{"id":32349,"date":"2026-09-10T19:48:53","date_gmt":"2026-09-10T19:48:53","guid":{"rendered":"https:\/\/thecloud.group\/?p=32349"},"modified":"2026-09-10T19:50:18","modified_gmt":"2026-09-10T19:50:18","slug":"shadow-ai-business-risk","status":"publish","type":"post","link":"https:\/\/thecloud.group\/en\/shadow-ai-riesgo-empresarial\/","title":{"rendered":"Shadow AI: the risk that comes through the corporate card"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"32349\" class=\"elementor elementor-32349\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cfd484e elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"cfd484e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;tilt&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"false\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewbox=\"0 0 1000 100\" preserveaspectratio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M0,6V0h1000v100L0,6z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-64f4c56\" data-id=\"64f4c56\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-72fca4b elementor-hidden-mobile elementor-widget elementor-widget-image\" data-id=\"72fca4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/elementor\/thumbs\/logo-pd8scx7e21qrxkwrdlcuh7c8eeq4vmzqsjri81k6ps.png\" title=\"logo\" alt=\"logo\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-a76af51 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a76af51\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-cf15d65\" data-id=\"cf15d65\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e993978 elementor-widget elementor-widget-heading\" data-id=\"e993978\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Your data doesn&#039;t become good just because you connect AI to it.\n<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c047b73 elementor-widget elementor-widget-heading\" data-id=\"c047b73\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">September 10, 2026<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t<div class=\"elementor-element elementor-element-43acffb e-flex e-con-boxed e-con e-parent\" data-id=\"43acffb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a5b2d83 elementor-widget elementor-widget-text-editor\" data-id=\"a5b2d83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The biggest data breaches at many companies didn&#039;t come from an attack: they came from a \u20ac20 monthly subscription paid for with a corporate credit card. It&#039;s called *shadow AI*: artificial intelligence tools contracted and used by departments with no knowledge of the technology, security, or data protection officer.<\/span><\/p><p><span style=\"font-weight: 400;\">It&#039;s not a discipline problem. It&#039;s the predictable consequence of these tools being cheap, immediately useful, and requiring no installation.<\/span><\/p><p><span style=\"font-weight: 400;\">When a report came from a spreadsheet, someone looked at it with suspicion. When it comes from an AI system, it&#039;s discussed in a meeting.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae9189b elementor-widget elementor-widget-heading\" data-id=\"ae9189b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The cost has already been calculated.\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d8c834c elementor-widget elementor-widget-text-editor\" data-id=\"d8c834c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">IBM&#039;s 2025 Cost of a Data Breach report, in its twentieth edition and prepared with Ponemon on some 600 organizations, offers figures that put an end to any internal debate:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>20% of the analyzed gaps involved unauthorized AI<\/b><span style=\"font-weight: 400;\"> within the organization.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Those incidents added on average <\/span><b>$670,000<\/b><span style=\"font-weight: 400;\"> at cost, on an average gap cost of 4.44 million.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>The 97%<\/b><span style=\"font-weight: 400;\"> Many of the organizations that suffered an AI-related incident lacked adequate access controls.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>The 63%<\/b><span style=\"font-weight: 400;\"> It had no AI governance policy.<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">That last piece of information explains the other three. When there is no authorized and reasonable way to do it, people solve their problems with whatever they can find.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5436737 elementor-widget elementor-widget-heading\" data-id=\"5436737\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why banning it doesn&#039;t work\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-83b90fc elementor-widget elementor-widget-text-editor\" data-id=\"83b90fc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The instinctive reaction of many committees is to issue a circular prohibiting the use of external AI tools. This produces three effects, none of which are the desired ones:<\/span><\/p><p><b>The use doesn&#039;t disappear: it just hides.<\/b><span style=\"font-weight: 400;\"> Switch from the corporate laptop to the personal phone, where there is no visibility.<\/span><\/p><p><b>Useful information is lost.<\/b><span style=\"font-weight: 400;\"> Knowing what tools people use indicates what real unresolved problems the organization has.