We checked our outbound traffic last month to see which AI tools were in use. I expected chatgpt and maybe grammarly. We found 19 different AI services with either a company login or company data going through them and that is only the ones we could see. One was a resume builder someone in HR had fed a spreadsheet of the whole team into. That is shadow ai which it is already everywhere so blocking it outright is not on the table. Last time we blocked a category guys just moved to their phones and we lost the visibility entirely, which is worse than the problem. And leadership wants everyone using AI anyway, there is a whole memo about it. Which leaves the options, either leave it open and hope no one pastes a customer list into some random chatbot, or lock it down and watch everyone route around me while I play the department of no. What I want is a way to let people use the sanctioned tools and still catch it when someone is about to upload something they should not. Allow the good stuff, stop the leak, without the hard block that just drives it all underground. How are you handling this, the allow-but-watch side of it specifically. Block everything does not survive contact with the business, I already know that one. submitted by /u/Dalius-Gabryelle
Originally posted by u/Dalius-Gabryelle on r/ArtificialInteligence