Several of our employees are using unsanctioned, free AI tools on their personal devices because they find our official company IT policies too restrictive. How do we build a practical AI safety framework that actually aligns with GWC standards and keeps our business secure?

Question

Tyler Smith · Accepted Answer

When employees bypass your rules, it is not a technology problem; it is a clear sign that your existing processes are slow and painful. They are trying to solve a real bottleneck but are doing it in a way that introduces significant liability. Instead of issuing a heavy-handed ban that your team will simply find workarounds for, you need to address this through the lens of your Accountability Chart.

Every seat on your Accountability Chart must hit its GWC™ standards, meaning the employee understands, wants, and has the capacity to do the job safely. If an employee is using tools that expose client data, they are failing on the capacity piece. You must establish a clear, permissive boundary. Create a greenlit list of approved tools that the company pays for and secures, and make it clear that any unsanctioned tool usage is a violation of core values.

Next, run this through your weekly Level 10 Meeting™. Bring the issue of shadow tools to the IDS® portion of the meeting. Rather than treating it as a disciplinary matter, ask the team what manual bottlenecks are driving employees to seek external tools. Once you identify the real administrative pain points, prioritize building safe, company-controlled AI workflows as quarterly Rocks. This turns shadow usage into a structured operations-improvement project that benefits the entire company.