{"id":6544,"date":"2026-06-03T10:55:35","date_gmt":"2026-06-03T10:55:35","guid":{"rendered":"https:\/\/www.goodcore.co.uk\/blog\/?p=6544"},"modified":"2026-06-10T12:43:36","modified_gmt":"2026-06-10T12:43:36","slug":"shadow-ai","status":"publish","type":"post","link":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/","title":{"rendered":"More Than Half of the UK\u2019s Regulated Orgs Have Detected Shadow AI. Here\u2019s Why (and What To Do About It)"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">Most organisations would tell you they have an AI policy. Somewhere in the handbook, there&#8217;s likely a paragraph about acceptable use, data handling, and the tools the IT team has approved. On paper, things look reasonably under control.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">What&#8217;s happening in practice is something different. Across regulated, mid-market organisations, <a href=\"https:\/\/www.goodcore.co.uk\/ai-operationalisation\/\"><strong>AI<\/strong><\/a> usage is running well ahead of the formal frameworks designed to govern it. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Employees are reaching for the tools that make their jobs easier, whether or not those tools have been signed off. And in most cases, the people responsible for AI governance don&#8217;t yet have a clear picture of where, how, or by whom AI is actually being used inside their own business.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">What is shadow AI?<\/span><\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6550 size-full\" src=\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Unmonitored-data-flows-Employee-led-adoption-Limited-auditability.jpg\" alt=\"\" width=\"1500\" height=\"756\" srcset=\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Unmonitored-data-flows-Employee-led-adoption-Limited-auditability.jpg 1500w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Unmonitored-data-flows-Employee-led-adoption-Limited-auditability-300x151.jpg 300w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Unmonitored-data-flows-Employee-led-adoption-Limited-auditability-1024x516.jpg 1024w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Unmonitored-data-flows-Employee-led-adoption-Limited-auditability-150x76.jpg 150w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Unmonitored-data-flows-Employee-led-adoption-Limited-auditability-768x387.jpg 768w\" sizes=\"(max-width: 1500px) 100vw, 1500px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Shadow AI refers to the use of artificial intelligence tools, models, or applications without formal approval, oversight, or governance from the organisation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In practice, this can be as simple as an employee using a public chatbot to summarise a report, generate code, analyse data, draft customer communications, or conduct research. The tools themselves are often legitimate and widely available. The issue is that their use takes place outside the organisation&#8217;s approved processes, security controls, and accountability frameworks.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Shadow AI is rarely driven by malicious intent. Most employees adopt AI tools because they help them work faster, automate repetitive tasks, or improve productivity. The governance challenge arises when AI usage grows faster than the policies, controls, and approved alternatives designed to manage it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As AI tools become more powerful and easier to access, the gap between official AI strategies and everyday employee behaviour is becoming increasingly difficult for organisations to ignore.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">How common is shadow AI today?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Our <\/span><a href=\"https:\/\/www.goodcore.co.uk\/reports\/\"><b>recent research<\/b><\/a><span style=\"font-weight: 400;\">, surveying 205 CTOs and senior IT decision-makers across the UK&#8217;s regulated industries, found that <\/span><b>51% have already detected unauthorised AI use<\/b><span style=\"font-weight: 400;\"> by employees inside their organisations. A further <\/span><b>20% suspect it&#8217;s happening<\/b><span style=\"font-weight: 400;\"> but haven&#8217;t yet been able to prove it. Only 28% are confident that no shadow AI usage exists at all.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In other words, around seven in ten technology leaders are either actively dealing with shadow AI, or worried they might be. And yet, the activity itself is rarely dramatic. It&#8217;s the everyday stuff: an employee pasting customer information into a public chatbot to summarise a document, a manager using an AI assistant to draft a sensitive email, a team member relying on AI-generated analysis to inform a decision that ends up influencing how a regulated process is run. Most of it is well-intentioned, productivity-driven, and entirely invisible to the people who would need to know.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">That&#8217;s what makes it a governance problem rather than a behaviour problem. Shadow AI isn&#8217;t about employees doing something \u201cwrong.\u201d It&#8217;s about the existence of a parallel layer of AI activity that sits outside every control, log, and accountability structure the organisation has put in place.