Shadow IT
Shadow IT is technology used or operated for organizational work outside the organization's established IT approval or management processes.
Shadow IT often starts with work someone needs to finish: converting a file, collecting responses, or filling a gap in an approved application. Microsoft’s account of its own shadow IT describes limited engineering capacity and specialized business needs as contributing pressures.
The term describes a gap in oversight, not proof that the tool is malicious. A legitimate service can still receive information it was never approved to handle or accumulate access nobody is maintaining.
Find the use case before choosing the response
Ask who owns the tool, what work it performs, what information it receives, and which accounts or integrations it uses. Microsoft’s discovery guidance treats finding applications and assessing their risk as separate steps. Discovering a service does not automatically settle whether to approve, restrict, or replace it.
The file-converter article shows the data decision in uploading a document. The hosted-form article shows why recognizing a platform does not verify its collector. Even an approved platform can host an unauthorized collection.
Where a tool requests application permissions, review those grants too. The consent-phishing article explains that separate access decision. Give employees an approved way to complete the task; otherwise, removing one service may leave the original need unanswered.