Find and Manage the AI Already in Your Business
Shadow AI includes artificial intelligence tools, accounts, integrations, agents, browser extensions, and embedded features used without formal approval or oversight. Use this hub to identify where AI is already operating, understand the risks, and begin bringing it under control.
This resource library is expanding. Existing STACK AI security and data protection resources are included while new Shadow AI checklists, directories, technical guides, and templates are developed.
Manage Shadow AI in Four Steps
Begin by identifying AI use, then evaluate the risk, establish governance, and monitor for changes.
1. Discover
Find AI tools, features, accounts, extensions, integrations, and agents used across the business.
2. Inventory
Document each platform, its users, business purpose, data access, ownership, and approval status.
3. Govern
Define approved tools, prohibited uses, data restrictions, review requirements, and employee responsibilities.
4. Monitor
Watch for new platforms, embedded AI capabilities, connected applications, and policy exceptions.
Start With Shadow AI
Understand what Shadow AI is, why it happens, and why visibility should be the first priority.
Like Humans, AI Requires Zero Trust
Learn how unauthorized AI tools, embedded AI features, agents, and connected workflows create visibility, identity, data governance, and forensic risks.
Shadow AI: The Hidden Risk Inside Your Business
Review the fundamentals of Shadow AI, including why employees adopt unapproved tools and how sensitive information can leave the organization.
Is ChatGPT Safe for Business Use?
Understand how consumer AI use can expose business information when staff use public platforms without approved policies or safeguards.
Evaluate AI Tools and Data Practices
Review how popular AI platforms handle business data, privacy, security, and retention.
Enterprise AI Pricing, Privacy and Security Comparison
Compare ChatGPT, Claude, Gemini, and Microsoft Copilot plans, including business features, data protections, and enterprise options.
Leverage Zero Data Retention for AI
Learn how zero data retention can reduce the amount of prompt and response data retained by an AI provider.
Securing the Data That Powers AI Systems
Review security practices for the company information, documents, and data sources connected to artificial intelligence tools.
Business Use and Implementation
Connect Shadow AI discovery to safer, more deliberate AI adoption across the organization.
AI in the Workplace: What Every Business Needs to Know
Review how businesses are using AI, what threats leaders should understand, and what stronger adoption practices look like.
Artificial Intelligence Readiness Evaluation
Evaluate whether your organization has the security, data governance, policy, and technical foundation needed to support AI.
Explore the Main AI Hub
Browse STACK resources covering AI implementation, security, governance, data protection, legal developments, and compliance.
Coming to the Shadow AI Hub
These planned resources will replace filler content as the Shadow AI library expands.
Shadow AI Discovery Checklist
A department-by-department checklist for finding unauthorized AI tools, accounts, integrations, and embedded capabilities.
AI Platform and Provider Directory
A categorized directory of major AI assistants, search tools, meeting platforms, coding tools, creative applications, and business software.
AI Domains and Allowlist Guide
A technical reference for reviewing AI domains in DNS filtering, secure web gateways, firewalls, proxies, and browser controls.
Embedded AI in Business Software
A guide to AI features already included in Microsoft 365, Google Workspace, CRM platforms, design tools, meeting software, and other SaaS products.