Due Diligence Uncovers 14 Shadow AI Tools in SaaS Firm

Technical due diligence by a PE firm on a SaaS company uncovered 14 unauthorized AI tools despite only 2 being approved, with employees pasting customer PII into personal ChatGPT accounts. The firm held SOC 2 Type II certification, exposing how surface-level compliance can mask serious shadow AI risks.

2026-08-19 ~ 2026-08-20 · 2 related posts