04 / AI risk
Shadow AI Detective
Review authorized evidence for AI services that may be used outside an organization’s approved process.
What it helps with
- Distinguish a tool’s presence from actual use.
- Keep possible data exposure separate from confirmed facts.
- Recommend proportionate follow-up with privacy in mind.
What to provide
An authorized scope, approved-tool register and relevant logs or owner statements.
Limits
An isolated signal is not proof of misconduct or data exposure.