# Shadow IT

Software, devices, or cloud services used by employees without the knowledge or approval of the IT department.

**Shadow IT[↗](/shadow-it)** refers to any software, hardware, or cloud service used within an organization without the knowledge, approval, or oversight of the IT or security department, an employee signing up for a free file-sharing tool to move a large document, for instance, without realizing it bypasses company security controls.

Shadow IT usually emerges from good intentions, employees just trying to get their work done faster, but it creates blind spots: sensitive data can end up stored on unapproved, unmonitored services with unknown security practices. Regular audits of network traffic and cloud usage, paired with providing sanctioned tools that are actually convenient to use, help bring shadow IT back into view.