Services / Packages
Shadow AI Discovery Assessment
Finds the AI tools in use without approval, using purchasing records, sign-in data, and a staff survey.
From $4,5002–3 weeks
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
Leadership suspects staff are using AI tools no one approved.
You need an AI inventory but don’t know where to start.
Small purchases and free tools have bypassed your review process.
Overview
Most organizations use far more AI than leadership knows about: free tools staff signed up for, AI features vendors turned on, and small purchases that never went through review. We find them using your purchasing records, identity and network data, software inventories, and a short staff survey, then rate each by risk and recommend which to approve, restrict, or retire.
What’s included
- Review of purchasing and expense records
- Analysis of sign-ins, software inventories, and network data
- Short staff survey on AI use
- Inventory of AI tools and features found
- Risk rating for each tool
- Recommendations to approve, restrict, or retire
How it works
Collect
We gather purchasing, sign-in, and software data and survey staff.
Analyze
We identify AI tools and features and rate their risk.
Recommend
You receive the inventory and a prioritized action plan.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use discovery to find where confidential and customer data is going into AI tools.
- Free and personal AI tools at work
- AI features in existing software
- Expense-paid AI subscriptions
- A starting point for an AI register
Public Sector
Agencies use discovery to find AI bought through small purchases and pilots outside formal review.
- Micro-purchases and card spending
- Department pilots
- Vendor AI features
- Inputs for state AI inventories
Nonprofits
Nonprofits use discovery to find the AI tools staff and volunteers adopted on their own, and to decide which ones to keep.
- Free tools with client data
- Donated software with AI features
- Volunteer tools
- A simple approved tools list
Frequently asked questions
How much does Shadow AI Discovery Assessment cost?
Shadow AI Discovery Assessment starts at $4,500. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
Most engagements take 2–3 weeks, depending on scope and how quickly information is available.
What do we receive?
The engagement includes: review of purchasing and expense records; analysis of sign-ins, software inventories, and network data; short staff survey on AI use; inventory of AI tools and features found.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Use Policy Guide for Behavioral Health CentersWhat a behavioral health center’s AI use policy must cover, from HIPAA and 42 CFR Part 2 to state laws restricting AI in therapy.
- AI Governance Blueprint for Credit UnionsWho owns AI decisions at a credit union, how new AI uses get approved, how the board oversees AI, and how to size the structure to your asset size.
- AI Board Oversight Guide for Credit UnionsThe questions credit union directors should ask about AI, what to review and approve, and the warning signs to watch for.
- AI Laws by StateWhere each state’s AI and privacy rules stand, with key dates and a page for every state.
Related services
AI Acceptable Use Policy
A clear, written policy that tells your people which AI tools they can use, for what work, and with what data.
AI Governance Readiness Assessment
A gap analysis of your AI governance against the NIST AI RMF, with a prioritized plan for what to fix first.
State Agency AI Inventory and Impact Assessments
AI inventories and impact assessments in the format your state requires, such as Maryland’s, for agencies.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.