<\/span><\/p>\n<div style=\"text-align: center;\">\n<div class=\"cta-section\">\n<p class=\"cta-text\"><span style=\"font-weight: 400;\">If you&#8217;re looking to implement AI in a controlled, secure, and scalable way, explore our AI services to see how we help organisations move from experimentation to production.<\/span><br \/>\n<a class=\"cta-btn\" href=\"https:\/\/www.goodcore.co.uk\/ai-operationalisation\/\" target=\"_blank\" rel=\"noopener\">AI services<\/a><\/p>\n<\/div>\n<\/div>\n<h2>Why is shadow AI different to shadow IT?<\/h2>\n<p><span style=\"font-weight: 400;\">Shadow IT has been a known challenge for years \u2013 employees using unsanctioned tools to get their work done faster than the formal procurement process allows. Most CTOs have a playbook for it. Shadow AI looks similar on the surface, but the risk profile underneath is materially different.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When an employee uses an unapproved project management tool, the data shared with that tool is usually limited and the actions taken inside it are reversible. When an employee uses an unapproved AI model, they may be sharing sensitive customer information, internal financial data, or regulated content directly into a system that retains and potentially trains on that input. The data leaves the organisation&#8217;s perimeter without ever being recognised as having done so.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The second difference is in how the outputs are used. Traditional shadow IT produces artefacts that look like artefacts: documents, spreadsheets, project plans. AI outputs increasingly look like analysis, judgement, and recommendation. They get woven into decisions, embedded in customer communications, and used to justify actions that carry regulatory weight, without anyone necessarily flagging that an AI was involved. That makes shadow AI harder to detect after the fact, and far harder to audit if something goes wrong.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In regulated environments, that combination \u2013 invisible data exposure and unattributed AI influence on decisions \u2013 is difficult to defend against.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6553 size-full\" src=\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/3-risks-of-shadow-AI.jpg\" alt=\"\" width=\"1500\" height=\"1290\" srcset=\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/3-risks-of-shadow-AI.jpg 1500w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/3-risks-of-shadow-AI-300x258.jpg 300w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/3-risks-of-shadow-AI-1024x881.jpg 1024w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/3-risks-of-shadow-AI-150x129.jpg 150w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/3-risks-of-shadow-AI-768x660.jpg 768w\" sizes=\"(max-width: 1500px) 100vw, 1500px\" \/><\/p>\n<h2><span style=\"font-weight: 400;\">Key reasons driving the rise of shadow AI<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Three factors are driving the spread of shadow AI, and they&#8217;re not factors that policy alone is going to address.<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The first is that public AI tools are extraordinarily good at the kinds of tasks employees most want help with. Summarising long documents, drafting communications, analysing data, generating first drafts of code \u2013 the productivity gains are immediate and obvious. When the formal alternative is either nonexistent, slower, or harder to access, employees do what they&#8217;ve always done: use whatever works.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The second is that AI capability has spread faster than AI governance. Most organisations are still designing the policies, accreditation processes, and sanctioned-tool lists they need to provide a credible alternative to public models. While that work is underway, the gap between what employees can do unofficially and what they&#8217;re allowed to do officially has widened. That gap is where shadow AI lives.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The third is more cultural. There&#8217;s a strong message coming from boards and senior leaders that organisations need to &#8220;do something with AI&#8221; \u2013 and individual employees are often interpreting that message as permission to experiment. In many cases, they think they&#8217;re delivering what leadership has asked for. The disconnect between &#8220;we need to be using AI more&#8221; at board level and &#8220;but only in ways we&#8217;ve approved&#8221; at operational level is rarely communicated clearly enough to prevent that interpretation.<\/span><\/li>\n<\/ol>\n<p><b>Read also:<\/b> <b>\u00a0<\/b><a href=\"https:\/\/www.goodcore.co.uk\/blog\/gdpr-in-ai-products\/\"><b>Navigating GDPR and Data Privacy When Building AI-Powered Products.