Friday Ops: May 2026
A heavy month for AI tooling that actually touches small business workflows. Xero shipped a no-code agent builder for finance teams, Google rolled out Chat-to-Teams interoperability so you can finally stop maintaining two messaging platforms for one client, and a chunky batch of Microsoft Copilot and Outlook updates land in June and July. On the risk side, Stripe broadened Radar's fraud net, Google made session-theft attacks harder on Chrome for Windows, and Vapi had a rough fortnight with multiple call-failure incidents worth noting if your phone stack runs through them.
Money, fraud and the finance stack
XeroForce: a no-code AI agent builder for financial workflows
Xero is launching a no-code tool that lets you build custom AI agents to handle repetitive bookkeeping and finance tasks. If you or your bookkeeper currently lose hours each week to invoice chasing, coding transactions or reconciliations, this is the first Xero-native automation layer worth piloting before paying for a third-party add-on. via Xero Blog
Trove plus Xero cuts overdue invoices by 60%
A case study on using Trove's AI collections agent alongside Xero to chase overdue invoices automatically. For service businesses where debtor days creep past 45, the takeaway is less about the specific tool and more about how much of collections can now be delegated to software. via Xero Blog
Stripe Radar extends fraud protection across payment methods
Radar now blocks high-risk transactions across every supported payment method, defends against multi-account abuse and pay-as-you-go abuse, and works even if you're not using Stripe as your processor. If you run a platform or marketplace, the new merchant risk tools are worth a look before your next chargeback wave. via Stripe Changelog
What separates top solo founders from the rest
Stripe analysed 2025 solo founder data and found the top decile generated 61 times the revenue of the median in their first six months. Useful benchmark reading if you're running a one-person operation and trying to work out where to spend the next dollar. via Stripe Changelog
Reliability watch
Vapi: major database outage takes down voice calls and dashboard
A misconfigured audit log collector exhausted Vapi's production database connection pool, taking down voice calls and the dashboard. If your customer service or booking line runs through Vapi, read the postmortem and make sure you have a fallback IVR path documented. via Vapi Status
Vapi: three more incidents in the same week
On top of the database outage, Vapi logged elevated call failure rates, a Twilio inbound disruption and dashboard errors across late May. Each was resolved quickly, but the cluster is a reminder to test your failover at least quarterly if voice is a revenue channel. via Vapi Status
Twilio cipher suite deadline pushed to 18 November 2026
Twilio has extended the deadline for updating REST API cipher suites by several months. If you have any custom integrations calling Twilio (SMS, voice, WhatsApp), put a calendar reminder for October to verify your TLS configuration before legacy ciphers stop working. via Twilio Changelog
Security and data protection
Chrome on Windows gets device-bound session credentials by default
Google has switched on Device Bound Session Credentials for all Workspace users on Chrome for Windows, which ties session cookies to the device they were created on. The practical effect: if an employee's laptop catches malware that steals cookies, attackers can't use them from another machine. No admin action needed. via Google Workspace Updates
Out-of-domain warnings now work on mobile Drive and Docs
Google has extended its external-user warning badges to the Android and iOS apps for Drive, Docs, Sheets and Slides, plus better handling for Chat Spaces and Groups with external members. A small but useful guardrail against sharing accidents when staff are working from their phones. via Google Workspace Updates
Cloudflare adds Claude Compliance monitoring to CASB
If you're using Claude Enterprise and Cloudflare's CASB, security teams can now monitor Claude activity directly in the Cloudflare dashboard. Relevant if you're starting to formalise an AI usage policy and need visibility into what staff are actually sending to the model. via Cloudflare Blog
Microsoft Purview DLP sync time drops from 2 hours to 30 minutes
Policy updates in Purview Data Loss Prevention will now propagate in 30 minutes rather than up to two hours, landing in June. Useful if you've ever pushed an urgent DLP rule change and waited nervously to see it apply. via Microsoft 365 Roadmap
Endpoint DLP closes the AppData and Temp folder gap
Endpoint DLP will start scanning files in commonly excluded Windows folders like Temp and AppData from July, which is where plenty of sensitive data quietly sits when staff open attachments. Worth checking your policy coverage when it ships. via Microsoft 365 Roadmap
Cross-platform collaboration
Google Chat and Microsoft Teams can now talk to each other
Via NextPlane OpenHub, Google Chat users can now have 1:1 chats, group chats, channel conversations and file sharing with people on external Microsoft Teams tenants. If you're a Workspace shop with clients or suppliers on Teams (or vice versa), you can stop maintaining a second login just to talk to them. via Google Workspace Updates
Outlook gets a Unified Inbox in new Outlook for Windows
The All Accounts view in new Outlook lets you triage email from multiple accounts in one inbox without merging mailboxes. For owners juggling a personal Microsoft account, a business account and a side-project domain, this finally matches what Apple Mail has done for years. via Microsoft 365 Roadmap
Polly comes to Google Chat
The polling tool is now native in Google Chat: @mention Polly in any space to run a quick vote. Useful for small teams that currently waste threads trying to pick meeting times or vendors. via Google Workspace Updates
AI tooling for everyday work
Copilot can now rewrite selected sections of your email drafts
In Outlook from June, you'll be able to highlight part of a draft and ask Copilot to change just that section's tone, length or structure. Much more useful than the current all-or-nothing rewrite if you've already got the bones of an email right. via Microsoft 365 Roadmap
Planner's My Tasks gets a redesign with Copilot priorities
The new My Tasks experience in Planner pulls tasks from across Microsoft 365 into one view, with Copilot surfacing what to do first. Lands in June. Worth a fresh look if you wrote off Planner years ago. via Microsoft 365 Roadmap
NotebookLM now auto-syncs with Google Drive
If you've added Docs, Sheets or Slides to a notebook, NotebookLM now updates the underlying content automatically as those files change. Removes a real friction point if you use NotebookLM to summarise live documents like policy manuals or SOPs. via Google Workspace Updates
Connected Sheets gets anomaly detection for BigQuery data
You can now flag outliers and irregularities in time-series data inside Connected Sheets without writing SQL or training a model. If you pull operational data through BigQuery into Sheets for the weekly review, this is a free upgrade to your eyeball checks. via Google Workspace Updates
OneDrive moves to pay-as-you-go for extra storage
From July, admins can let specific OneDrive accounts grow beyond their licensed limit on a consumption basis rather than buying bulk add-ons. Useful for the one or two staff who deal with video, CAD files or large media; less useful if you haven't been watching individual usage. via Microsoft 365 Roadmap
Ask Gemini in Google Meet moves to a more obvious spot
The Ask Gemini prompt now sits in the bottom-left corner of Meet's web interface rather than hidden behind a hover. Worth knowing because most teams never discovered the feature existed. via Google Workspace Updates
What we'll be watching next month
June is shipment month for a long list of Microsoft Copilot and Outlook features previewed above, so expect a tidier wrap once they actually land. We'll also be watching whether Xero's XeroForce gets enough traction to displace the smaller automation vendors in the Xero ecosystem, and whether Vapi's reliability stabilises after a noisy fortnight. On the AI side, Anthropic's Claude Opus 4.8 and OpenAI's enterprise Codex push are turning AI coding from a developer curiosity into something your software suppliers will be quoting on shorter timelines for. Worth asking next time you commission custom work.