Shadow AI: The Risk Isn't the Tool, It's the Data
OpenText, Tuesday, October 20th, 2026
OpenText argues that blocking unsanctioned AI tools rarely works and that shadow AI risk should be managed by protecting the data.
OpenText notes that employees routinely paste customer emails and spreadsheets into AI assistants simply to get their work done.
It defines shadow AI as the use of AI tools, models or features without the knowledge or approval of IT and security teams.
Examples include chatbots on personal accounts, AI features in SaaS apps and browser extensions with built-in assistants.
OpenText argues that finding and blocking every unsanctioned tool rarely solves the problem, because the real risk is the data flowing through them.