<\/span><\/p><p><b>Those who try to do a better job are penalized.<\/b><span style=\"font-weight: 400;\"> The cultural cost is high and long-lasting.<\/span><\/p><p><span style=\"font-weight: 400;\">The alternative that works is inconvenient because it requires effort: <\/span><b>offer an authorized route that is at least as convenient<\/b><span style=\"font-weight: 400;\">. If the approved option is slower than the corporate card option, the policy loses.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-248d3ff elementor-widget elementor-widget-heading\" data-id=\"248d3ff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The four specific risks\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e78ab64 elementor-widget elementor-widget-text-editor\" data-id=\"e78ab64\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table><tbody><tr><td><p><b>Risk<\/b><\/p><\/td><td><p><b>How it materializes<\/b><\/p><\/td><td><p><b>Effective control<\/b><\/p><\/td><\/tr><tr><td><p><b>Information leak<\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\">A contract, payroll, or proprietary code is pasted into a public tool.<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Authorized channel with data processing agreement<\/span><\/p><\/td><\/tr><tr><td><p><b>Non-traceable decision<\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\">Someone decides with an answer that no one can reconstruct<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Registration and obligation to cite source<\/span><\/p><\/td><\/tr><tr><td><p><b>Regulatory non-compliance<\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\">Personal data processed outside the declared framework<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Inventory and classification by use case<\/span><\/p><\/td><\/tr><tr><td><p><b>Invisible dependency<\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\">A process then becomes dependent on a tool that no one approved<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Inventory and periodic review<\/span><\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9f96e4f elementor-widget elementor-widget-text-editor\" data-id=\"9f96e4f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The fourth one is the least discussed and the one that gives the most surprises. A department sets up a workflow around a tool, the tool changes price or disappears, and suddenly an operational process stops without anyone in technology knowing that dependency existed.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8d84080 elementor-widget elementor-widget-heading\" data-id=\"8d84080\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How do you detect what&#039;s there?\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c2cc72e elementor-widget elementor-widget-text-editor\" data-id=\"c2cc72e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">A complex deployment is not necessary. Four routes cover most of it:<\/span><\/p><ol><li><b> <\/b><b>The expenses.<\/b><span style=\"font-weight: 400;\"> Subscriptions appear on corporate credit cards and expense reports. It&#039;s the quickest source and the most overlooked.<\/span><\/li><li><b> <\/b><b>Network traffic and logins.<\/b><span style=\"font-weight: 400;\"> Which domains are visited and with which corporate accounts access to third-party services has been created.<\/span><\/li><li><b> <\/b><b>Ask without penalizing.<\/b><span style=\"font-weight: 400;\"> An internal survey with explicit amnesty yields surprisingly good results when people believe there will be no consequences.<\/span><\/li><li><b> <\/b><b>Authorized integrations.<\/b><span style=\"font-weight: 400;\"> Which third-party applications have granted access to email, storage, or CRM? This often includes access granted months ago by someone who is no longer there.<\/span><\/li><\/ol><p><span style=\"font-weight: 400;\">The result of these four approaches is an inventory, which is the starting point for any governance policy. Without an inventory, policy is merely a document about an unknown reality, as we explained when discussing <\/span><a href=\"https:\/\/thecloud.group\/en\/eu-ai-act-2026-corporate-obligations\/\"><span style=\"font-weight: 400;\">The obligations of the AI Act and where to begin<\/span><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-665a6ca elementor-widget elementor-widget-heading\" data-id=\"665a6ca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The program that does address the problem\n\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-539ec89 elementor-widget elementor-widget-text-editor\" data-id=\"539ec89\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>An authorized, good and fast route.<\/b><span style=\"font-weight: 400;\"> One or two approved tools, with a data processing agreement, easy access and no bureaucratic friction to start using them.<\/span><\/p><p><b>An understandable data rule.<\/b><span style=\"font-weight: 400;\"> Not a twenty-page document. Three lines: what information never leaves internal systems, what requires approval, and what is unrestricted. If it doesn&#039;t fit on a card, it won&#039;t be followed.<\/span><\/p><p><b>Brief and specific training.<\/b><span style=\"font-weight: 400;\"> Ten minutes about what really happens when you paste information into an external tool. Most people don&#039;t do it by accident, but because they don&#039;t understand how it works.<\/span><\/p><p><b>A channel for requesting tools.