What Is Shadow AI? A Practical Guide to Risks, Detection and Reduction

At some point you may have watched someone paste a document into a browser tab to summarise it and thought nothing of it. Nobody was hiding anything, and the work held up fine. But the tab in question was a free artificial intelligence (AI) tool your business has never approved.

That's shadow AI, and it's more common than most organisations realise. Data from Aptean's 2026 Artificial Intelligence Research, conducted with Vanson Bourne among more than 1,500 respondents across industries, countries and roles, indicates that AI adoption has reached 98%. But 40% of the leaders surveyed also told us they use AI tools for work their organisation has never formally approved. AI usage is moving faster than most IT and security teams can govern it.

In most businesses, that isn’t carelessness. Your teams are probably working across a mix of solutions built in-house over the years and general off-the-shelf systems that cover a lot of ground but predate current AI capabilities. When the approved route doesn't stretch to what someone needs today, a free tool is a short walk away.

Shadow AI usually points at a gap between what people need and what they've been given, which is what makes it something you can fix rather than just shut down.

This guide walks you through what shadow AI is, why it happens, the risks it carries, how to spot it in your own organisation and what you can do to reduce it.

What Is Shadow AI?

Shadow AI is any artificial intelligence tool, model or feature used for work without formal approval, security review or visibility for your IT teams. It includes public chatbots used through personal accounts, AI-powered browser extensions and plugins added to everyday applications.

You'll see the term used alongside shadow IT, which describes any technology adopted without sign-off. The difference is what the tools do with your data. AI tools take in whatever you give them, may keep hold of it and produce output that reads as authoritative whether or not the underlying reasoning holds up.

It's rarely malicious. More often than not, it's a workaround. Someone reaches for an unapproved tool because the sanctioned one takes too long to get access to, doesn't do the specific job they're faced with or doesn't exist yet. Sometimes there’s even a sanctioned tool available, but they aren’t aware of it. Most AI adoption challenges start in the same place, with people who want to use the technology but can't get to it easily enough.

In practice, shadow AI usage tends to look like:

• A quality team member pastes a supplier specification into a free chatbot to redraft an allergen statement

• An estimator runs a customer's request for quotation through a public tool to get a price out faster

• A product developer summarises vendor quotes and cost sheets in an unapproved tool

• A planner drafts a customs commodity description with a chatbot

• A service writer turns technician notes into a repair estimate using AI that nobody signed off

In each case, the work gets done. The issue is that the data and the output both end up somewhere your security teams can't see.

Why Shadow AI Usage Spreads Across Your Business

Shadow AI grows in the space between what your teams are being asked to deliver and what the tools in front of them can do.

Shadow AI statistics point to one cause above the rest. Approved tools don't stretch far enough. In our research, 77% of organisations said general-purpose AI tools are insufficient for large, complex operations, and 88% said purpose-built, industry-specific AI is critical or very important. Where the sanctioned option is a general-purpose one, most leaders already accept it isn’t equal to the complexity of the work, so it’s no surprise their teams go looking for something that is.

Speed matters too. Getting a new tool approved means building a case, and our research found that AI investment decisions rely on a clear business case with quantified return (57%), alignment to strategy (52%) and ease of implementation (49%). That's a reasonable way to spend money and a slow way to solve a problem that landed this morning. A free or unapproved tool skips all of those hurdles.

Then there's the gap between what's available and what people know about. Plenty of businesses have approved AI tools sitting inside their existing systems , but nobody has walked them through it. One senior manager at an apparel brand told us how AI ended up doing the first stage of design work, with no formal rollout behind it and no training offered. They worked it out alone.

The last driver is easy to miss. Software you approved years ago now ships with AI features that weren't there when it passed review, so your teams can be using AI inside a sanctioned system without anyone having made a decision to start. The risk here is usually lower, because you already trust the vendor. But those features still need documenting and checking against your governance standards.

This isn't confined to one part of the company either. Our AI research showed that unapproved AI use among C-level and senior leaders runs at the same rate as it does among mid-level and junior management, so a policy reminder won't fix it. The people who'd be sending that reminder are doing it too. In the US, 38% of leaders reported using AI without formal approval, while in the UK, it’s 30%.

Shadow AI is also changing shape. The early version was someone pasting text into a chatbot. The version arriving now is someone connecting an AI model to a business system through an OAuth grant or connector and letting it act. That isn’t the same as deploying an AI agent. A governed agent comes with everything around the model: prompt design, guardrails on what it can do, orchestration and observability, so you can see what it did. An unsanctioned connection has none of that, and the person who set it up often doesn’t realise it.

Shadow AI Risks

Good intentions don’t limit exposure. Once a tool sits outside your approval process, you lose sight of what goes into it, what comes out and who acts on the result.

The main shadow AI risks fall into six areas:

• Data and intellectual property exposure. Specifications, pricing, customer records and formulations pasted into an unapproved tool leave your control, and some tools retain that input or use it for training.

• Compliance and regulatory violations. Regulated data, from customs declarations to food safety records, can end up in tools nobody has assessed against your obligations. One executive interviewed in our AI research described using AI on customs and government forms, where an error could mean severe penalties or shipping to a sanctioned country.

• Unvetted outputs shaping decisions. In the same survey, 88% of leaders already let AI act without human sign-off in at least one area. That’s a sound choice with a vetted tool, but with an unapproved one, nobody has checked whether its output should be trusted to act on.

• No audit trail. When work happens in a tool nobody sanctioned, you can't reconstruct how a figure was reached or a recommendation formed, which matters most when someone asks you to justify it. A governed agent, by contrast, logs its inputs, tool calls and outputs by design, so “why did it do that?” always has an answer.