<\/b><\/a><\/p>\n<h2><span style=\"font-weight: 400;\">How organisations should respond to shadow AI<\/span><\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-6551 size-full\" src=\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/How-to-handle-shadow-AI.jpg\" alt=\"\" width=\"1500\" height=\"1328\" srcset=\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/How-to-handle-shadow-AI.jpg 1500w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/How-to-handle-shadow-AI-300x266.jpg 300w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/How-to-handle-shadow-AI-1024x907.jpg 1024w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/How-to-handle-shadow-AI-150x133.jpg 150w, https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/How-to-handle-shadow-AI-768x680.jpg 768w\" sizes=\"(max-width: 1500px) 100vw, 1500px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">The instinct, when shadow AI is uncovered, is to clamp down. Block public tools at the network level, issue stronger policies, escalate enforcement. In our experience, that approach rarely works. The value employees are getting from AI is too obvious, and the workarounds are too easy. Bans tend to push the activity further underground rather than stop it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A more sustainable approach focuses on visibility first, sanctioned alternatives second, and policy enforcement third.<\/span><\/p>\n<h3><b>Identify where shadow AI is most likely to exist<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Start by understanding where shadow AI is most likely to be happening. Some functions \u2013 marketing, communications, research, software engineering, financial analysis \u2013 are far more exposed than others, simply because the work lends itself to AI assistance. Mapping that exposure honestly, rather than assuming the policy is being followed, is the first step. In most organisations, the picture is more widespread than expected.<\/span><\/p>\n<h3><b>Provide viable alternatives before enforcing policy<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">The fastest way to reduce shadow AI is to make the official route genuinely useful \u2013 approved tools, clear guidance on what can and can&#8217;t be shared with them, and minimal friction to access. Employees default to public tools because public tools work. If the sanctioned alternative is slower, less capable, or harder to get hold of, no amount of policy will close the gap.<\/span><\/p>\n<p><b>If you&#8217;re evaluating AI tools and unsure which models are appropriate for different use cases, our blog <\/b><a href=\"https:\/\/www.goodcore.co.uk\/blog\/how-to-choose-an-ai-model\/\"><b>How to Choose the Right AI Model for Your Project<\/b><\/a><b> explores the key considerations.<\/b><\/p>\n<h3><b>Embed guidance into everyday workflows<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Make expectations explicit at the point of use, not just in the handbook. Most employees don&#8217;t read AI policies. They read the warning on the screen when they&#8217;re about to paste something sensitive into a tool. Building those checkpoints into the workflow \u2013 through internal tooling, browser controls, or clear labelling of approved versus unapproved systems \u2013 does more to shape behaviour than a thousand-word policy document.<\/span><\/p>\n<h3><b>Use shadow AI signals to improve governance<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Finally, treat shadow AI discovery as intelligence, not just a compliance issue. The fact that employees are reaching for AI tools in specific contexts tells you where the demand is, what problems they&#8217;re trying to solve, and where your sanctioned offering needs to improve. The organisations handling this well aren&#8217;t just shutting things down \u2013 they&#8217;re using the patterns they uncover to invest in better, safer alternatives.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">None of this means shadow AI becomes acceptable. It just means the response has to recognise the reality: employees are already using AI to do their jobs, and the organisations that get this right are the ones that bring that activity into the open, rather than trying to legislate it out of existence. Outright prohibition doesn\u2019t work; visibility, sanctioned alternatives, and clear expectations do.<\/span><\/p>\n<h3><b>Read the full report<\/b><\/h3>\n<p><i><span style=\"font-weight: 400;\">This is one of five areas explored in our research report, AI under live load: How CTOs are deploying AI in regulated environments. The full report includes the data behind these findings and practical guidance for technology leaders navigating each one.<\/span><\/i><\/p>\n<div style=\"text-align: center;\">\n<div class=\"cta-section\">\n<h3 class=\"cta-heading\">AI under live load: How CTOs are deploying AI in regulated environments.<\/h3>\n<p><a class=\"cta-btn\" href=\"https:\/\/www.goodcore.co.uk\/reports\/\" target=\"_blank\" rel=\"noopener\">Download the report<\/a><\/p>\n<\/div>\n<\/div>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Most organisations would tell you they have an AI policy. Somewhere in the handbook, there&#8217;s likely a paragraph about acceptable use, data handling, and the tools the IT team has approved. On paper, things look reasonably under control. What&#8217;s happening in practice is something different. Across regulated, mid-market organisations, AI usage is running well ahead [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":6552,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[116],"tags":[],"class_list":{"0":"post-6544","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-ai"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Shadow AI is In Your Organisation. Here\u2019s Why (and What To Do About It)<\/title>\n<meta name=\"description\" content=\"Shadow AI is spreading across organisations faster than governance can keep up. Learn the risks, warning signs, and practical steps to regain control.