[{"data":1,"prerenderedAt":1144},["ShallowReactive",2],{"site-nav-content":3,"hiring-banner-content":177,"blog:\u002Fblog\u002Fwhy-banning-chatgpt-trains-people-onto-their-phones":189,"blog-index-copy":657,"blog:\u002Fblog\u002Fwhy-banning-chatgpt-trains-people-onto-their-phones:surround":678,"site-cta-content":1125},{"header":4,"productNav":9,"nav":42,"footer":61,"askAI":132,"id":161,"title":162,"archived":163,"authors":164,"badge":164,"body":165,"date":164,"definedTerm":164,"department":164,"description":169,"extension":172,"eyebrow":164,"faqHeader":164,"faqs":164,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":173,"relatedHeading":164,"seo":174,"series":164,"sitemap":163,"status":164,"stem":175,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":176},{"productLabel":5,"loginLabel":6,"contactLabel":7,"contactSalesLabel":8},"Product","Log in","Contact","Get started for free",[10,14,18,22,26,30,34,38],{"label":11,"to":12,"description":13},"Overview","\u002Foverview","Seven layers. One closed loop.",{"label":15,"to":16,"description":17},"Conflux","\u002Fproduct\u002Fconflux","Where your team, workstreams, and agents meet.",{"label":19,"to":20,"description":21},"Agent Teams","\u002Fproduct\u002Fagent-teams","Specialist teams - governed from day one.",{"label":23,"to":24,"description":25},"Lifecycle Graph","\u002Fproduct\u002Flifecycle-graph","Intelligence that compounds across every interaction.",{"label":27,"to":28,"description":29},"Company Wiki","\u002Fproduct\u002Fwiki","Playbooks and policies where expertise stays.",{"label":31,"to":32,"description":33},"Workstreams","\u002Fproduct\u002Fworkstreams","From brief to signed-off deliverable on one canvas.",{"label":35,"to":36,"description":37},"Perception Console","\u002Fproduct\u002Fperception","Ask your whole business in plain English.",{"label":39,"to":40,"description":41},"Governance","\u002Fproduct\u002Fgovernance","Frontier AI you can actually sign off on.",[43,46,49,52,55,58],{"label":44,"to":45},"Models","\u002Fmodels",{"label":47,"to":48},"Pricing","\u002Fpricing",{"label":50,"to":51},"Integrations","\u002Fintegrations",{"label":53,"to":54},"Security","\u002Fsecurity",{"label":56,"to":57},"Partners","\u002Fpartners",{"label":59,"to":60},"Insights","\u002Fblog",{"productHeading":5,"companyHeading":62,"resourcesHeading":63,"legalHeading":64,"docsLabel":65,"docsUrl":66,"statementLines":67,"copyright":70,"companyLinks":71,"resourcesLinks":86,"legalLinks":102,"socialLinks":109,"bottomLinks":119},"Company","Resources","Legal","Docs","https:\u002F\u002Fdocs.gonimbus.ai",[68,69],"Stop training someone else's model.","Control your AI.","© 2026 Nimbus Intelligence, Inc. All rights reserved.",[72,73,74,75,76,78,81,84],{"label":47,"to":48},{"label":50,"to":51},{"label":53,"to":54},{"label":59,"to":60},{"label":77,"to":57},"Partner Program",{"label":79,"to":80},"Careers","\u002Fcareers",{"label":82,"to":83},"System status","\u002Fstatus",{"label":7,"to":85},"\u002Fcontact",[87,90,93,96,99],{"label":88,"to":89},"Glossary","\u002Fglossary",{"label":91,"to":92},"Compare","\u002Fcompare",{"label":94,"to":95},"Evaluate","\u002Fevaluate",{"label":97,"to":98},"Problems","\u002Fproblems",{"label":100,"to":101},"Use cases","\u002Fuse-cases",[103,106],{"label":104,"to":105},"Terms of Service","\u002Fterms",{"label":107,"to":108},"Privacy