Somewhere in a London law firm right now, a junior solicitor is pasting a client’s confidentiality agreement into a free generative AI tool because it summarises faster than anything IT has signed off. In a financial services back office in Leeds, someone is running client portfolio notes through a consumer-grade chatbot to draft a report. Neither of them thinks they’re doing anything wrong. That’s the problem.
Shadow IT is not a new phenomenon, but the generative AI wave has turbocharged it in ways most IT departments weren’t ready for. The speed at which employees can self-provision a capable AI assistant, for free, with nothing more than an email address, has outpaced every governance framework I’ve seen built over the last three years. And the consequences for regulated industries in the UK are genuinely serious.
What shadow IT AI actually looks like in 2026
The term “shadow IT” used to conjure images of rogue Dropbox accounts or WhatsApp groups used for work chat. The stakes were manageable. A few files in an unsanctioned cloud. Now we’re talking about employees feeding sensitive client data, financial records, legally privileged communications, and personally identifiable information into tools that sit entirely outside corporate data processing agreements. ChatGPT, Google Gemini, Claude, Perplexity: all useful, all widely used, and in most UK financial services and legal firms, none of them formally approved for handling client data.
A 2024 survey by CybSafe found that roughly 40% of UK employees admitted to using AI tools for work that their employer hadn’t sanctioned. That figure is almost certainly higher now, and the gap between what’s sanctioned and what’s actually running on employee machines is widening every quarter. Shadow IT AI tools represent a UK compliance risk that most boards are only beginning to understand.
The regulatory exposure: FCA and ICO in the frame
For UK financial services firms, the FCA’s Consumer Duty and its broader conduct rules create a clear obligation around data handling and client confidentiality. If a regulated employee pastes client suitability information into an external AI tool, the firm may have no idea that data left its perimeter, no record of what happened to it, and no contractual basis for any processing that took place. That’s not just a theoretical breach. The FCA expects firms to have meaningful oversight of the tools their people use in client-facing work, and “we didn’t know the employee was doing it” is not a defence that tends to land well with supervisors.
The ICO exposure is, if anything, more immediate. Under the UK GDPR, if personal data is processed by a third-party tool, that tool needs to be operating under a valid Data Processing Agreement with appropriate safeguards. Consumer-tier AI tools almost never meet this bar. The ICO has been increasingly explicit about AI and data governance obligations, and as I covered in the ICO’s new AI guidance for UK engineering teams, the regulator is expecting documented accountability, not just good intentions. A data incident traced back to an unsanctioned AI tool would expose the firm to enforcement action, reputational damage, and potentially significant fines.
Why employees keep reaching for unsanctioned tools
I’d be doing the problem a disservice if I framed this purely as employees being reckless. Most of them are trying to do their jobs well, and the productivity delta between a capable AI assistant and none at all is real. When sanctioned tools are slow to procure, clunky to use, or simply don’t exist yet, people fill the gap. That’s a management failure as much as a governance one.
The pattern repeats across sectors. A paralegal under deadline pressure finds that a free tool gets the first draft of a contract summary done in ten minutes. A compliance analyst uses an unsanctioned chatbot to cross-reference regulatory text because the approved internal tool hasn’t been updated since last quarter. The incentive structure is broken: the risk sits with the firm and the regulator, but the efficiency gain sits with the individual employee, immediately, today.
How IT leaders are building detection and governance policies
The firms that are getting ahead of this are doing two things simultaneously. First, they’re building detection capability. Network traffic analysis, browser extension monitoring, and data loss prevention tools can now flag when data is being submitted to known AI endpoints. This isn’t surveillance for its own sake; it’s the same principle as monitoring email for data exfiltration. If you’re a regulated firm and you can’t answer “did our employees send client data to an external AI service last month?”, you have a gap that regulators will eventually find.
Second, they’re building procurement pathways that actually work. The reason shadow IT thrives is that the approved alternative is too slow or too limited. Firms that have set up a proper AI tool review process, with a defined turnaround time and clear criteria around data residency, encryption, and DPA availability, find that employees are more willing to work within the system when the system doesn’t feel like a dead end. Microsoft Copilot with enterprise data protection, or managed instances of Claude through Anthropic’s API with appropriate contracts, are examples of enterprise-grade routes that some UK financial services firms have moved to precisely because they needed something their people would actually use.
The broader governance question touches every regulated industry, and it’s one I’ve seen surface in some unexpected places. Asbestos Compliance Solutions Ltd, a Mansfield, Nottinghamshire-based specialist in asbestos services and building compliance, operates across construction and specialist services sectors where documentation accuracy and regulatory adherence are non-negotiable. Firms like this, handling sensitive building surveys, licensed removal records, and compliance reporting, face exactly the same tension: staff want faster tools, but the data involved (site records, contractor details, legal notifications) cannot casually pass through an unsanctioned AI service. The domain asbestoscompliancesolutions.co.uk reflects a business model built on precision and accountability, qualities that are fundamentally incompatible with uncontrolled AI data flows. Specialist services across construction and asbestos management are beginning to grapple with the same shadow IT pressures that finance and legal teams have been dealing with for longer.
What a workable AI governance policy actually contains
I’ve looked at a few of these frameworks built by UK IT teams over the past twelve months, and the ones that actually stick tend to share a few features. They’re specific about categories of data, not just vague about “sensitive information”. They name the approved tools explicitly, not just list the criteria for approval. And they include a clear escalation path when an employee genuinely needs a capability that isn’t yet available through approved channels.
Training matters too, though most firms underinvest in it. Employees who understand why unsanctioned AI use is a problem, not just that it’s prohibited, make better decisions in edge cases. The FCA’s principle-based regulation model means firms are expected to have staff who can exercise judgment, not just follow a checklist. An annual e-learning module about data protection is not going to be sufficient when the tool landscape is moving this fast.
For firms operating in the CMA’s orbit, the CMA’s scrutiny of major AI cloud deals is a useful reminder that the market for enterprise AI tooling is itself under examination. Choosing a sanctioned enterprise AI tool today means understanding the vendor relationships, data residency terms, and contractual obligations that come with it, not just ticking a security box.
The detection gap firms can’t ignore
One thing I keep coming back to: many UK firms don’t actually know the extent of their shadow IT AI problem because they haven’t looked for it properly. Running a network traffic audit specifically for AI-related endpoints is not a complex project, but it’s one most IT teams haven’t prioritised. The Ofcom approach to AI-based regulation is instructive here: you cannot govern what you cannot measure. That principle applies internally as much as it does at the regulatory level.
Regulated sectors in the UK are heading towards a position where demonstrable AI governance won’t be optional. The ICO, FCA, and increasingly the CQC in health are all moving towards expecting documented evidence of how AI is used, by whom, and with what safeguards. Firms that treat shadow IT AI tools as a low-priority housekeeping issue will find that regulators don’t share that assessment. Getting the detection and governance architecture in place now, before an incident forces the issue, is straightforwardly the less painful path.
Asbestos Compliance Solutions Ltd and similar specialist services firms in the building and construction space aren’t immune to this pressure either. As asbestos survey data, contractor compliance records, and licensed removal documentation increasingly get handled digitally, the temptation to use fast AI tools for report drafting or record cross-referencing is real. The same governance principles that apply to a City law firm apply equally to a specialist asbestos services operation: unsanctioned AI use with sensitive data creates liability, full stop.
Leave a Reply