DETECT
Free Shadow AI checklist · 15 checks · print it
find the AI your team already uses
Consumer ChatGPT on company email. A notetaker nobody invited. Copilot about to surface every file anyone can reach. This free 15-point checklist shows you where AI use is really happening in your business, what data may be leaving with it, and the three fixes that matter first.
- 15 checks across accounts, devices, the software you already pay for, and your logs
- The paste-stop list: what must never leave your tenant
- Three quick wins you can finish this week
Get the checklist
Enter your first name and work email. The PDF lands in your inbox in about a minute.
Free from Netbringer, security-first since 2003. No spam; unsubscribe anytime.
What’s inside
fifteen checks, four places to look
Accounts & sign-ins
Sign-in logs, app consents, subscription receipts, consumer versus business tiers, and the one shared login the whole office uses.
Devices & meetings
Browser extensions that read every page, AI notetakers on client calls, and the AI apps on company devices and personal phones.
Software you already pay for
The AI features vendors switched on inside Microsoft 365, Google Workspace, Zoom, your CRM, and your accounting package, plus the sharing links Copilot surfaces first.
Network, logs & policy
Thirty days of DNS and firewall logs, the filter category nobody opened, your written AI rule, the insurance questions, and one no-blame conversation.
the tool is not the risk. the paste is.
Per the Verizon 2026 Data Breach Investigations Report, 45 percent of employees now use AI tools on work devices, and most of that use is unapproved. Blocking the tools at the office usually moves the habit to personal phones, where you can see nothing. So the first job is not a policy memo. It is finding out what is actually happening, in your own logs.
That is what this checklist does. And if you would rather have the looking done for you, our AI Readiness Assessment builds the shadow-AI inventory from your logs, scores the exposure, and hands you a 90-day roadmap in plain English. Frank Alampi has run Netbringer since 2003; this is the same list we work through on our own business.
your team already made the AI decision
The only question is whether it is governed. Fifteen checks, one afternoon, and you will know where you stand.