Your Employees Are Using AI Tools Your IT Team Doesn't Know About

A new Lenovo report reveals 70% of enterprise AI is uncontrolled. Here's what that means for your business and what to do about it before it becomes a security breach.

NSI Tech •

Picture this: your marketing team is using a free AI writing tool to draft client proposals. Your sales team is pasting prospect data into an AI chatbot to build forecasts. Nobody told IT. Nobody checked the terms of service. Nobody checked if those tools are storing your data.

That’s not a hypothetical. That’s happening right now, inside businesses just like yours.

A new Lenovo report found that 70% of enterprise AI is running uncontrolled — meaning it’s unmonitored, unmanaged, and outside IT’s visibility. Employees adopt tools on their own, often for good reasons, but the result is the same: a growing attack surface with no oversight.

This isn’t about blaming your team. It’s about the reality of how AI adoption actually works. People find tools that help them work faster. IT governance moves slower. The gap in between is where risk lives.

What Uncontrolled AI Actually Looks Like

Here are a few ways shadow AI shows up in everyday business:

  • Employees using consumer AI tools for work data — not realizing those tools may retain or train on that data
  • Unsanctioned AI browsers or plugins installed without IT review
  • Business units signing up for AI services with company email addresses, bypassing procurement entirely

Each one is a potential data leak. Each one is a gap in your security posture.

Why This Matters More Than Ever

AI-enabled cyberattacks are surging — up 89% year-over-year, according to industry data. Attackers are getting smarter and faster. When your own tools are running blind, you’re already behind.

Managed IT services don’t just fix computers. A good provider maps your entire digital environment, sets clear AI use policies, and monitors for the risks that creep in through the cracks.

What You Can Do Today

  1. Audit what AI tools are already in use across your team
  2. Establish clear, simple policies — not a 40-page document, just a few clear rules people will actually follow
  3. Work with an IT partner who can monitor AI activity without slowing your team down

The goal isn’t to block AI. It’s to make sure your business benefits from AI without accidentally opening the door to a breach.

Need help getting your AI usage under control? Talk to NSI Tech — we help businesses manage the risk that comes with new technology.

Need help with any of this? NSI Tech has you covered.

Talk to us