Home / Glossary / Shadow AI
Glossary

Shadow AI

Shadow AI is the use of AI apps, agents, models, providers or tools that the organisation has not registered or approved. It is what bans produce: the use moves somewhere no one can see it.

Also known as: unsanctioned AI, unregistered AI

How it is detected

A shadow-AI signal is any app, agent, model, provider or tool that appears in a call but is not in the AI inventory at the time. Periodic snapshots compare the inventory with what is actually calling models, and surface anything new and unregistered, and anything that has gone from registered to absent.

In Raidu

Tower flags an unregistered asset the first time it calls a model, inside your own cloud, and asks for registration. The signal is linked to the registration for the audit record. See Stop shadow AI and AI Inventory.

Common questions

Questions about Shadow AI.

What counts as a shadow-AI signal? +
Any app, agent, model, provider or tool that appears in a call but is not in the AI inventory at the time.
Can an asset be registered after the fact? +
Yes. Registration records risk tier, intended purpose, human oversight level and data categories, and the earlier signal is linked to it.
See it in production

Raidu is the accountability layer for your data and your AI. Intercept. Explain. Prove.

See the runtime, the tamper-evident record, and what a regulator-ready trail looks like for your AI stack.