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Shadow AI is In Your Organisation. Here\u2019s Why (and What To Do About It)\" \/>\n<meta property=\"og:description\" content=\"Shadow AI is spreading across organisations faster than governance can keep up. Learn the risks, warning signs, and practical steps to regain control.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/\" \/>\n<meta property=\"og:site_name\" content=\"GoodCore Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-03T10:55:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-10T12:43:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1400\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Hareem\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hareem\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/\"},\"author\":{\"name\":\"Hareem\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/person\/4ff4642d9e6f9bfe1d8215ba97310683\"},\"headline\":\"More Than Half of the UK\u2019s Regulated Orgs Have Detected Shadow AI. Here\u2019s Why (and What To Do About It)\",\"datePublished\":\"2026-06-03T10:55:35+00:00\",\"dateModified\":\"2026-06-10T12:43:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/\"},\"wordCount\":1506,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg\",\"articleSection\":[\"AI\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/\",\"url\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/\",\"name\":\"Shadow AI is In Your Organisation. Here\u2019s Why (and What To Do About It)\",\"isPartOf\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg\",\"datePublished\":\"2026-06-03T10:55:35+00:00\",\"dateModified\":\"2026-06-10T12:43:36+00:00\",\"description\":\"Shadow AI is spreading across organisations faster than governance can keep up. Learn the risks, warning signs, and practical steps to regain control.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage\",\"url\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg\",\"contentUrl\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg\",\"width\":1400,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.goodcore.co.uk\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"More Than Half of the UK\u2019s Regulated Orgs Have Detected Shadow AI. Here\u2019s Why (and What To Do About It)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#website\",\"url\":\"https:\/\/www.goodcore.co.uk\/blog\/\",\"name\":\"GoodCore Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.goodcore.co.uk\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#organization\",\"name\":\"GoodCore Software Ltd\",\"url\":\"https:\/\/www.goodcore.co.uk\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2019\/08\/goodcore_logo.jpg\",\"contentUrl\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2019\/08\/goodcore_logo.jpg\",\"width\":313,\"height\":54,\"caption\":\"GoodCore Software Ltd\"},\"image\":{\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/person\/4ff4642d9e6f9bfe1d8215ba97310683\",\"name\":\"Hareem\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2024\/04\/Hareem-Arshad-105x105.png\",\"contentUrl\":\"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2024\/04\/Hareem-Arshad-105x105.png\",\"caption\":\"Hareem\"},\"description\":\"Hareem is an integral part of GoodCore Software\u2019s marketing team, where she combines creativity and strategy to craft content that highlights the transformative power of bespoke software solutions. At GoodCore, Hareem focuses on creating insightful blogs, compelling case studies, and high-converting website content. Her efforts have significantly contributed to growing GoodCore\u2019s online presence, increasing organic traffic by 30% and driving a 20% boost in marketing-qualified leads. Collaborating closely with the software development team, she transforms complex technical concepts into clear, relatable narratives that resonate with potential clients. Outside of work, she loves exploring new books, diving into thought-provoking podcasts, and discovering stories that inspire her personally and professionally. For Hareem, marketing at GoodCore is more than a job\u2014it\u2019s a way to connect with people and help businesses succeed through the power of custom software.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/hareemar\/\"],\"url\":\"https:\/\/www.goodcore.co.uk\/blog\/author\/hareem\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Shadow AI is In Your Organisation. Here\u2019s Why (and What To Do About It)","description":"Shadow AI is spreading across organisations faster than governance can keep up. Learn the risks, warning signs, and practical steps to regain control.