Module · What your staff already do with AI

The Shadow-AI Exposure Check

Every company has AI usage; the only question is whether it is visible. This module measures the gap between your policy and the reality on your staff's screens: visibility, rules people can follow, sanctioned alternatives, data exposure, and whether honesty is safe.

Question 1 of 5 · Usage is visible

Do you know which AI tools your employees actually use for work?

Not which tools are licensed: which are used. Browser chatbots, plugins, private accounts on company laptops. The gap between the two is where confidential data travels.

Question 2 of 5 · A usable rule exists

Is there a rule your staff can actually follow for what may go into public AI tools?

"Never use AI" is not a rule anyone follows. A usable rule names data categories: what is always fine, what needs approval, what never leaves. One page, not forty.

Question 3 of 5 · Sanctioned tool good enough

Do employees have a sanctioned AI tool that is actually good enough to use?

Shadow AI is a demand signal. If the sanctioned option is slower or worse than a private ChatGPT account, the ban loses to convenience every single day.

Question 4 of 5 · Data exposure is known

Do you know what categories of company data have already gone into public AI tools?

Assume the answer is not "nothing". Customer lists, source code, contract drafts and board papers are the usual suspects. The question is whether you know, or hope.

Question 5 of 5 · Honesty is safe

Can employees admit their AI use without fearing consequences?

Every measurement above depends on this one. If admitting usage is punished, your surveys measure fear, not reality, and the real exposure stays invisible.

For the statistics · one click each

Three questions for the public picture

These do not affect your score. They feed the anonymised, aggregated statistics; groups under 8 respondents are never shown.

What share of your staff uses AI tools for work at least weekly?

Under 10 percent

10 to 30 percent

30 to 60 percent

Over 60 percent

We do not know

Does your company block public AI tools?

Yes, blocked

Blocked, but bypassed

Not blocked

Considering it

Has confidential data already ended up in a public AI tool?

Not that we know of

We suspect so

Confirmed, minor

Confirmed, serious

We cannot tell

Your context

Used to calibrate the report. Company size and sector remain in the anonymized dataset; your email does not.

Company size Sector (optional)

Your corporate email required

We do not accept Gmail, Outlook, GMX, etc. Use your company domain.

Anonymised answers feed aggregated public statistics (groups under 8 respondents are never shown); your email is deleted after confirmation. Details: Datenschutz.

I agree that my anonymized answers (without my email or company name) may be used in Thorsten's published analysis. Tell me when new assessments or question modules go live. One email per launch, opt out any time with one click.