In-Depth Guide
The Situation
A customer asks which AI systems touch their data and the team answers from memory.
Where Teams Get Stuck
Each team knows its own tools and nobody owns the whole picture. A ban only pushes use out of sight.
How RAMP Handles It
RAMP gives employees a no-blame report form and imports lists from your identity provider, CMDB or a spreadsheet, so candidates from all three sources land in one queue.
What to collect
For each candidate: the tool or model, who uses it, what data goes in and what it is used for. Ask for facts, not confessions.
Where it comes from
Employee reports catch tools nobody bought. Identity-provider data shows which applications people sign in to with work accounts. Procurement, expense and renewal records show what the company already pays for.
The Bottom Line
No single source is complete; together they usually surface most of what is in use.
Frequently asked questions
- Where do I start finding shadow AI?
- Start with a short no-blame employee form and your identity-provider application list, then add purchasing and spreadsheet records.
Leadership Action Item
Run all three collection paths in the same week and put the results in one place. Next: triage them into the AI register.
Related GuidesView all guides →