Shadow IT has given way to shadow AI. Enter AI-BOMs
Shadow AI is now running inside your enterprise. Here's how to audit it.
Why it matters
As AI proliferates across business operations without formal governance, enterprises are adopting AI Bills of Materials (AI-BOMs) to map, track, and manage undocumented AI systems—a critical control layer for compliance, risk, and security leaders.
The key facts
6 to knowShadow IT evolution: uncontrolled AI deployment parallels historical shadow IT risk patterns
AI-BOMs emerging as governance standard: similar to software BOMs (SBOMs) for supply chain transparency
Enterprise risk management trend: compliance and security teams now require AI inventory visibility
Regulatory pressure implied: governance frameworks forming around undocumented AI systems
No specific company or funding data provided
May 2026 publication suggests emerging best practice in AI governance
Go to the source
The Register AI/MLgo.theregister.com