Skip to content
FlashTowerFlashTower home

Free tool

Shadow AI Risk Assessment

“Shadow AI” is AI used for work without approval — personal chatbot accounts, browser extensions, AI features switched on inside other apps. Answer nine questions to see how exposed you are and what to do first. To find the tools already in use, read the shadow AI discovery guide.

Last reviewed: September 2026

1.Do employees know which AI tools are approved for work?
2.Do you have a written AI acceptable-use policy?
3.Do employees use personal or free AI accounts for work?
4.Do employees know which data must never be entered into AI tools?
5.Are approved AI tools behind company SSO, and are unapproved AI sites blocked or flagged?
6.Are browser extensions — including AI extensions — managed on company devices?
7.Do you have visibility into which AI tools are actually in use?
8.Have employees been trained on safe use of AI tools?
9.Is there a quick, known way for employees to request a new AI tool?

Shadow AI exposure

0 of 9 answered · Your answers stay in your browser; FlashTower records only anonymous usage events.

Answer for your organization as it is today, not as policy says it should be. Choose “Not sure” when you don't know.

Based only on your answers, using fixed rules. It estimates exposure; it does not detect which AI tools are actually in use.

FlashTower findings are informational. No security system detects or prevents every threat, and FlashTower does not certify compliance or provide legal advice.

Assess up to 5 AI tools with the Free AI Security Scan