Here is a finding that surprises almost every leadership team I speak with. While the organization deliberates its AI policy, its employees have already decided. Surveys across industries consistently find a large share of knowledge workers using AI tools at work, most without telling anyone, many against policies they do not know exist.
Pause before reacting, because the instinctive responses are both wrong.
The crackdown response drives use underground. The work still happens with AI; it just happens on personal phones and home accounts, outside every control you have. You keep the risk and lose the visibility.
The blind-eye response is quieter but no better. It means your client data may already be traveling through consumer tools with no contractual protections, your work products have unknown provenance, and the first you will hear of it is from a client or a regulator.
The productive response treats shadow use as free market research. Your staff have been running an unauthorized pilot program at their own initiative, and its results are sitting there for the asking. Where AI is already being used is where the friction in your workflows actually is, which is information most organizations pay consultants to find.
As a result, run an amnesty inventory. Announce that for thirty days, disclosing AI use carries no consequences, because leadership wants to design the official toolkit around real needs. Collect the list. You will typically find a handful of high-value uses worth formalizing, a few practices that need to stop immediately for data reasons, and a middle band that needs guidelines rather than prohibition.
Then govern forward. Clear policy, approved tools that are genuinely good, and a named owner for each significant use. Shadow use shrinks when the official path is better than the hidden one, and never before.
Related reading
Mel Meier, DBA is an applied social scientist and the founder of iB Consulting USA, a woman owned, WOSB certified advisory firm. She serves boards, associations, and executive teams through board advisory, organizational diagnostics, speaking engagements in the United States and internationally, and organizational assessments.