Guide · Shadow AI
How can I see which AI tools my employees use?
Last reviewed:
Short answer
The most reliable way is to measure it where AI is used: in the browser. A browser extension on company Chrome or Edge shows which AI sites people actually open, so you get a live inventory instead of a one-off survey. With VAHTOR, ChatGPT, Copilot, Claude, Gemini and the rest show up in one registry — without collecting what people type.
How to do it
- 1
Decide what counts as an AI tool
Start with chat assistants, coding assistants, writing tools and image generators. Include AI features inside software you already use.
- 2
Ask, but don’t rely on a survey alone
A short survey shows use cases and intent. It misses tools people forget or don’t mention, so treat it as a starting point.
- 3
Measure usage in the browser
Most workplace AI runs in a browser tab. An extension sees which AI sites are open on each connected device — continuously, not once a year.
- 4
Classify every tool
Mark each tool approved, restricted or blocked, so people know what is allowed.
- 5
Publish the rules and keep the inventory live
Share an AI policy, track who accepted it, and review new tools as they appear.
How VAHTOR does it
People install VAHTOR in Chrome or Edge and join with a personal device code. The extension sees which AI sites are in use, and they land in one company registry.
- ChatGPT, Copilot, Claude, Gemini and the rest in one registry
- Approve, restrict or block — devices pick it up on the next sync
- Only tools in use need a decision
- Continuous discovery as new AI tools appear
- Chat text is never uploaded
Frequently asked questions
Can I see AI tool usage without reading employees’ chats?
Yes. VAHTOR records the tool and the time and, when a rule fires, a detection type and a risk level. Prompt text is never collected.
Is a survey enough to find shadow AI?
It is a useful start, but it only captures what people remember and choose to report. Browser-based discovery shows what is actually used and keeps working as new tools appear.
Do I need a network proxy or a root certificate?
Not with VAHTOR. It is a browser extension that uses standard browser APIs — no root certificate and no SSL interception.
Which browsers does VAHTOR support?
Chrome and Edge.