Shadow AI
Research, data, and analysis on unsanctioned AI tool usage in the workplace.
Shadow AI is when employees use AI tools at work without their employer's knowledge or approval. It is now one of the most common and least visible risks facing businesses.
The Bot Joined Before the Agenda: Shadow AI Inside Meetings and Collaboration Tools
75 per cent of professionals use an AI note-taker in work meetings. 84 per cent change how they speak when one is present. UC platforms are the largest ungoverned AI surface in the enterprise.
Shadow AIAgentic Shadow AI Is Already an Incident Category, Not a Thought Experiment
88 per cent of organisations report confirmed or suspected AI agent security incidents. Only 14.4 per cent of agents went live with full security approval. Agentic shadow AI is a structural risk most organisations have not begun to govern.
Shadow AIEmployees Still Do Not Know What Data They Can Put Into AI Tools
Nearly 40 per cent of data flowing into AI tools is sensitive, yet most organisations lack clear rules. The grey zone where employees draw their own lines is where risk concentrates.
Shadow AIMicrosoft Copilot Does Not Break Security. It Shows Where It Was Already Broken.
Microsoft 365 Copilot exposes existing SharePoint permission failures rather than creating new ones. How oversharing, permission sprawl, and MSP incentive structures create data exposure risk.
Shadow AIKordia Report: Shadow AI Is Now NZ's Top Cyber Risk, Ahead of External Attacks
Kordia's 2026 NZ Business Cyber Security Report puts shadow AI at the top of the cyber risk table. 43% of NZ businesses say their own employees are the biggest AI threat.
Shadow AIShadow AI as a Data Leak Engine, Not Just a Rogue App Problem
The real shadow AI risk is thousands of employees pasting sensitive data into personal AI accounts every day with no logging, no oversight, and no awareness they have done anything wrong.
Shadow AIShadow AI Just Became a Forensics Problem
[CyberCX](https://cybercx.com.au/) confirmed their incident response team was called in for AI data spill cases in 2025. Shadow AI is now a forensics category, not just a risk register entry.
Shadow AIWhat Is Shadow AI? The Complete Guide for Businesses
Shadow AI is when employees use AI tools at work without approval. This guide covers how common it is, the real risks, what doesn't work, and what to do about it.