Enterprise IT + regulated startup (2025–2026 pattern) · 2025 · cost index 4/5

Shadow AI — tickets and logs in consumer chat

Compliance scramble; vendor DPA retrofit; partial customer notification

What happened

Engineers pasted production tickets, stack traces, and customer identifiers into consumer AI chat because the sanctioned portal was slow and locked down. InfoSec discovered the pattern after a vendor questionnaire — not before. Governance decks arrived after the data had already left the building.

Failure mode

Policy-by-slide while usable approved tooling lagged real workflows. Convenience beat blocked portals. Data classification existed on paper; paste was faster than process.

Lesson

Shadow AI is low-code's cousin with a better demo. Ship usable sanctioned paths, classify what may leave the network, and assume convenience wins until the approved tool is as fast as paste.

Sources

  • Industry pattern — unsanctioned LLM data exposure
  • Privacy regulator guidance — generative AI and personal data
  • InfoSec retrospectives — shadow IT with chatbots

Related tech

← All cases

© 2026 Fadstack · Shane Code

Opinionated history · not a ranking