What is shadow AI? Definition and pitfall to avoid

Shadow AI is the AI equivalent of shadow IT, extended in 2024-2025 to nearly all companies. The figures converge: 35.9% of US workers used generative AI by December 2025 (Federal Reserve Bank of St. Louis), a significant portion in shadow mode, without declaration to their employer. A PagerDuty/Wakefield Research survey (fielded April 2026, 1,250 office professionals in non-IT roles at companies with $500M+ revenue) quantifies the scale on the corporate side: 66% have used an AI tool they believed was not permitted, and 88% shared work-related information with it — including 34% customer data and 31% financial or confidential documents. Four mechanisms feed shadow AI. The free nature of consumer tools (ChatGPT, Claude.ai): an employee only needs a personal email address. Perceived performance: public models produce useful results immediately. Slowness of official deployment: between identifying a need and providing a validated tool, several months often pass. Lack of explicit policy: without a written AI policy, employees interpret silence as tacit authorisation. These mechanisms show up in the data: 89% of users first adopted the tool in their personal life, 44% use it to work around the limits of company-approved tools, and 38% have delivered AI-assisted work without disclosing it. Frequent consequences: transmission of confidential documents to external models, use of outputs in deliverables without legal review.