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/","og_locale":"en_GB","og_type":"article","og_title":"Shadow AI is In Your Organisation. Here\u2019s Why (and What To Do About It)","og_description":"Shadow AI is spreading across organisations faster than governance can keep up. Learn the risks, warning signs, and practical steps to regain control.","og_url":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/","og_site_name":"GoodCore Blog","article_published_time":"2026-06-03T10:55:35+00:00","article_modified_time":"2026-06-10T12:43:36+00:00","og_image":[{"width":1400,"height":600,"url":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg","type":"image\/jpeg"}],"author":"Hareem","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Hareem","Estimated reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#article","isPartOf":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/"},"author":{"name":"Hareem","@id":"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/person\/4ff4642d9e6f9bfe1d8215ba97310683"},"headline":"More Than Half of the UK\u2019s Regulated Orgs Have Detected Shadow AI. Here\u2019s Why (and What To Do About It)","datePublished":"2026-06-03T10:55:35+00:00","dateModified":"2026-06-10T12:43:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/"},"wordCount":1506,"commentCount":0,"publisher":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/#organization"},"image":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage"},"thumbnailUrl":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg","articleSection":["AI"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/","url":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/","name":"Shadow AI is In Your Organisation. Here\u2019s Why (and What To Do About It)","isPartOf":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage"},"image":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage"},"thumbnailUrl":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg","datePublished":"2026-06-03T10:55:35+00:00","dateModified":"2026-06-10T12:43:36+00:00","description":"Shadow AI is spreading across organisations faster than governance can keep up. Learn the risks, warning signs, and practical steps to regain control.","breadcrumb":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#primaryimage","url":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg","contentUrl":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2026\/06\/Blog-Cover-Shadow-Ai.jpg","width":1400,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/www.goodcore.co.uk\/blog\/shadow-ai\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.goodcore.co.uk\/blog\/"},{"@type":"ListItem","position":2,"name":"More Than Half of the UK\u2019s Regulated Orgs Have Detected Shadow AI. Here\u2019s Why (and What To Do About It)"}]},{"@type":"WebSite","@id":"https:\/\/www.goodcore.co.uk\/blog\/#website","url":"https:\/\/www.goodcore.co.uk\/blog\/","name":"GoodCore Blog","description":"","publisher":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.goodcore.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.goodcore.co.uk\/blog\/#organization","name":"GoodCore Software Ltd","url":"https:\/\/www.goodcore.co.uk\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2019\/08\/goodcore_logo.jpg","contentUrl":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2019\/08\/goodcore_logo.jpg","width":313,"height":54,"caption":"GoodCore Software Ltd"},"image":{"@id":"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/person\/4ff4642d9e6f9bfe1d8215ba97310683","name":"Hareem","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.goodcore.co.uk\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2024\/04\/Hareem-Arshad-105x105.png","contentUrl":"https:\/\/www.goodcore.co.uk\/blog\/wp-content\/uploads\/2024\/04\/Hareem-Arshad-105x105.png","caption":"Hareem"},"description":"Hareem is an integral part of GoodCore Software\u2019s marketing team, where she combines creativity and strategy to craft content that highlights the transformative power of bespoke software solutions. At GoodCore, Hareem focuses on creating insightful blogs, compelling case studies, and high-converting website content. Her efforts have significantly contributed to growing GoodCore\u2019s online presence, increasing organic traffic by 30% and driving a 20% boost in marketing-qualified leads. Collaborating closely with the software development team, she transforms complex technical concepts into clear, relatable narratives that resonate with potential clients. Outside of work, she loves exploring new books, diving into thought-provoking podcasts, and discovering stories that inspire her personally and professionally. For Hareem, marketing at GoodCore is more than a job\u2014it\u2019s a way to connect with people and help businesses succeed through the power of custom software.","sameAs":["https:\/\/www.linkedin.com\/in\/hareemar\/"],"url":"https:\/\/www.goodcore.co.uk\/blog\/author\/hareem\/"}]}},"_links":{"self":[{"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/posts\/6544"}],"collection":[{"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=6544"}],"version-history":[{"count":8,"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/posts\/6544\/revisions"}],"predecessor-version":[{"id":6556,"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/posts\/6544\/revisions\/6556"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/media\/6552"}],"wp:attachment":[{"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=6544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=6544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.goodcore.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=6544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}