Concepts

Shadow AI Discovery

Shadow AI Discovery finds the AI tools staff use that nobody approved, and estimates what data is leaving.

What it looks for

• AI chat tools and sites visited from your network.
• AI apps connected to company mail and files.
• AI browser extensions and desktop apps.
• Exposed AI keys and unapproved MCP servers.

Where the data comes from

Data your organisation exports: DNS or firewall logs, connected-app lists from your email and file platform, device software lists, and an optional anonymous staff survey.

What you get

• An inventory of AI tools found, by department where possible.
• A prioritised view of findings using the assessment method agreed in the scope.
• The top findings and suggested next steps, including which use to move onto the AI Access Layer.

Read-only

Discovery reports. It never blocks, changes or removes anything in your environment.

Sensitive data

The assessment scope defines which fields are reviewed, how sensitive information is handled and what is retained. Share only the data agreed for the assessment.

Two ways to run it

A one-off assessment, or continuous discovery alongside the access layer [Scoped per client].