To the CIO who just discovered forty browser tabs of unapproved AI:

I know the first instinct, because I’ve watched it play out: prohibit, warn, monitor. Before you send that email, let me offer a different read of what you found.

Shadow AI is a backlog wearing a trench coat, not a loyalty problem. Your people pasted text into public tools because the work’s real, the approved route’s slow or absent, and the unapproved one removes friction the same afternoon. A prohibition’s sometimes genuinely necessary for sensitive data. What it won’t do is shrink the workload that produced the behavior; unanswered pressure just moves somewhere you can’t see it.

So we start with an amnesty inventory instead of a hunt. Ask which tools, for which tasks, with what kinds of information, and why the sanctioned options lost. Lead with discipline and you’ll get a polite fiction; the map you build from fiction produces confident policy about imaginary behavior. And cast the net wider than the obvious chat window, because that window’s rarely the whole exposure: meeting assistants, browser extensions, features embedded in software you already license, uploaded files, automated connectors.

Classify what comes back before responding to any of it. Some tasks carry no sensitive material and can live in an approved external tool with clear terms. Some touch internal but low-impact records and need a managed account, retention settings, and a little training. Some involve privileged, regulated, sovereign, or export-controlled data, and those don’t leave institutional custody, which means local inference or no AI at all.

Then build the thing that beats the shadow: a sanctioned path that’s easier than the workaround. Plain examples of allowed and forbidden use, written in the language of the actual jobs. A request route for new use cases with a response time that respects a weekly backlog. Logging that watches data movement rather than scoring curiosity, and staff who know exactly what’s observed and why, because surveillance would burn the trust your next inventory depends on.

The forty tabs are a map of unmet demand. Institutions that read the map end up with governed capability. The ones that only shred it? They’re running the inventory again next year, minus the honesty.