Shadow AI
People using AI tools at work that their organisation hasn't approved.
For example
Using a personal chatbot account to summarise confidential office files.
Related terms
- Secure SDLC Building security checks into every stage of the software development lifecycle, not bolting them on at the end.
- Security champion A team member, not on the security team, trained to run lightweight security checks on their own team's work.
- Security mindset Applying these questions as a habit of thought across any role, not only security-titled jobs.
- Shadow API A live API version or endpoint nobody is actively tracking or securing.
- Shadow IT Software, tools, or services in use without formal approval or security review.
- Shared responsibility model The idea, especially in cloud computing, that security is split between a provider and its customer, not owned entirely by either.