Shadow AI outpaces corporate governance: 'The easy path wins'
The use of unlicensed AI tools in Swedish companies is growing rapidly. At Advania, it is estimated that up to 50 percent of AI usage occurs outside the control of IT departments.
What happened?
The unregulated use of generative AI, known as shadow AI, is growing faster than the central governance and guidelines of Swedish companies. According to Errol Norlum, Head of Data and Analytics at IT company Advania, an estimated 30 to 50 percent of all AI usage at Advania's client companies takes place outside the oversight of IT departments. This involves employees using private subscriptions, external tools, or locally built applications in their daily work.
Key facts
| Andel shadow AI | 30–50 % hos Advanias kunder |
|---|---|
| Publiceringsdatum | 23 september 2026 |
| Källa och expert | Errol Norlum, Advania |
”Den lätta vägen vinner”
Why it matters
When employees use unlicensed AI services, significant risks arise regarding data leaks, confidentiality breaches, and failures to comply with legal requirements. If approved tools are perceived as too cumbersome or limited, staff will choose the easiest route, leading to IT security being bypassed in favour of faster workflows.
Who is affected?
The situation affects IT managers, security officers, and executive leadership, who bear responsibility for data security and compliance. Simultaneously, it impacts employees and developers who seek efficient AI solutions but risk violating internal security policies and regulations.
Impact on the EU
The unregulated use of AI services creates new requirements under the EU AI Act, which imposes strict demands on risk management, traceability, and data protection. Organisations in the EU risk penalties if employees input sensitive data into unlicensed AI systems.
What else you should know
The source is based on an interview published on 23 September 2026 in Techtidningen with Advania's Head of Data and Analytics, Errol Norlum. Norlum emphasises that organisations must provide approved, user-friendly alternatives to prevent staff from seeking out insecure AI tools on their own.
Quick answers about this story
Vad har hänt?
När hände det?
Varför spelar det roll?
Vilka bolag berörs?
The link opens in a new window and leads to the publisher's own site.
Källan har spårats automatiskt från utgivaren via Aheadlines signalkedja.
AI-verktyg i artikeln
Topics
Get similar news straight to your inbox
The reader's room
Send in a question or an addition. The newsroom reads everything before it's published and replies when relevant. No AI-generated text – just people.
Sign in to submit a comment or question.
Read the article through your role
- Decide whether this affects strategy over 6–12 months or is just noise.
- Discuss with leadership: do we own the right question or does ownership need to move?
- Ask: what risk are we taking by NOT acting on this this quarter?
Generated angle — not editorial analysis of "Shadow AI outpaces corporate governance: 'The easy path wins"