What is Shadow AI?
Shadow AI is the AI case of shadow IT: staff solve a task with a tool that nobody in the company selected, vetted or covered by contract. Usually without ill intent and almost always for the most obvious reason there is, namely that it is faster. The typical shape is a personal account on a free plan, opened on a work device or on a private phone, with real client data in the input field.
The damage comes from the missing mapping, not from the usage. Without approval there is no data processing agreement, so personal data has no legal basis. Without a record nobody knows which content left the building, how long the provider keeps it or whether a human reads it. And without knowing which tools are in play, the literacy duty in Article 4 of the AI Act cannot be met either, which has applied to every deployer since 2 February 2025.
The effective answer is not a ban. A ban moves the usage to the private device and makes it invisible rather than stopping it. What works is the combination of an approved tool that is good enough, a `data classification` that says what may go in, and a named person to whom new tools get reported. To measure shadow AI, do not ask about violations, ask about tasks: which piece of work was recently so urgent that somebody finished it without an approved tool.
Why does Shadow AI matter?
The Verizon Data Breach Investigations Report 2026 finds that 67 per cent of those accessing AI services on a corporate device use a non-corporate account to do so, and that shadow AI is now the third most common non-malicious insider action in its data-loss datasets, a fourfold rise within a year. The single most common content type uploaded is source code. So the problem is neither rare nor confined to the trivial material.
Shadow AI in practice
- 01Proposal under time pressure: a pricing calculation including client names gets pasted into a free chat to turn it into copy quickly. The event is recorded nowhere, and the provider has no contract with the company.
- 02Translation on the side: a draft contract goes through a free translation tool because the approved solution will not accept the file. The tool was never vetted and states that it stores inputs to improve the service.
- 03Assistant in the browser: an extension summarises pages and emails, reading along with everything on screen. One person installed it, nobody noticed.
