What is shadow AI and how big a risk is it for a mid-market company?

I don't think most shadow AI use is reckless. It's usually what happens when people are given a real problem and no sanctioned way to solve it fast enough. Shadow AI is any AI tool or use inside your company that leadership hasn't approved, reviewed, or even necessarily knows about, from someone pasting client data into a personal ChatGPT account to a browser extension that quietly adds AI features to a tool you already pay for.

I take this risk seriously because I've been on the wrong side of it. A few years ago I used a free AI tool on work material without realizing the data could be used to train the model. Nothing came of it, but it was a real exposure I created without meaning to, and I only caught it after the fact. For a mid-market company, the risk isn't hypothetical: a 2026 workplace survey found 66% of office professionals had used an AI tool despite believing it violated company policy, and 88% had shared work-related information with a public AI tool.

Why this is a mid-market problem, not just an enterprise one, in 2026

Shadow AI spreads fastest where there's no dedicated team watching for it, which describes most mid-market companies more than it describes large enterprises. A big company might have a security team that notices unusual data flows. A mid-market company usually doesn't, so shadow AI use can run for months before anyone in leadership becomes aware it's happening at all.

That gap is exactly what the 2026 PagerDuty Shadow AI survey captured: 81% of employees believed leadership operated under different AI rules than everyone else, and 77% felt company AI restrictions limited their professional growth. Employees aren't hiding AI use out of malice. They're routing around a policy vacuum because the tools are useful and nobody's given them an approved alternative.

What actually counts as shadow AI

Shadow AI is broader than someone secretly using a chatbot. It includes AI features toggled on by default inside software you already license, browser extensions that summarize or rewrite content using an AI backend, a team adopting a free-tier AI tool without procurement ever reviewing it, and contractors or agencies running your company's data through their own AI tools under no policy that applies to them at all.

Five ways shadow AI actually shows up

1. Personal chatbot accounts used for work tasks. Someone pastes a contract, a customer email, or financial figures into a consumer AI tool to save time.
2. AI-powered browser extensions. These often read page content, including anything open in a work application, without anyone reviewing what data leaves the browser.
3. A team quietly adopts a free-tier AI vendor tool. It solves a real problem, so it spreads department by department without procurement or IT ever signing off.
4. AI features ship turned on by default inside software you already pay for, and nobody in the company deliberately opted in or reviewed what it does with your data.
5. Contractors and agencies use their own AI tools on your data. Your internal policy, if you have one, usually doesn't reach the vendors and freelancers touching the same information.

Any one of these can exist in a well-run company. Several at once, with no one tracking them, is what turns shadow AI from an inconvenience into exposure.

How big is the risk, actually?

Concrete, not hypothetical. Among employees who shared information with a public AI tool, 43% shared emails or correspondence, 40% shared meeting notes, 34% shared customer data, and 31% shared financial information or confidential documents, according to the same 2026 survey. Separately, IBM's 2025 Cost of a Data Breach report found that shadow AI was a factor in 20% of breaches at organizations studied, adding roughly $670,000 to the average cost of those breaches.

Those numbers describe two different but related exposures: data leaving the company through everyday, well-intentioned AI use, and the added cost when that exposure turns into an actual breach.

Does banning AI tools fix it?

PagerDuty Shadow AI Workplace Survey, 2026

Not on its own, and it can make things worse. The same 2026 survey found 75% of employees would consider leaving for an employer that offered better AI tools and training, a number that climbed to 80% at large companies. A ban without an approved alternative tends to push AI use further underground rather than eliminate it, since the underlying reason people reach for these tools, genuine time savings, doesn't go away because the policy changed.

What actually reduces the risk is narrower: a short list of approved tools, a clear line on what data can and can't go into them, and enough visibility that leadership would actually notice if that line got crossed.

A pattern I've seen before AI had a name

This is close to a problem I watched play out under a different label: shadow IT. Long before "shadow AI" was a phrase, teams in digital transformation programs I worked on would quietly build or use digital tools that solved real problems; a content development tool, a project tracker, a file-sharing app, a scheduling tool, without ever routing it through IT or procurement. Nobody was trying to create risk. They just needed something that worked, and the sanctioned option was slower or didn't exist yet.

The fix was never a blanket ban. It was giving teams a fast, reasonable path to get a tool approved, paired with enough visibility that unsanctioned tools didn't just accumulate silently for years. Some of those unofficial tools turned out to be worth adopting company-wide once someone actually looked at them. Others got retired the moment a reviewer noticed what data they touched. Neither outcome was possible while the tools stayed invisible.

Shadow AI is the same dynamic showing up again, with higher stakes attached to the kind of data now involved. The instinct to reach for a faster tool hasn't changed. What's changed is how much a single unreviewed tool can now see.

How to reduce the risk without killing legitimate use

Start with visibility before restriction: an honest inventory of what AI tools people are already using, gathered without punishing anyone for admitting it. From there, a short approved list covering the most common use cases removes most of the reason to go around policy in the first place. Pair that with a plain rule on what data categories can never go into a public AI tool, and a simple, fast way to request a new tool get reviewed, so the approved list keeps pace with what people actually need.

Where this fits into the bigger picture

Shadow AI sits squarely inside Security & Risk, one of the five pillars the RAISE OS™ AI Maturity Assessment measures, and it connects directly to who owns AI governance in the first place. A company can't manage a risk it can't see, and visibility, not prohibition, is what actually closes the gap.

Find out where your organization actually stands