Shadow AI: The Hidden Risk in Your Organization
Shadow AI is what happens when the approved tool is slower than the deadline. Staff paste a contract into a chatbot, a team wires an API key into a spreadsheet, and a vendor ships a generative feature in a release note nobody read. None of it appears in the model inventory, and the obligations attach anyway — because the EU AI ActRèglement (UE) 2024/1689Le règlement de l'Union européenne sur l'intelligence artificielle. Il répartit les systèmes d'IA en niveaux de risque — interdit, haut risque, risque limité et risque minimal — et attache des obligations différentes au fournisseur qui construit un système et au déployeur qui l'utilise. Il est entré en vigueur le 1er août 2024 et s'applique par étapes ; le Digital Omnibus, règlement (UE) 2026/1744, en vigueur depuis le 27 juillet 2026, a reporté les étapes relatives au haut risque sans modifier les sanctions. L'article 99 les maintient à un maximum de 35 millions d'euros ou 7 % du chiffre d'affaires annuel mondial pour les pratiques interdites, et à un maximum de 15 millions d'euros ou 3 % pour la plupart des autres manquements, y compris les obligations en matière de haut risque et de transparence.S'applique àFournisseurs et déployeurs de systèmes d'IA mis sur le marché de l'UE ou utilisés dans l'UE.Prochaine échéance2 décembre 2026 — Marquage des contenus générés par l'IA au titre de l'article 50, paragraphe 2, pour les systèmes déjà sur le marché au 2 août 2026Lire le texte source (s'ouvre dans un nouvel onglet)Information générale sur l'instrument cité, ne constituant pas un conseil juridique. regulates the use of an AI system, not the procurement process that was supposed to precede it.
Published: March 2026 · updated August 2026 · Author: Dominic Fui Dodzi-Nusenu · Reading time: ~7 minutes
Disclosure: This article was drafted using generative AI assistance and subsequently edited, verified, and expanded by human legal and tech policy specialists. The organizational case study presented below is a composite hypothetical scenario designed to illustrate compliance risks.
In brief
Shadow AI has three sources, and only one of them is people breaking rules: staff-adopted tools, AI features that appear inside already-approved software, and departmental builds using vendor APIs. The exposure is immediate rather than deferred — GDPRRèglement (UE) 2016/679 — en allemand, la DSGVOLe règlement général de l'UE sur la protection des données. Outre la base légale, la limitation des finalités et les droits des personnes concernées, l'article 35 attache une analyse d'impact relative à la protection des données aux traitements susceptibles d'engendrer un risque élevé — c'est la disposition qu'un projet d'IA rencontre le plus souvent, et celle qui recoupe une évaluation des risques au titre de l'EU AI Act sans être le même document.S'applique àTout responsable du traitement ou sous-traitant traitant des données à caractère personnel de personnes se trouvant dans l'UE.Lire le texte source (s'ouvre dans un nouvel onglet)Information générale sur l'instrument cité, ne constituant pas un conseil juridique. applies today to personal data pasted into an external model, confidentiality obligations apply today, and the Article 4 AI literacy duty has applied since 2 February 2025 with no risk-tier threshold. The governance failure it creates is subtler than data leakage: an incomplete inventory means your classification exercise is unreliable, because you cannot rule out Annex III for systems you have not enumerated. Blocking alone reliably fails — it moves usage to personal devices where you lose visibility entirely. Discovery plus a fast, credible approval path is what actually shrinks the shadow estate.
Three sources, only one of which is misconduct
Staff-adopted tools
The familiar case: a person with a deadline uses a public assistant to summarise, draft or translate. Usually well-intentioned, usually because the sanctioned option is absent or slow. Treating this as a discipline problem misreads the cause and guarantees it recurs.
AI that arrives inside approved software
This is the largest and least-discussed source. A tool that passed review in 2024 ships an AI assistant in 2026. Your risk assessment is now stale and nothing triggered a re-review, because no purchase happened. The institution’s AI footprint grew without a single decision being made.