<\/b><span style=\"font-weight: 400;\"> With responses in days, not quarters. The speed of this channel determines the organization&#039;s level of shadow AI better than any standard.<\/span><\/p><p><b>Quarterly inventory review.<\/b><span style=\"font-weight: 400;\"> Short. What was added, what was discontinued, what access needs to be revoked.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-47d29ff elementor-widget elementor-widget-heading\" data-id=\"47d29ff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The argument for the committee\n\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb2163a elementor-widget elementor-widget-text-editor\" data-id=\"eb2163a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">This issue is poorly defended when presented as a security problem, because it competes with other priorities. It is well defended when presented with two numbers.<\/span><\/p><p><span style=\"font-weight: 400;\">The first one is IBM&#039;s: <\/span><b>$670,000 average cost overrun<\/b><span style=\"font-weight: 400;\"> when unauthorized AI is involved in a breach. The second is our own: how many AI subscriptions appear in last quarter&#039;s expenses that no one in technology knew about.<\/span><\/p><p><span style=\"font-weight: 400;\">That second number, obtained in an afternoon, usually ends the discussion.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e26b29f elementor-widget elementor-widget-heading\" data-id=\"e26b29f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Frequently Asked Questions\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0bafad2 e-flex e-con-boxed e-con e-parent\" data-id=\"0bafad2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-255e77a elementor-widget elementor-widget-n-accordion\" data-id=\"255e77a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3910\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-3910\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> What is Shadow AI? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3910\" class=\"elementor-element elementor-element-5b9195b e-con-full e-flex e-con e-child\" data-id=\"5b9195b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-128178a elementor-widget elementor-widget-text-editor\" data-id=\"128178a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">This refers to the use of artificial intelligence tools contracted or used by departments without the knowledge or approval of technology, security, or the data protection officer. It typically occurs through low-value subscriptions paid for with a corporate credit card.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3911\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3911\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> How much does shadow AI cost a company? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3911\" class=\"elementor-element elementor-element-0fc0d7e e-con-full e-flex e-con e-child\" data-id=\"0fc0d7e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fff5b06 elementor-widget elementor-widget-text-editor\" data-id=\"fff5b06\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">According to IBM&#039;s 2025 Cost of a Data Breach report, 20% of the breaches analyzed involved unauthorized AI, and those incidents added an average of $670,000 to the cost, on top of an average breach cost of $4.44 million.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3912\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3912\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Why doesn&#039;t banning AI tools work? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3912\" class=\"elementor-element elementor-element-1872c91 e-con-full e-flex e-con e-child\" data-id=\"1872c91\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64a1d1a elementor-widget elementor-widget-text-editor\" data-id=\"64a1d1a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Because usage doesn&#039;t disappear, it simply moves to personal devices where there&#039;s no visibility; valuable information about unresolved organizational problems is lost; and those trying to improve are penalized. The effective alternative is to offer an equally convenient, authorized channel.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3913\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3913\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> How is shadow AI detected in an organization? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3913\" class=\"elementor-element elementor-element-69dc4e1 e-con-full e-flex e-con e-child\" data-id=\"69dc4e1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-770ee8f elementor-widget elementor-widget-text-editor\" data-id=\"770ee8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Through four avenues: review of corporate card subscriptions and expense reports, analysis of network traffic and logins with corporate accounts, an internal survey with explicit amnesty, and review of third-party integrations with access to email, storage, or CRM.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3914\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3914\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> What minimum AI usage policy does a company need? