Shadow AI

AI tools and agents used inside an organization without security’s knowledge or approval: personal ChatGPT accounts, unsanctioned coding assistants, local models, and self-serve SaaS agents. Shadow AI creates data-exposure and compliance risk because it operates outside monitored, governed channels.