Shadow AI has long been a governance concern. In 2026, it also carries more explicit compliance implications as new AI transparency rules take effect and regulators put AI-related risks on the supervisory agenda. In some contexts, that makes visibility into which tools are being used, where, and by whom a compliance requirement rather than just a governance best practice.