https://en.wikipedia.org/wiki/Shadow_IT
https://www.ibm.com/think/topics/shadow-ai
Shadow IT
Shadow IT refers to the deployment of any software, hardware or information technology on an enterprise network without an IT department or CIO’s approval, knowledge or oversight. Employees might turn to unsanctioned AI technology when they find existing solutions insufficient or believe that the approved options are too slow. Common examples include using personal cloud storage services or unapproved project management tools.
Shadow AI
While shadow IT focuses on any unauthorized application or service, shadow AI zeros in on AI-specific tools, platforms and use cases. For instance, an employee might use a large language model (LLM) to quickly generate a report without realizing the security risks. The key difference lies in the nature of the tools being used: Shadow AI is about the unauthorized use of artificial intelligence, which introduces unique concerns related to data management, model outputs and decision-making.