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3914\" class=\"elementor-element elementor-element-b0eb544 e-con-full e-flex e-con e-child\" data-id=\"b0eb544\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa43162 elementor-widget elementor-widget-text-editor\" data-id=\"aa43162\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">A three-line data rule\u2014what information never leaves the systems themselves, what requires approval, and what is free\u2014, one or two authorized tools with a data processing contract, a channel to request new tools with a response in days, and a quarterly inventory review.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3915\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"6\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3915\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><div class=\"e-n-accordion-item-title-text\"> Does shadow AI affect compliance with the European AI Regulation? <\/div><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><i aria-hidden=\"true\" class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t<span class='e-closed'><i aria-hidden=\"true\" class=\"fas fa-plus\"><\/i><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3915\" class=\"elementor-element elementor-element-394892d e-con-full e-flex e-con e-child\" data-id=\"394892d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6b896dc elementor-widget elementor-widget-text-editor\" data-id=\"6b896dc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Yes. Any regulatory obligation stems from knowing what AI systems exist within the organization, what data they contain, and who is responsible for each one. Systems not inventoried are excluded from risk classification and, therefore, from any compliance measures.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-62494f1 elementor-widget elementor-widget-text-editor\" data-id=\"62494f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table><tbody><tr><td><p><b>Do you know what AI tools are used in your company today?<\/b><span style=\"font-weight: 400;\"> We took the actual inventory, classified the risk by use case, and designed the authorized route so that people don&#039;t have to avoid it. <\/span><a href=\"https:\/\/thecloud.group\/en\/technology-consulting\/\"><span style=\"font-weight: 400;\">Let&#039;s talk \u2192<\/span><\/a><\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2776e2f e-con-full e-flex e-con e-child\" data-id=\"2776e2f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-313fb2f elementor-widget elementor-widget-image\" data-id=\"313fb2f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32351\" alt=\"Shadow AI and unauthorized use of Artificial Intelligence tools in companies\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d096db elementor-widget elementor-widget-image\" data-id=\"5d096db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Conductor_orchestrating_floating\u2026_202608171556.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-32181\" alt=\"\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Conductor_orchestrating_floating\u2026_202608171556.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Conductor_orchestrating_floating\u2026_202608171556-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Conductor_orchestrating_floating\u2026_202608171556-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Conductor_orchestrating_floating\u2026_202608171556-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/08\/Conductor_orchestrating_floating\u2026_202608171556-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f22134d elementor-widget elementor-widget-image\" data-id=\"f22134d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/07\/AI_agents_as_digital_masks_202607061120.jpeg\" class=\"elementor-animation-hang attachment-large size-large wp-image-31929\" alt=\"Management team analyzing risks of non-human identities and artificial intelligence agents in enterprise systems.\" srcset=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/07\/AI_agents_as_digital_masks_202607061120.jpeg 1024w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/07\/AI_agents_as_digital_masks_202607061120-300x300.jpeg 300w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/07\/AI_agents_as_digital_masks_202607061120-150x150.jpeg 150w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/07\/AI_agents_as_digital_masks_202607061120-768x768.jpeg 768w, https:\/\/thecloud.group\/wp-content\/uploads\/2026\/07\/AI_agents_as_digital_masks_202607061120-12x12.jpeg 12w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>In the vast digital landscape of the 21st century, security is the cornerstone of any business. Cybersecurity vulnerabilities make no distinction between corporate giants and promising startups.<\/p>","protected":false},"author":20,"featured_media":32351,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[859],"tags":[896,883],"class_list":["post-32349","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-ia","tag-producto-digital","tag-sistemas-empresariales"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Shadow AI: el riesgo que entra por la tarjeta corporativa The Cloud Group<\/title>\n<meta name=\"description\" content=\"C\u00f3mo digitalizamos el archivo del Parlamentode Guinea Ecuatorial: alcance, retost\u00e9cnicos, soluci\u00f3n y resultado. Caso real publicado.