Shadow AI at Work and at Home
What this means
Shadow AI is shadow IT in a new coat: free chatbots, mystery extensions, and helpful sites nobody approved — still seeing what you paste.
Note: This site may show light ads and occasional affiliate links. How that works.
Shadow IT used to mean the USB stick and the app nobody approved. Shadow AI is the same habit in a new coat: a free chatbot in a personal browser tab, a clever extension, a “quick” site that rewrites text — none of it on the family or work approved list.
The risk is not curiosity. It is invisibility. Tools you never mention still see what you paste. They still create accounts, cookies, and habits outside any shared safety net.
If nobody knows the tool exists, nobody can help when it goes wrong — and you may not remember what you gave it.
What shadow AI looks like
- Personal AI sites used for work emails or customer notes
- Browser extensions that “summarise any page”
- Phone apps that want contacts, photos, or microphone access for “writing help”
- Shared PCs with half a dozen forgotten AI logins still open
Same blind spot as shadow IT
Unapproved software, mystery cloud drives, and random USB tools all share one problem: data leaves the path you thought it was on. AI just makes that path feel helpful and modern, so we lower our guard.
Stay visible without panic
- Prefer known tools with clear privacy settings — and actually open those settings.
- Do not paste customer, payroll, or health details into free novelty sites.
- Review browser extensions every few months; remove what you do not recognise.
- If you use AI for work, ask what the official option is instead of inventing a parallel one.
Stop! Pause! Before you paste work or customer details into a site you found in a hurry: would you tell a partner, IT friend, or manager which site you used? If that feels awkward, slow down — or strip the sensitive bits first.
Name the tool out loud. Awkward silence is a signal.
A self-check
Think of the last AI site or app you used that is not on any approved list. Can you remember what you pasted into it? If not, pick one official tool — or stop pasting sensitive text into mystery sites.
Related: Before you paste it into the bot · Cybersecurity at home · AI, human risk & scams