Departmental builds
A team with a corporate card and an API key builds something useful. It works, it spreads, and it has no owner in any inventory, no documentation, and often no one left who understands it after the original builder moves on.
What it actually exposes
| Exposure | Applies from | Why shadow AI triggers it |
|---|---|---|
| GDPR — lawful basis, transfers, processor terms | Now | Personal data sent to an external model with no DPA and often outside the EEA |
| Confidentiality and trade secrets | Now | Contract text, source code and client data pasted into consumer tools |
| AI literacy (Article 4) | Since 2 Feb 2025 | Applies to every organisation using AI, at any tier, with no threshold |
| Transparency (Article 50) | Since 2 Aug 2026 | Ungoverned customer-facing generation may need disclosure |
| High-risk obligations | 2 Dec 2027 | An unenumerated system cannot be ruled out of Annex III |
The last row is the one that changes how you should think about this. Shadow AI is not only a data-protection issue — it undermines the reliability of your whole classification exercise. A classification report that covers the systems you knew about is not a statement that nothing else is high-risk. It is a statement about your inventory.
Case scenario: the tool that passed review twice
A compliance team approved a document-collaboration platform in 2024 after a full assessment. In 2026 the vendor enabled an AI summarisation feature by default across the tenant. Nine months later, preparing for a client audit, the team discovered that regulated correspondence had been processed by a sub-processor listed nowhere in its records of processing activity.
Nobody broke a rule. The approval was genuine, the tool was sanctioned, and the control failure was that re-review was tied to procurement events rather than to capability changes. That is a governance design fault, and it is the most common shadow-AI story in regulated firms.
Surfacing it without driving it underground
Enforcement-first approaches have a predictable failure mode: usage moves to personal devices and personal accounts, where you have no visibility, no logs, and no ability to constrain what is pasted. You have not reduced the risk, you have reduced your knowledge of it.
- Discover before you police. Egress logs, SSO and OAuth grants, expense data and a genuinely amnesty-framed survey will surface most of the estate.
- Make re-review capability-triggered, not purchase-triggered. Track vendor release notes for AI features in tools you already run; this closes the largest gap.
- Give people a fast sanctioned path. Shadow AI is demand meeting an absent supply. A same-week approval route for low-risk use removes most of the motive.
- Deliver the Article 4 literacy training you already owe. It is a live obligation and it is also the cheapest control here — most risky pasting is done by people who do not know where the text goes.
- Fold findings into the one inventory. A shadow-AI register that sits beside the model inventory recreates the original problem.
How much of your AI estate is in your inventory?
Discover, classify and govern shadow AI in one place.
Related reading
- How German Banks Are Adopting AI: Market Landscape 2026
- EU AI Act Compliance Checklist for High-Risk AI Systems
- German AI Regulation: BaFin, DORA, NIS2 and the KI-MIG
Frequently asked questions
Is shadow AI really an EU AI Act problem, or just a GDPR one?
Both, and the AI Act angle is the less obvious one. GDPR exposure is immediate where personal data leaves the organisation. The AI Act exposure is that an unenumerated system cannot be classified, so your risk assessment covers only what you happened to know about.
Does blocking AI tools solve it?
Rarely, and it often makes visibility worse. Blocking on the corporate network moves usage to personal devices and personal accounts, where there are no logs and no controls. Discovery plus a fast approval path outperforms blocking in practice.
Our staff only use AI for drafting. Is that in scope?
The AI literacy duty in Article 4 applies regardless of use or risk tier, so yes for that at minimum. Whether more applies depends on what is pasted in — drafting with client data engages GDPR and confidentiality obligations immediately.
How do we catch AI features added to software we already approved?
Tie re-review to capability change rather than to purchase. Monitor vendor release notes and admin-console feature toggles for the tools in your estate, and treat a new AI feature as a trigger for reassessment even though no contract changed.
What is the fastest way to get an initial picture?
OAuth and SSO grant logs plus outbound traffic to known AI domains, cross-checked against expense data for individual subscriptions. That combination typically surfaces the large majority of the estate in days rather than weeks.