Explain like I'm five · AI Security

What is Shadow AI?

Shadow AI, told as a story about a delivery box an employee quietly brings in through the back door, without the company knowing.

OFFICIAL TOOL REQUESTstill pending...an employee, waitingBACK DOOR?a box brought in quietlytired of waiting, someone brings something else in through the back

Tired of waiting for approval, someone brings something else in through the back.The official request is slow — the back door works right away.

I've never seen this box before...?it's not written in the logbookthe employee just wanted to finish faster — the manager can't see this box at all

The employee just wanted to finish faster — the manager can't see this box at all.It's not malice — it's just invisible, so nobody knew.

Shadow AI = an outside tool quietly brought in and used, without the company knowingFRONT DOOR (official)request → approvalthrough the tasterlogged in the book?BACK DOOR (shadow) — skips every checkthe front door checks layer by layer — nobody even knows about the back-door box

Shadow AI = an outside tool quietly brought in and used, without the company knowing.The front door checks layer by layer — nobody even knows about the back-door box.

Nobody signs it inthere's no approval paperwork at all
Skips every checkpointno taster, no check
Leaks data out the same doorit can leak right back out the way it came in
Still the manager's responsibilitynot knowing doesn't erase the responsibility
FRONT DOOR (sanctioned)approval: the manager signs offcheck: the taster looks it overrecord: written in the logbookaccess: only what the drawer allowsBACK DOOR (shadow tool)approval: nobody signed offcheck: skipped entirelyrecord: not in any logbookaccess: whatever goes in, goesthe same task is handled completely differently at the front door vs. the back

The same task is handled completely differently at the front door vs. the back.Approval, checking, record-keeping, and access — all four differ.

?a secret ingredient slips out through that same boxfound out only after it breaksTHE RULES BOARD ALREADY SAYS SOjust writing "no back door" isn't enoughthe front door has to get faster tooa faster front door shrinks shadow AI more than a ban does

You find out only after it breaks — a ban alone doesn't stop it.A faster front door shrinks shadow AI more than a ban does. AI governance is writing down what the sanctioned tools are — shadow AI is exactly what happens quietly outside that board.

In one breath

Shadow AI = an outside AI tool an employee quietly brings in through the back door, without the company knowing — skipping approval, review, and record-keeping alike.

Shadow AI refers to employees using AI tools the company hasn't approved or even knows about. Because it bypasses IT's formal review, guardrails, and logging, data leaks, supply-chain risk, or policy violations can go undetected for a long time. A ban notice alone rarely reduces it — the sanctioned tool has to be fast and easy enough to use instead.

When grown-ups say it

Shadow AI
An outside tool quietly brought in and used, without the company knowing. It comes in through the back door — nobody even knows it exists.
Sanctioned tool list
Tools that came through the front door, with approval. Using each tool only with sign-off. → What is Tool Calling?
Data leakage
A secret ingredient riding out in that same box. Especially risky with a back-door tool. → What is AI Privacy?
Supply-chain risk
The risk of letting in a box you can't trace. The general security concept behind the pantry. → What is a Supply Chain Attack?
Least privilege
Like the knife drawer — only as much access as needed. The back-door box has none of this limit. → the security world's key story
Audit trail
The logbook that writes down who used what, and when. That logbook is the next page. → the order logbook
Compliance
Actually following the rules the company set. More back doors, and this is the first thing to break. → What is Compliance?
AI governance
The board on the wall with the official rules written down. Shadow AI is exactly what happens quietly outside that rules board. → The Kitchen Rules Board
Next story
The Bell That Rings →
Want another term as a picture book? Request →