Our employees are secretly experimenting with various free AI extensions and Chrome plugins to do their work faster. How do we establish a clear policy that stops this shadow IT risk without killing their initiative?

Question

Tyler Smith · Accepted Answer

Trying to block your team from using AI entirely is a losing battle that will only drive the behavior underground. Instead of creating a bureaucratic policy that kills initiative, you need to establish a sandbox protocol that channels their creativity safely. Start by creating a clear, two-part rule for the team. First, define what data can never be entered into an external AI tool, such as client-identifying information, proprietary code, or financial records. Second, establish a simple vetting process for new tools. Designate an AI point person on your Accountability Chart, typically your operations leader, to review and approve plugins before they are used on company systems. Frame this not as an IT restriction, but as a safety check to protect your clients and your data. Encourage your team to bring their discoveries to your weekly Level 10 Meeting so you can test them openly. If a tool proves valuable and secure, standardise it for the whole department. This approach shifts the culture from shadow IT to collaborative innovation, keeping your data secure while leverage the productivity gains your team is eager to find.