Shadow AI in UK businesses: what it is and how to manage it

Last verified 6 November 2026. AI memory features change quickly; dated claims were checked on this date.

Shadow AI is staff using AI tools their employer never approved. In the UK it is the norm: 71% of employees have used unapproved AI tools at work, according to Microsoft UK research with Censuswide published on 13 October 2025.

How common is shadow AI in the UK?

The study surveyed 2,003 UK employees. About half use unapproved tools every week. Microsoft sells enterprise AI tools, so weigh the source. The pattern matches what most owners already suspect.

Why shadow AI happens

The reasons are ordinary. The tools are familiar from home, and 28% of employees in the same study said their employer offers no approved option at all.

Why banning shadow AI backfires

A ban without an alternative pushes use out of sight. People keep using the tool that saves them time. They just stop telling you.

A one-page AI policy for small businesses

1. Approved tools. Name them. Work happens in accounts the business controls.
2. Never put in: client details, staff records, commercial figures, passwords.
3. Check before it goes out. A person reviews anything sent to a client.
4. Where knowledge lives. Decisions and client context are kept somewhere shared, not in personal chat histories.
5. Who to ask. One named person for questions.

Give people an approved tool, so the easy option is also the safe one.

For what happens to that work when someone leaves, read what happens to an employee’s ChatGPT history when they leave. For what each assistant keeps about you, see AI memory.

Questions people ask

Sources

• Microsoft UK, Rise in shadow AI tools raising security concerns for UK (13 October 2025)