It's already inside.
Shadow AI is any AI use the business hasn't approved or can't see. It's rarely malicious. It's usually people trying to get work done.
Why it happens
The Cause
The tools are free and useful, the approved option is slow or missing, and nobody said no.
Where it hides
The Places
Personal accounts, browser extensions, phone apps, and AI features inside existing software.
What it risks
The Cost
Data leaving the business, no audit trail, and unclear ownership of what's produced.
Source: Cyber Security Hub ↗
Offer a safe road, or people build their own.