Use case · Shadow AI

Stop shadow AI before it reaches a model.

A developer tries a new AI tool. It isn’t in the inventory. Raidu flags it before the first prompt reaches a model, and asks for registration.

Runs inside your AWS, GCP or Kubernetes install.

Last reviewed

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
Discover the tool in a log review three months later.Flag it the first time it calls a model.
A spreadsheet of approved tools that nobody keeps current.A live list: every app, agent, model, provider and tool.
No record of who approved what, or when.Every registration carries risk tier, intended purpose, human oversight and data categories.

How Raidu handles it

How Raidu catches it.

  1. 01

    Intercept the call

    Every SDK call, console session and agent run passes through Tower. The calling app and model are checked against the inventory.

  2. 02

    Check the registry

    If the app, agent or model is not in the inventory, Tower flags it as a shadow-AI signal. The call can be allowed with a warning or blocked, depending on your policy.

  3. 03

    Ask for registration

    The developer sees a plain message: this tool is not registered. They open AI Inventory, set the risk tier, intended purpose and data categories, and the next call goes through normally.

The product

See the screens.

Product windows from the films, with sample data. No customer data.

The record

The shadow-AI signal, on the record.

Every unregistered asset triggers a tamper-evident record. Nothing is lost if the team disputes it later.

Entry 17 Inventory check · 11:44:02Z
Asset
Unregistered · first seen now
Called by
Developer key dk-4412
Model
Not in inventory
Verdict
Shadow-AI signal raised
Proof
Tamper-evident
sha256 c10f2309ac2e0b218f8078a936b165dc…
entry 17 of 4,831 · write-once

Common questions

Answered straight.

What counts as a shadow-AI signal?
Any app, agent, model, provider or tool that appears in a call to Tower but is not in the AI Inventory at the time.
Can we register an asset after the fact?
Yes. Open AI Inventory, complete the registration, and add the risk tier, intended purpose, human oversight level and data categories. The shadow-AI signal is linked to the registration for the audit record.
What can we record when registering an AI system?
Risk tier, intended purpose, human oversight level and data categories. Every field is part of the tamper-evident record.
Does this work for third-party client apps?
Yes. Apps that send calls through Tower are checked against the inventory. An app without a registered entry triggers a shadow-AI signal before it reaches a model.
Where does the inventory live?
Inside your own cloud install. Raidu deploys in your AWS, GCP or Kubernetes environment.

Know every AI tool routed through Raidu.