AI Glossary for Business Leaders

Plain-English definitions for the AI terms that show up in vendor pitches, board reports, and compliance reviews. Written for owners and operators, not for AI researchers.

AI Foundations

Artificial Intelligence (AI)

Software systems that perform tasks typically associated with human cognition: language understanding, pattern recognition, decision support, content generation. In a 2026 business context, "AI" almost always refers to generative AI based on large language models (LLMs), not the older statistical machine-learning systems that have been embedded in software for decades.

Large Language Model (LLM)

A neural network trained on massive amounts of text that produces human-like written responses to prompts. GPT-4 (OpenAI), Claude (Anthropic), and Gemini (Google) are the dominant business-grade LLMs in 2026. LLMs are statistical pattern matchers, not knowledge databases. They can be wrong with confidence, which is why human review of LLM output remains essential.

Generative AI

AI systems that create new content (text, images, audio, video, code) based on patterns learned during training. The defining commercial AI category of 2023 to 2026. Microsoft Copilot, ChatGPT, Claude, and Gemini are all generative AI tools. Distinguishes from earlier AI systems that classified existing content rather than creating new content.

Foundation Model

A large AI model trained on broad data that can be adapted to many downstream tasks without retraining from scratch. GPT-4, Claude, and Gemini are foundation models. Most business AI applications consume foundation models through an API rather than training their own. The economics of training foundation models limit production to roughly a dozen companies globally.

Hallucination

When an AI tool generates content that sounds plausible but is factually incorrect or fabricated. Hallucinations are a fundamental property of how LLMs work, not a defect that future models will eliminate. Mitigation in business use comes from human review, retrieval-augmented generation (RAG) on authoritative sources, and refusing to use AI for decisions where errors carry meaningful consequences.

Microsoft Copilot Terms

Microsoft 365 Copilot

Microsoft's business AI assistant embedded in Word, Excel, Outlook, Teams, PowerPoint, and SharePoint. Sold per-user per-month on top of a qualifying Microsoft 365 Business or Enterprise plan. Honors the user's existing M365 permissions, which means oversharing in SharePoint becomes a Copilot search result on day one without proper deployment governance.

Copilot Pro

Microsoft's consumer AI tier sold to individuals on personal Microsoft 365 plans. Distinct from Microsoft 365 Copilot (the business tier). Copilot Pro deliberately does not access company tenant data, which means it cannot read your SharePoint, OneDrive, or Outlook files.

Copilot Studio

Microsoft's platform for building custom AI agents on top of Microsoft 365 data. Lets businesses create role-specific assistants ("Onboarding Agent", "RFP Response Agent") trained on tenant-scoped knowledge. Available within Microsoft 365 Copilot at the appropriate tier.

Microsoft Purview

Microsoft's data governance and compliance platform. Provides sensitivity labels, data loss prevention (DLP), insider risk management, and audit logging for Microsoft 365 environments. Critical for Copilot deployments because Purview enforces which content Copilot can surface based on labels and DLP rules.

Sensitivity Labels

Microsoft Purview metadata applied to documents, emails, and Teams content that classifies data sensitivity (Public, Internal, Confidential, PHI-High, etc.). Sensitivity labels enable encryption, access restrictions, watermarks, and AI scope-out rules. The labels follow the document everywhere (across email, SharePoint, Teams, Endpoint).

Security & Governance

Shadow AI

Unsanctioned AI tool use by employees on company data without IT awareness or approval. The "shadow IT" of 2026. Examples: employees pasting customer contracts into consumer ChatGPT, using personal Claude accounts to summarize email threads, or accessing free Gemini for spreadsheet analysis.

Prompt Injection

An attack technique where malicious instructions hidden inside content (a document, email, image, or web page) hijack an AI tool when the AI processes that content.

Data Loss Prevention (DLP)

Security controls that prevent sensitive data from leaving an environment by accident or design. AI-aware DLP extends traditional DLP with browser-layer rules that block paste of sensitive content into AI tool URLs.

Business Associate Agreement (BAA)

A HIPAA-required contract between a covered entity (healthcare provider, health plan, healthcare clearinghouse) and a vendor that processes Protected Health Information (PHI) on its behalf. AI tools that may process PHI must be operating under a BAA with the covered entity.

Data Processing Agreement (DPA)

A contract between a data controller and a data processor that defines how personal data may be handled. Required under GDPR and increasingly under US state privacy laws.

AI Vendor Risk

The exposure created when a business's data flows through an AI vendor or its subprocessors. Includes risks from vendor breaches, vendor change of ownership, vendor unilateral term changes.

AI Architecture

Retrieval-Augmented Generation (RAG)

An AI architecture pattern where the AI tool retrieves relevant information from a controlled knowledge source before generating a response. RAG produces more accurate, citable, business-specific output than prompting an LLM cold.

Custom GPT

A pre-configured AI assistant built on top of a foundation model with a specific system prompt, knowledge base, and capability set. OpenAI introduced Custom GPTs in late 2023.

AI Agent

An AI system that takes a goal as input and produces actions across multiple tools or systems to achieve it, with limited human intervention between steps.

Fine-Tuning

The process of further training a foundation model on a specific dataset to specialize its behavior.

Vector Database

A database optimized for storing and querying high-dimensional embeddings used in RAG and AI search.

Strategy & Roles

Virtual Chief AI Officer (vCAIO)

An embedded executive-advisory function that gives mid-market businesses access to strategic AI thinking without the cost of a full-time Chief AI Officer hire.

Managed AI Agreement

A recurring services contract where a managed services provider owns the AI domain on the client's behalf.

AI Acceptable Use Policy

A written document that defines which AI tools employees may use at work, what data may not be entered into AI prompts, how AI-generated output should be reviewed and labeled.

AI Readiness Assessment

A structured discovery conversation that evaluates an organization's awareness of current AI use, governance gaps, automation opportunities, and capability maturity.

AI Governance

The set of policies, processes, and roles that determine how AI is used inside an organization.

Model Governance

The discipline of tracking which AI models a business uses, how they are configured, how their outputs are validated, and when they are deprecated.

Found a term we didn't define?

Send it our way. The glossary is updated quarterly.