Stop Shadow AI Employees Purview 2026

Last updated November 2, 2026 by Errin O'Connor, Founder & Chief AI Architect, EPC Group

Shadow AI (BYOAI) — employees using ChatGPT / Claude / Gemini / Perplexity for work — affects 55-75% of enterprise knowledge workers without governance. Six compliance risks: HIPAA violations, MNPI leakage, IP loss, GDPR non-compliance, contract violations, audit trail loss. 5-step remediation: Discover + Policy + Sanction + Block + Educate. Purview enforces via sensitivity labels + DLP + endpoint controls + cloud app governance. EPC Group BYOAI Discovery: 3-week fixed fee. Full remediation: 8-week fixed fee. Ongoing governance retainer: monthly retainer quoted after discovery.

Key Facts

Shadow AI affects 55-75% of enterprise knowledge workers without governance
6 compliance risks: HIPAA, MNPI, IP loss, GDPR, contracts, audit trail
5-step remediation: Discover + Policy + Sanction + Block + Educate
Purview enforces via sensitivity labels + DLP + endpoint controls
Sanctioned tools alongside Copilot: GitHub Copilot, Azure OpenAI, ChatGPT Enterprise
EPC Group BYOAI Discovery: 3-week fixed fee; Full remediation: 8-week fixed fee

What these controls can see, and what they cannot

Microsoft's controls see AI use only where they are deployed: onboarded devices, managed browsers, Microsoft 365 and connected networks. On each of those, this is what they observe and where they stop.

Defender for Cloud Apps, Cloud Discovery: which AI apps people reach, from firewall or proxy logs or from Defender for Endpoint. An app tagged Unsanctioned is blocked through Defender Antivirus network protection on onboarded devices, and a block can take up to three hours to reach a device.
Purview Endpoint DLP: sensitive information pasted or uploaded to third-party AI sites in Edge, Chrome and Firefox, on devices onboarded to Microsoft Purview; Chrome needs the Microsoft Purview browser extension.
Microsoft Edge with Purview: prompts sent to AI apps in Edge, with sensitive information detected inline; for unmanaged AI apps only text prompts are captured.
Network (SASE or SSE) integration: sensitive information sent to AI apps from browsers, applications and APIs; what is detected depends on the network partner.
Microsoft 365 Copilot: prompts and responses, once auditing is on and Copilot licenses are assigned.

Audit records for interactions with non-Microsoft AI apps are billed pay-as-you-go and kept for 180 days; the enterprise subscription does not include them. None of these controls see personal devices, personal accounts or networks outside corporate control, so a discovery report is a floor, not a full count. The full table of signals, responses and limits is in the shadow AI governance guide.

Sources: Microsoft Learn, Defender for Cloud Apps: govern discovered apps with Defender for Endpoint (updated 2026-07-03); DSPM for AI considerations (updated 2026-05-01); Audit logs for Copilot and AI applications (ms.date 2026-08-26).

Shadow AI / BYOAI FAQ

What is shadow AI (BYOAI)?

Shadow AI (Bring Your Own AI) is employees using unauthorized AI tools alongside or instead of enterprise-sanctioned Microsoft Copilot. Common shadow AI: ChatGPT ($20-$30/user/month), Claude Pro, Google Gemini Advanced, Perplexity Pro, Grammarly Pro, Jasper, Copy.ai. Employees pay personally or expense as productivity tools; corporate data flows into these external systems without governance. Industry surveys (Salesforce, Gartner) put shadow AI usage at 55-75% of knowledge workers in enterprises without formal AI governance.

Why is shadow AI a compliance problem?

Six specific risks: (1) HIPAA exposure — PHI pasted into a consumer AI tool is an impermissible disclosure, presumed to be a breach unless a risk assessment shows a low probability that the PHI was compromised. (2) MNPI leakage — non-public financial data in AI tools triggers SEC enforcement. (3) IP loss — proprietary code, contracts, product designs uploaded to external systems. (4) GDPR non-compliance — customer PII processed by AI services outside data residency + retention controls. (5) Contract violations — many enterprise customer + supplier contracts prohibit sharing data with third-party AI. (6) Audit trail loss — regulatory frameworks require audit logs of data processing; consumer AI tools do not provide enterprise-grade audit trails.

