When employees use AI tools without regulation, this can quickly become problematic for companies. Chris Noon, Director of Commercial Intelligence and Analytics at Dropbox, shows in his guest contribution how this can be prevented.
The benefits of AI are enticing, but when employees use AI tools without regulation, it can quickly lead to problems for companies.
(Image: Dropbox)
Companies see artificial intelligence as a great opportunity to boost their economic performance and revolutionize the work of their employees. For example, it enables workers to become more productive or save time by finding information more quickly. However, these benefits can only be realized through a coordinated AI strategy across the entire organization.
Risk: Shadow AI
Seventy percent of employees are already using AI tools before their supervisors are aware of it. This unauthorized use of AI technology that can potentially access sensitive company data is called "shadow AI." Shadow AI refers to the use of generative AI products without oversight from the IT department. This involves unprotected personal accounts that lack the security checks or data agreements that would apply to a corporate account. Without a comprehensive strategy and employee training, such a situation can put the company at risk.
Leave No One Behind When Introducing AI
One of the main problems with shadow AI lies in its inappropriate and non-compliant use. The reason for this is the lack of uniform corporate guidelines. This fragmented, individualized approach to adopting generative AI contributes to dividing the company: on one side are employees who use the latest technology without collaborating with their colleagues, while on the other side are hesitant non-users who fall behind their seemingly more advanced peers. Without proper employee training, the use of AI remains ineffective. Those experimenting on an individual basis may become frustrated because they are unable to gain useful insights. Additionally, these initial negative experiences risk leading employees to abandon AI tools altogether.
Unauthorized Use Jeopardizes Sensitive Data
A recent survey by Veritas revealed that 31 percent of respondents admitted to sharing potentially sensitive information with generative AI tools. Business accounts for AI products typically include agreements to ensure that corporate data is not used for training AI models. However, personal accounts, often used in shadow AI, usually do not have these agreements. This means that any corporate data shared through a personal account could inadvertently be used to train the AI model.
The protection of corporate data should therefore always be a top priority. Additionally, serious consequences can arise when employees use these powerful tools without guidance or personal judgment. AI tools are still susceptible to errors, inaccuracies, and even "hallucinations." Relying on flawed results without questioning them can lead to incorrect decisions and have legal or financial repercussions for the company.
AI Strategy that Sets Rules But Also Encourages Experimentation
To address these challenges, companies should pursue a coordinated AI strategy. It is important for IT teams to identify trusted providers and establish clear conditions for handling sensitive data. By collaborating with providers that adhere to AI principles, cyber risks and legal obligations can be minimized.
Additionally, these rules serve to ensure data security and prevent data breaches. For companies with sufficient resources, developing a customized AI solution is a viable option. This can be supported by utilizing language models. If companies have adequate resources, developing a tailored AI solution becomes a practical choice. This results in a powerful AI that integrates seamlessly into the company's data ecosystem and processes. Moreover, it boosts productivity and frees up time for strategic tasks.
To maximize the benefits of their AI investments, companies should develop a comprehensive program that continuously informs employees about the best practices for integrating AI into their daily work. This ensures that all employees can take advantage of AI technology. Every team has an "Early Tech Adopter." With their curiosity and passion, they are often ahead of those who are more hesitant to experiment. These employees can collaborate with their IT teams to become AI champions within the company. They can share insights, best practices, and knowledge with colleagues, promoting a collaborative learning environment.
Combine Ethics And Innovation
Within the boundaries of the company's AI strategy, employees can work more efficiently by automating routine tasks. They can enhance their performance and save time to focus on work that brings the greatest value to the company. However, it should be noted that AI should not be used as a substitute for human intelligence and oversight.
Date: 08.12.2025
Naturally, we always handle your personal data responsibly. Any personal data we receive from you is processed in accordance with applicable data protection legislation. For detailed information please see our privacy policy.
Consent to the use of data for promotional purposes
I hereby consent to Vogel Communications Group GmbH & Co. KG, Max-Planck-Str. 7-9, 97082 Würzburg including any affiliated companies according to §§ 15 et seq. AktG (hereafter: Vogel Communications Group) using my e-mail address to send editorial newsletters. A list of all affiliated companies can be found here
Newsletter content may include all products and services of any companies mentioned above, including for example specialist journals and books, events and fairs as well as event-related products and services, print and digital media offers and services such as additional (editorial) newsletters, raffles, lead campaigns, market research both online and offline, specialist webportals and e-learning offers. In case my personal telephone number has also been collected, it may be used for offers of aforementioned products, for services of the companies mentioned above, and market research purposes.
Additionally, my consent also includes the processing of my email address and telephone number for data matching for marketing purposes with select advertising partners such as LinkedIn, Google, and Meta. For this, Vogel Communications Group may transmit said data in hashed form to the advertising partners who then use said data to determine whether I am also a member of the mentioned advertising partner portals. Vogel Communications Group uses this feature for the purposes of re-targeting (up-selling, cross-selling, and customer loyalty), generating so-called look-alike audiences for acquisition of new customers, and as basis for exclusion for on-going advertising campaigns. Further information can be found in section “data matching for marketing purposes”.
In case I access protected data on Internet portals of Vogel Communications Group including any affiliated companies according to §§ 15 et seq. AktG, I need to provide further data in order to register for the access to such content. In return for this free access to editorial content, my data may be used in accordance with this consent for the purposes stated here. This does not apply to data matching for marketing purposes.
Right of revocation
I understand that I can revoke my consent at will. My revocation does not change the lawfulness of data processing that was conducted based on my consent leading up to my revocation. One option to declare my revocation is to use the contact form found at https://contact.vogel.de. In case I no longer wish to receive certain newsletters, I have subscribed to, I can also click on the unsubscribe link included at the end of a newsletter. Further information regarding my right of revocation and the implementation of it as well as the consequences of my revocation can be found in the data protection declaration, section editorial newsletter.
AI is now capable of automating numerous tasks and generating large volumes of content within seconds. However, employees must still apply their own critical thinking. If they do not thoroughly review the AI-generated text, they will only create bigger problems in the future. Moreover, attempting to resolve issues this way may, in turn, lead to even more work. Therefore, despite all the enthusiasm for AI, companies must continually consider the long-term ethical and social impacts of AI on their workforce. They must also ensure that AI complements human capabilities in a balanced manner.