Shadow IT is usually an unapproved application holding data. Shadow AI is data leaving the organisation inside a prompt, an upload or an integration, where it may be retained or used for training. Shadow AI needs nothing installed, so it rarely appears in expenses or software inventories.
