Shadow AI is the use of artificial intelligence tools by staff without the approval or oversight of the IT or security team. The main risk is sharing confidential data, such as contracts, source code or customer information, with external services that may store it. It is a form of shadow IT and is managed with acceptable use policies and approved AI tools.
Related term in this glossary: Shadow IT
unauthorized AI use, unsanctioned AI tools, shadow AI risk, AI acceptable use policy, generative AI data leakage