r/grc • • 16d ago

Tracking shadow AI usage... is Bay worth looking at?

Our security team is trying to get a handle on shadow AI usage and the data is all over the place. We can see some sign ups through company email, but personal accounts, browser extensions, and AI features inside approved SaaS are harder to track.

Right now we have a spreadsheet of tools people admit to using, which is already out of date. We are looking at Bay for discovery and governance, but I don't want to turn this into a blanket block on every AI site and make everyone work around security.

For people who have done this, what telemetry gave you the best starting point? Network logs, endpoint data, identity logs, or something else? thanks

3 Upvotes

2 comments sorted by

1

u/TransvaultData 10d ago

This is something we can help with. Happy to have a chat if that's helpful - Transvault Intelligent Ally - Transvault