Shadow AI & controls
AI usage record
Standards, techniques & other
Evidence of who sent what to which AI service, when, and through which route. It's the main thing sanctioned use buys: an unsanctioned transfer leaves no record anywhere the organisation can reach.