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thecloud.group\/en\/shadow-ai-business-risk\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Shadow AI: el riesgo que entra por la tarjeta corporativa\" \/>\n<meta property=\"og:description\" content=\"Descubre art\u00edculos sobre desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y transformaci\u00f3n digital para empresas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thecloud.group\/en\/shadow-ai-business-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"The Cloud Group\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/thecloudgroupglobal\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-10T19:48:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-10T19:50:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Paula Franco\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@thecloudgroup\" \/>\n<meta name=\"twitter:site\" content=\"@thecloudgroup\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Paula Franco\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/\"},\"author\":{\"name\":\"Paula Franco\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/person\\\/9292d905a1c98ea7345e5e71a5fe341f\"},\"headline\":\"Shadow AI: el riesgo que entra por la tarjeta corporativa\",\"datePublished\":\"2026-09-10T19:48:53+00:00\",\"dateModified\":\"2026-09-10T19:50:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/\"},\"wordCount\":1631,\"publisher\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Credit_card_casting_digital_shadow_20260910144918.jpeg\",\"keywords\":[\"producto digital\",\"sistemas empresariales\"],\"articleSection\":[\"Data &amp; IA\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/\",\"url\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/\",\"name\":\"Shadow AI: el riesgo que entra por la tarjeta corporativa The Cloud Group\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Credit_card_casting_digital_shadow_20260910144918.jpeg\",\"datePublished\":\"2026-09-10T19:48:53+00:00\",\"dateModified\":\"2026-09-10T19:50:18+00:00\",\"description\":\"C\u00f3mo digitalizamos el archivo del Parlamentode Guinea Ecuatorial: alcance, retost\u00e9cnicos, soluci\u00f3n y resultado. Caso real publicado.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/#primaryimage\",\"url\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Credit_card_casting_digital_shadow_20260910144918.jpeg\",\"contentUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Credit_card_casting_digital_shadow_20260910144918.jpeg\",\"width\":1024,\"height\":1024,\"caption\":\"Una suscripci\u00f3n aparentemente inofensiva puede introducir IA, datos y riesgos fuera del control de TI.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/shadow-ai-riesgo-empresarial\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thecloud.group\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Shadow AI: el riesgo que entra por la tarjeta corporativa\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#website\",\"url\":\"https:\\\/\\\/thecloud.group\\\/\",\"name\":\"The Cloud Group\",\"description\":\"Empresa especializada en desarrollo de software a medida, automatizaci\u00f3n empresarial e inteligencia artificial para empresas.\",\"publisher\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\"},\"alternateName\":\"TCG Software\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thecloud.group\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#organization\",\"name\":\"The Cloud Group\",\"alternateName\":\"TCG\",\"url\":\"https:\\\/\\\/thecloud.group\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logoSmallFirmaCorreo.png\",\"contentUrl\":\"https:\\\/\\\/thecloud.group\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logoSmallFirmaCorreo.png\",\"width\":300,\"height\":190,\"caption\":\"The Cloud Group\"},\"image\":{\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/thecloudgroupglobal\",\"https:\\\/\\\/x.com\\\/thecloudgroup\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/the-cloud-group\",\"https:\\\/\\\/www.instagram.com\\\/thecloudgroupglobal\",\"https:\\\/\\\/www.youtube.com\\\/@TheCloudGroup\"],\"description\":\"The Cloud Group es una empresa internacional especializada en desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y m\u00f3viles y transformaci\u00f3n digital. Ayudamos a empresas a optimizar procesos, reducir costos y acelerar su crecimiento mediante soluciones tecnol\u00f3gicas personalizadas.\",\"email\":\"paula.franco@thecloud.group\",\"telephone\":\"3042544988\",\"legalName\":\"THE CLOUD COLOMBIA SAS\",\"vatID\":\"902084280\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/thecloud.group\\\/#\\\/schema\\\/person\\\/9292d905a1c98ea7345e5e71a5fe341f\",\"name\":\"Paula Franco\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g\",\"caption\":\"Paula Franco\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Shadow AI: The risk that comes through the corporate credit card The Cloud Group","description":"How we digitized the archive of the Parliament of Equatorial Guinea: scope, technical challenges, solution and result. Real case published.