The UK’s National Cyber Security Centre (NCSC) has issued a fresh warning about the growing use of unapproved artificial intelligence tools in British workplaces, highlighting a new cybersecurity challenge known as “shadow AI.”

Shadow AI refers to employees using AI services without their organisation’s approval or security oversight. The NCSC says this can create data exposure, reduced visibility and new cybersecurity vulnerabilities for businesses.

Research cited by the NCSC indicates that 71% of employees have used AI tools that were not approved by their employers, underlining how quickly workplace AI adoption is moving ahead of corporate governance.

The agency is not calling for companies to simply ban AI. Instead, it recommends that organisations understand why employees are turning to unapproved services and provide secure, approved AI alternatives that meet genuine workplace needs.

The warning comes as AI becomes increasingly embedded in everyday business software. For UK companies, the message is clear: AI adoption needs to advance alongside cybersecurity, data protection and effective employee guidance.