How do I discover shadow AI usage?

Five discovery methods: (1) Microsoft Purview DLP + Cloud App Discovery — scans network traffic + endpoint activity to identify AI service traffic (openai.com, anthropic.com, gemini.google.com, etc.). (2) Corporate credit card + expense report review — search for AI tool subscriptions. (3) User survey — anonymous pulse survey asking employees which AI tools they use for work. (4) Endpoint monitoring (Defender for Endpoint) — flags installations of AI browser extensions + desktop apps. (5) Web filtering logs (Zscaler, Netskope, Defender for Cloud Apps) — categorizes AI tool traffic by user + volume.

What is the 5-step shadow AI remediation?

EPC Group methodology: (1) Discover — run all 5 discovery methods; quantify usage by tool + user population + data types. (2) Policy — draft BYOAI policy with approved-tool list, prohibited-tool list, escalation contact, disciplinary consequences. (3) Sanction — deploy Microsoft Copilot as the primary approved tool; add specific narrowly-scoped approved third-party tools if needed. (4) Block — deploy DLP + network filters to block unauthorized AI tools from processing regulated data classifications. (5) Educate — mandatory training on approved tools + why alternatives are prohibited + how to request tool additions. Timeline: 6-12 weeks depending on organizational size.

What tools do most enterprises approve alongside Copilot?

Common approved-list additions to Microsoft Copilot: (1) GitHub Copilot for developers (Microsoft-owned + enterprise-grade). (2) Azure OpenAI Service for custom apps (data stays in Azure). (3) ChatGPT Enterprise for specific power-user cohorts (contract enforced data protection). (4) Anthropic Claude Enterprise via Amazon Bedrock for specific use cases (contract-enforced). (5) Grammarly Business (with DLP restrictions). Prohibited (usually): (1) Personal ChatGPT / Claude / Gemini subscriptions. (2) Consumer AI browser extensions. (3) Unvetted AI writing tools (Jasper, Copy.ai, Writesonic). (4) AI voice/video generation tools without contract review.

How does Purview enforce BYOAI policy?

Purview's BYOAI enforcement layers: (1) Sensitivity labels — classify content so DLP, encryption and the rules below can act on it; a label on its own does not stop copying. (2) DLP policies — block sensitive data patterns (SSN, credit card, PHI, MNPI markers) from being sent to unapproved AI services. (3) Endpoint DLP — prevent copy/paste of labeled content to browser tabs on unauthorized domains. (4) Cloud App Discovery + Governance — monitor + block unsanctioned AI SaaS. (5) Insider Risk Management — flag suspicious patterns (large-volume paste to AI URLs, systematic data exfiltration). Combined, on onboarded devices and managed browsers these controls can stop sensitive data reaching an unapproved AI service. They do not see personal devices, personal accounts or networks outside corporate control.

How does EPC Group price BYOAI remediation?

EPC Group BYOAI fixed-fee accelerators: (1) BYOAI Discovery Assessment (fixed fee, 3 weeks) — runs all 5 discovery methods + quantified risk report + approved-tool list draft. (2) BYOAI Remediation (fixed fee, 8 weeks) — Purview DLP + policy deployment + endpoint controls + Copilot rollout coordination. (3) BYOAI Ongoing Governance (monthly retainer, quoted after discovery) — quarterly discovery scans + policy updates + new tool evaluation + user education. Combined with Copilot Readiness Assessment for organizations planning Copilot alongside BYOAI remediation.

Related EPC Group Services

BYOAI Discovery Assessment

3-week fixed fee: discovery + risk report + approved-tool list. Call (888) 381-9725.

Business Hours

Monday-Friday, 8 AM - 7 PM CT

Quick Response Guarantee

We respond to all inquiries within one business day