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thecloud.group\/en\/shadow-ai-business-risk\/","og_locale":"en_US","og_type":"article","og_title":"Shadow AI: el riesgo que entra por la tarjeta corporativa","og_description":"Descubre art\u00edculos sobre desarrollo de software a medida, automatizaci\u00f3n empresarial, inteligencia artificial, ERP, CRM, aplicaciones web y transformaci\u00f3n digital para empresas.","og_url":"https:\/\/thecloud.group\/en\/shadow-ai-business-risk\/","og_site_name":"The Cloud Group","article_publisher":"https:\/\/www.facebook.com\/thecloudgroupglobal","article_published_time":"2026-09-10T19:48:53+00:00","article_modified_time":"2026-09-10T19:50:18+00:00","og_image":[{"width":1024,"height":1024,"url":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg","type":"image\/jpeg"}],"author":"Paula Franco","twitter_card":"summary_large_image","twitter_creator":"@thecloudgroup","twitter_site":"@thecloudgroup","twitter_misc":{"Written by":"Paula Franco","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/#article","isPartOf":{"@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/"},"author":{"name":"Paula Franco","@id":"https:\/\/thecloud.group\/#\/schema\/person\/9292d905a1c98ea7345e5e71a5fe341f"},"headline":"Shadow AI: el riesgo que entra por la tarjeta corporativa","datePublished":"2026-09-10T19:48:53+00:00","dateModified":"2026-09-10T19:50:18+00:00","mainEntityOfPage":{"@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/"},"wordCount":1631,"publisher":{"@id":"https:\/\/thecloud.group\/#organization"},"image":{"@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/#primaryimage"},"thumbnailUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg","keywords":["producto digital","sistemas empresariales"],"articleSection":["Data &amp; IA"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/","url":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/","name":"Shadow AI: The risk that comes through the corporate credit card The Cloud Group","isPartOf":{"@id":"https:\/\/thecloud.group\/#website"},"primaryImageOfPage":{"@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/#primaryimage"},"image":{"@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/#primaryimage"},"thumbnailUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg","datePublished":"2026-09-10T19:48:53+00:00","dateModified":"2026-09-10T19:50:18+00:00","description":"How we digitized the archive of the Parliament of Equatorial Guinea: scope, technical challenges, solution and result. Real case published.","breadcrumb":{"@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/#primaryimage","url":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg","contentUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2026\/09\/Credit_card_casting_digital_shadow_20260910144918.jpeg","width":1024,"height":1024,"caption":"Una suscripci\u00f3n aparentemente inofensiva puede introducir IA, datos y riesgos fuera del control de TI."},{"@type":"BreadcrumbList","@id":"https:\/\/thecloud.group\/shadow-ai-riesgo-empresarial\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thecloud.group\/"},{"@type":"ListItem","position":2,"name":"Shadow AI: el riesgo que entra por la tarjeta corporativa"}]},{"@type":"WebSite","@id":"https:\/\/thecloud.group\/#website","url":"https:\/\/thecloud.group\/","name":"The Cloud Group","description":"Company specializing in custom software development, business automation and artificial intelligence for businesses.","publisher":{"@id":"https:\/\/thecloud.group\/#organization"},"alternateName":"TCG Software","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thecloud.group\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/thecloud.group\/#organization","name":"The Cloud Group","alternateName":"TCG","url":"https:\/\/thecloud.group\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thecloud.group\/#\/schema\/logo\/image\/","url":"https:\/\/thecloud.group\/wp-content\/uploads\/2020\/05\/logoSmallFirmaCorreo.png","contentUrl":"https:\/\/thecloud.group\/wp-content\/uploads\/2020\/05\/logoSmallFirmaCorreo.png","width":300,"height":190,"caption":"The Cloud Group"},"image":{"@id":"https:\/\/thecloud.group\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/thecloudgroupglobal","https:\/\/x.com\/thecloudgroup","https:\/\/www.linkedin.com\/company\/the-cloud-group","https:\/\/www.instagram.com\/thecloudgroupglobal","https:\/\/www.youtube.com\/@TheCloudGroup"],"description":"The Cloud Group is an international company specializing in custom software development, business automation, artificial intelligence, ERP, CRM, web and mobile applications, and digital transformation. We help companies optimize processes, reduce costs, and accelerate their growth through customized technology solutions.","email":"paula.franco@thecloud.group","telephone":"3042544988","legalName":"THE CLOUD COLOMBIA SAS","vatID":"902084280"},{"@type":"Person","@id":"https:\/\/thecloud.group\/#\/schema\/person\/9292d905a1c98ea7345e5e71a5fe341f","name":"Paula Franco","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8622dc6801e07daa51e09fd706fb55b2bdf9cada1ade4ab996fb3b4549e9214c?s=96&d=mm&r=g","caption":"Paula Franco"}}]}},"_links":{"self":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts\/32349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/comments?post=32349"}],"version-history":[{"count":4,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts\/32349\/revisions"}],"predecessor-version":[{"id":32354,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/posts\/32349\/revisions\/32354"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/media\/32351"}],"wp:attachment":[{"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/media?parent=32349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/categories?post=32349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thecloud.group\/en\/wp-json\/wp\/v2\/tags?post=32349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}