• Security risks outside your controls. Unapproved tools sit beyond your access controls and monitoring, so sensitive data moves through systems your security teams never reviewed. An OAuth grant can also give an unvetted tool ongoing access to the systems you do control.

• Inconsistency and duplicated effort. Teams reaching for different tools produce results that don't reconcile, and two departments can solve the same problem twice without either knowing.

Every one of these risks comes back to visibility, which is why finding shadow AI comes before fixing it.

How To Detect Shadow AI

Shadow AI detection starts with what you already have. Most organisations have just never had a reason to look.

Places to start looking for shadow AI:

• Ask your teams first. Surveys and conversations tell you why a tool was chosen, not just that it exists, and that's the part you need in order to fix anything. How you ask matters too. A question that sounds like the start of a disciplinary process won't get an honest answer. It’s also how you’ll find your champions, the people already doing the most with AI.

• Look at expense reports before procurement records. Individual AI subscriptions clear on a corporate card without ever troubling a purchase order, so the interesting activity sits in low-value recurring charges.

• Watch network and SaaS traffic. Logs from your firewall, secure web gateway or cloud access security broker (CASB) will show traffic to unsanctioned AI domains and API calls to model providers, revealing which shadow AI tools are in use and how heavily.

• Inventory your browser extensions. They're one of the easiest ways for an AI tool to reach sensitive data and one of the least likely to have been through anyone's approval process.

• Check identity and access logs. OAuth grants and connectors where someone has given an AI tool access to a sanctioned system are how shadow AI ends up inside the platforms you do control.

• Read your help desk tickets. People raise tickets when an unapproved tool breaks or won't connect to something, which makes IT support one of the more honest records of what's in use.

Whatever you find, it won't stay accurate for long. Software you cleared three years ago can pick up AI capability in a routine update, and the tool someone was using last quarter may have been replaced twice since. So make detection a regular review rather than a one-off audit.

How To Reduce Shadow AI Usage

The instinct when you find shadow AI is to shut it down. That rarely works. It tends to push the same behaviour out of sight, because the reason people went around the process hasn't changed.

What you've found is a list of unmet needs. Someone reached for an unapproved tool because it did something they needed doing. Treat that as a requirement, not an offence.

When I sat down recently with around 30 executives at Aptean’s UNITE conference, there was no consensus on how to handle shadow AI. Some had blocked unapproved tools at the network level, some were surprised it was happening at all and some had moved to an enterprise general-purpose AI tool. What resonated most was something else: they wanted one technology partner that could provide both general-purpose and vertical AI.

Governance is where many organisations already know they're behind. In our research, 96% of leaders said a formal AI governance framework is required, yet 36% haven't built one and 75% pointed to the absence of governance as a major barrier to getting AI to work. So the argument has been won and the work hasn't been done, which is a more solvable position than it sounds.

What tends to work:

• Build a route to approval that moves at the speed of the work. If getting a tool sanctioned takes a quarter and the job takes a week, people will solve for the week. A lightweight request process with a named owner and a short turnaround removes most of the reason to go elsewhere.

• Turn your power users into champions. Find the people doing the most with AI and give them a role in shaping your AI direction. They’ll drive adoption far more effectively than a policy memo.

• Sanction tools people would choose anyway. An approved option only holds if it does the job as well as the unapproved one, which usually means it needs to reach the data in your core systems rather than sitting alongside them. That's why organisations that value purpose-built AI put integration with the systems they already run, like ERP, at the top of the list. Your champions will tell you what those tools are.

• Give everyone who needs it access and training. A capable tool nobody has been shown is no tool at all, and the people most likely to find their own workaround are the ones who were never walked through the approved one.

• Set guardrails not blanket bans. People finding their own ways to use AI are doing what you want: doing their jobs better. Give them an acceptable use policy that covers approved tools, the data that can never go into an external tool and who to ask for something new. Be specific about what counts as sensitive in your operation.

• Bring legal and compliance in early. Where AI touches customs declarations, trade documentation, safety records or financial reporting, the cost of finding out later is measured in penalties rather than rework.

Handled this way, shadow AI stops being something you police and becomes a signal worth reading. The tools your teams found for themselves are a fairly accurate map of where your approved stack falls short.

Give Your Teams AI They Don't Need To Work Around

The easiest way to avoid shadow AI is to make the approved route the easiest one, with AI that’s accessible to everyone, sanctioned by your security teams and good at the work your people do. That’s hard to do with general-purpose tools added from the outside. Your teams need vertical AI that’s built into the systems they already work in, understands your industry’s data and is governed from day one, so there’s nothing better to go looking for.

That's how we approach AI at Aptean. Many of our industry-specific solutions come with AI capabilities built in, so your teams can use them without a separate tool or approval. Our vertical AI ecosystem connects those solutions on a shared data foundation, so AI capabilities such as our conversational AI and personalised workspaces, can draw from your ERP, supply chain and operational systems.

Because all of it works inside your approved environment and understands your industry's data, your teams get the AI capability they’re looking for, and you keep the audit trail, the access controls and the visibility that come with a sanctioned system.

Our ecosystem offers even more than that though, because our team knows where AI tends to fall short in food and beverage, manufacturing, apparel, distribution and equipment dealerships. With our AI as a Service offering for pre-built and custom agents, as well as our consultative Aptean Ascent programme, we provide tailored expertise that comes with accountability. We’re there by your side, ensuring the solutions we deliver meet your custom needs. So when you're deciding what to sanction and what to keep in human hands, you won't be working it out alone.

Ready to see what approved AI looks like in practice? Request a demo and see how Aptean's solutions can work for your operations.

Or want more insights from our Artificial Intelligence Research? Download it here to find out why so much AI use is happening outside formal approval.