
· Amit Kothari · AI
Shadow AI is not a policy problem. It is a supply problem.
Banning unauthorized AI tools does not work. Employees use them anyway, just outside your security perimeter. The companies actually preventing shadow AI are doing it by making approved tools faster to access than unapproved ones, not by writing stricter policies nobody reads.