Shadow IT is the use of software, cloud services, devices or AI tools for work without approval from the IT or security team.