approved, what needs a human check. Two pages, not twenty.
  • Picks a few workflows and changes them. Not twenty experiments. Three to five processes with a before-and-after measure.
  • Funds and cuts. Moves money toward what works and stops paying for what doesn't, quarterly.
  • Reports in business terms. To the CEO and the leadership team: hours, cost, quality, risk. Not model names.
  • Brings in help where depth is needed. A fractional adviser, an outside specialist for a specific build, a security review from IT.

Notice that the last item is how the technical gap gets closed. Owning AI doesn't mean doing all of it yourself; it means being accountable for it being done.

This also connects to the middle of your organization. The same people who must change their teams' workflows are your managers, and middle management is both the biggest obstacle and the biggest opportunity in any AI program. The operator-owner works through them, which is another reason the owner has to sit on the operating side of the business.

When the Answer Changes

The operator model is right for most companies in this range, but not all.

The CEO should own it directly if the company is under about 50 people, or if AI is the product itself. In those cases the CEO already holds all three keys, and delegating adds a layer without adding authority.

Move to a dedicated hire when the operator's AI workload becomes a full job: you're running many pilots, managing several vendors, and the owner is spending most of their week on it. At that point the role has outgrown a side responsibility, and the hiring playbook applies.

Revisit the CAIO question when AI is core to what you sell, when you work in a regulated area where AI risk needs a dedicated owner, or when you're past roughly 200 people with AI embedded across most functions.

Add an executive sponsor in any case. The owner needs a visible CEO or board-level sponsor, or the first hard trade-off (a team that doesn't want to change) will go against them.

An Illustrative Example

Illustrative scenario, not a real company. A 120-person logistics services firm has AI use in five places. Customer service uses a chatbot trial, finance has a spreadsheet assistant, three account managers pay for personal subscriptions, the CTO has an internal prototype, and marketing has a content tool. Nobody knows the total spend.

The CEO names the head of operations as AI owner, gives her authority over a pooled AI budget, and asks for a first report in 90 days. She builds the tool list, discovers two overlapping subscriptions, writes a short data policy with the CTO, and picks two workflows (quote preparation and invoice queries) to redesign with the managers involved. The CTO handles security review and integrations. Two of the account managers become champions and run a weekly 30-minute demo session. At 90 days she reports hours saved on the two workflows and the spend consolidated.

None of that required a new title or a new hire. It required one person with the right authority and a clear mandate.

What to Do Next

This sequence fits inside one quarter.

  1. Run the three-keys test on your current situation. For each person who "owns" AI today, ask whether they hold budget, process authority, and accountability. Most will hold none or one.
  2. Name one owner and write it down. One name, one page: scope, budget, decision rights, and what they report. Publish it to the leadership team.
  3. Define IT's remit explicitly. Security, data, vendor risk, integrations. Give IT a veto on risk, not ownership of outcomes. The executive decision framework for AI workforce strategy is a useful structure for who decides what.
  4. Convert enthusiasts into champions. Give each a defined role, a small allocation of time, and recognition. Stop relying on volunteers for ownership.
  5. Set a 90-day scorecard. Tool inventory complete, policy in place, three to five workflows chosen with baseline measures, spend consolidated. Review it with the CEO.
  6. Fold it into a longer plan. Once the first 90 days are done, extend to a 12-month AI workforce roadmap and revisit whether the ownership model still fits.

The test of whether you've done this right is easy. Ask any department head "who decides how we use AI here?" If you get one name, the same name from everyone, you have an owner. If you get a shrug or a list, you don't yet.

Learn More

About the author

Victor Hoang

Victor Hoang

Co-Founder, Rework.com

Victor Hoang is Co-Founder and CMO of Rework. He spent 12+ years scaling B2B SaaS growth, building a lead engine that generated over 1 million leads and $10M+ in annual recurring revenue. Today he builds AI agents and MCP servers into Rework's products to empower customers across growth and operations. He writes about what actually works.