Shadow AI is the use of AI tools and assistants that an organization has not approved or does not monitor, such as employees pasting sensitive data into consumer chatbots. Because the data leaves as encrypted conversational text, traditional DLP and network tools rarely see it.