A third of SMBs using AI found tools running that nobody approved
Pax8, which sells AI and cloud software to SMBs through IT service providers, surveyed 1,150 technology decision-makers at companies with 5 to 499 employees in the US, UK, Germany and Sweden. It found that 35% of AI-using businesses discovered tools, workflows or agents running without official approval in the past six months, rising to 42% in the US. Pax8 also found that 67% of AI users have built at least one solution themselves, while only 36% of US builders put that work through a formal documented review. These are Pax8's own figures and have not been independently verified, and the report's conclusion that IT partners should help govern SMB AI happens to describe what Pax8 sells.
The pattern still matches what we see. Shadow AI usually starts with a capable employee solving a real problem, and the risk is that nobody else knows the workflow exists when it breaks, or when a client asks what happened to their data. The practical move is an inventory before a policy. Ask each team what they have built, write down what data it touches, then decide which ones need a review step.
Source: The Next Web ↗


