Shadow AI · Workforce reality

Shadow AI: how to find out what AI your staff are really using

Shadow AI is when staff use AI tools at work without approval or visibility. To find out what AI your staff are using, combine IT discovery with conversations. Logs show which tools get opened; surveys get the safe answer. One-to-one AI interviews, like Ethnobot's, reveal which tools people use, for which tasks, the workarounds, and the risks.

Monitoring can show which sites get visited. Ethnobot is the human half of the picture — one-to-one interviews that surface the tools and workarounds people describe, alongside IT discovery.

Try the interview yourself first. Free, no signup.

Definition

What is shadow AI?

Shadow AI is staff using AI tools at work without the organisation's approval or visibility. It shows up in plain ways: drafting proposals in a personal ChatGPT account, pasting data into a free tool, or installing a browser AI plug-in that never went through IT.

Shadow IT is unapproved software or devices. Shadow AI goes further — it processes what people type into it. Bring-your-own-AI (BYOAI) is the same pattern under another name.

Why it happens

Why shadow AI happens

People hide AI use when policy is unclear, approved tools are slow or missing, or they fear looking less capable. Tick-box data cannot tell you about the consultant who secretly uses AI to write proposals and feels conflicted about it.

That gap — people can do more with AI than the organisation enables — is the Absorption Gap. Shadow AI is often the Absorption Gap showing up as secret workarounds.

Read the Absorption Gap framework →
Both sides

The risks and the hidden wins

Risks people describe include data leaving the organisation, unchecked outputs, and uneven practice across teams — useful signals for policy and enablement.

Wins sit in the same interviews: the hidden experts the organisation hasn't noticed, the hesitant people who need clearer permission, and the patterns you didn't know existed. Banning shadow AI loses the wins as well as the risks.

See the six AI archetypes →
The method

How to find out what AI your staff are using

Logs alone aren't enough. You also need to hear from people, in a way they'll answer openly. A one-to-one AI interview gets the answer a survey cannot.

Step 1

Check the systems

IT discovery — sign-ins, network logs, expense claims — shows which tools appear. Useful for inventory. It cannot show why someone used a tool, for which task, or what they were afraid to admit.

Step 2

Ask the people, in a way they'll answer openly

Surveys get safe answers. “Rate your AI confidence 1–5” gives you a number, not a story. A one-to-one AI interview follows up, gets examples, and records the person's own words — including the tools and workarounds people describe.

Step 3

Read the patterns

Across the team: the tools and workarounds people describe, for which tasks, where people are stuck, which risks recur, who the hidden experts are. That is the signal for policy and enablement — not another seat count.

Why surveys miss AI adoption reality →
Comparison

Why an interview finds what a survey misses

ApproachWhat it shows
Monitoring / IT discoveryWhich sites or tools get opened
SurveyA rating or tick-box — often the safe answer
Ethnobot interviewThe tools and workarounds people describe, plus tasks and reasons, in the person's own words

Use discovery and interviews together.

Deliverables

What leaders get

An org study returns cohort-level themes, segment profiles, a quote library (quotes are never attributed without consent), plus a Leadership Brief and Team Debrief. These are live deliverables on /org-study.

Sample report figures are an example — not a named client case.

Next steps

Start with yourself, then your team

Discover your AI profile
Try the interview yourself first. Free, no signup.
Discover your AI profile →
Shadow AI pulse for one team
Free team diagnostic — up to 15 people. Interview links within 24 hours, no call required.
Request team diagnostic →
Commission a study
Need it across the organisation? Commission a study that measures the Absorption Gap.
Explore org studies →
Questions

Shadow AI FAQ

What is shadow AI?

Staff using AI tools at work without the organisation's approval or visibility.

Why is shadow AI a problem?

It can expose data and creates uneven practice, but it also hides the people who are already getting value from AI.

How do I find out what AI my staff are using?

Combine IT discovery with one-to-one conversations; logs show tools, interviews show tasks, reasons and risks.

Can't I just run a survey?

Surveys tend to get the safe answer; people under-report use they think their manager would disapprove of.

Should we ban shadow AI?

Banning tends to push use further underground; find out what's happening first, then set policy and approved tools.

Will staff be named in the findings?

Org Study findings are reported at cohort level, and quotes are never attributed without consent.

How is this different from shadow AI detection software?

Detection shows which tools are used; Ethnobot shows how, why and what people need. Use both.

See the tools and workarounds people describe

Start with your own profile, pulse one team, or commission a full organisational study.

Commission AI Adoption Intelligence →

Ethnobot is built by Helix Lab in Adelaide — qualitative interviews for AI adoption, not a consulting catalogue. Privacy posture lives on /privacy.