
Shadow AI: your staff are already pasting your IP into chatbots
43% of surveyed professionals pasted work correspondence into public AI tools. Why bans fail, and what a governed alternative looks like.
Engineering articles tagged Privacy & Security. Practical, technical, and grounded in real on-premise deployments.

43% of surveyed professionals pasted work correspondence into public AI tools. Why bans fail, and what a governed alternative looks like.

"We encrypt it and sign a DPA" is a real control. It is not equivalent to processing that never leaves the building — because compensating controls recur, are exercised at arm's length, and produce assurance rather than evidence.

93% of enterprises are pulling AI workloads back from public cloud, and 20% of 2025 breaches involved shadow AI at ~$670K extra cost each. The 2026 data behind AI deployment without sending data to the cloud.

Ten questions to put to any AI vendor, including us — written to be used verbatim in a procurement pack. If a vendor answers one of them with contract language where an artefact was asked for, that is the finding.