Name the toolbox
Write the sanctioned assistants (Copilot, enterprise ChatGPT, whatever you actually bought). Write the unsanctioned ones you already know exist. If the list only says “no ChatGPT,” you have not described Copilot, Slack AI, or JAX, which are also AI.
See exceptions on the same row
Shadow use will happen. If it is only a disciplinary artefact, it will be hidden. If it is a labelled row on the trail, partners can coach and auditors can count.
Policy needs a product
Taigris puts policy on the proof row, including shadow AI, inside a customer-owned environment. The policy document remains yours.
Related