Policy","\u002Fprivacy",[110,113,116],{"label":111,"href":112},"LinkedIn","https:\u002F\u002Fwww.linkedin.com\u002Fcompany\u002Fgonimbusai\u002F",{"label":114,"href":115},"X","https:\u002F\u002Fx.com\u002Fgonimbusai",{"label":117,"href":118},"Instagram","https:\u002F\u002Fwww.instagram.com\u002Fgonimbus_ai\u002F",[120,122,124,127,128],{"label":121,"to":105},"Terms",{"label":123,"to":108},"Privacy",{"label":125,"to":126},"Compliance","\u002Fcompliance",{"label":82,"to":83},{"label":129,"to":130,"external":131},"LLMs.txt","\u002Fllms.txt",true,{"text":133,"prompt":134,"platforms":135},"Ask AI about Nimbus","I'm researching enterprise intelligence platforms and want to know how Nimbus combines perception, collaboration, and autonomous agents to drive strategic decision-making. Summarize the highlights from Nimbus's website: https:\u002F\u002Fgonimbus.ai",[136,141,146,151,156],{"name":137,"label":138,"icon":139,"hrefPrefix":140},"chatgpt","ChatGPT","simple-icons:openai","https:\u002F\u002Fchatgpt.com\u002F?prompt=",{"name":142,"label":143,"icon":144,"hrefPrefix":145},"perplexity","Perplexity","mdi:magnify","https:\u002F\u002Fwww.perplexity.ai\u002Fsearch\u002Fnew?q=",{"name":147,"label":148,"icon":149,"hrefPrefix":150},"grok","Grok","simple-icons:x","https:\u002F\u002Fx.com\u002Fi\u002Fgrok?text=",{"name":152,"label":153,"icon":154,"hrefPrefix":155},"claude","Claude","simple-icons:anthropic","https:\u002F\u002Fclaude.ai\u002Fnew?q=",{"name":157,"label":158,"icon":159,"hrefPrefix":160},"google-ai","Google AI","simple-icons:google","https:\u002F\u002Fwww.google.com\u002Fsearch?udm=50&aep=11&q=","content\u002Fshared\u002Fnav.md","Site navigation",false,null,{"type":166,"value":167,"toc":168},"minimark",[],{"title":169,"searchDepth":170,"depth":170,"links":171},"",2,[],"md","\u002Fshared\u002Fnav",{"title":162,"description":169},"shared\u002Fnav","Q7sDe7TuGEwhwUMamyeOxjvGlsUaF3Iay9VTW0KaE_U",{"enabled":163,"message":178,"linkLabel":79,"linkHref":80,"id":179,"title":180,"archived":163,"authors":164,"badge":164,"body":181,"date":164,"definedTerm":164,"department":164,"description":169,"extension":172,"eyebrow":164,"faqHeader":164,"faqs":164,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":185,"relatedHeading":164,"seo":186,"series":164,"sitemap":163,"status":164,"stem":187,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":188},"We're hiring! Join the team building the Sentient Enterprise.","content\u002Fshared\u002Fhiring.md","Hiring banner",{"type":166,"value":182,"toc":183},[],{"title":169,"searchDepth":170,"depth":170,"links":184},[],"\u002Fshared\u002Fhiring",{"title":180,"description":169},"shared\u002Fhiring","1zs3boivKda1e-b-hAyuNcmZSKjZUAXmecnwHVgcHzk",{"id":190,"title":191,"archived":163,"authors":192,"badge":197,"body":199,"date":632,"definedTerm":164,"department":164,"description":633,"extension":172,"eyebrow":164,"faqHeader":634,"faqs":637,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":163,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":647,"relatedHeading":164,"seo":648,"series":649,"sitemap":131,"status":164,"stem":650,"subhead":164,"tags":651,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":656},"content\u002Fblog\u002Fwhy-banning-chatgpt-trains-people-onto-their-phones.md","The Shadow AI Trap: Why Blocking Chatbots Increases Enterprise Security Risk",[193],{"name":194,"role":195,"to":196},"Jeff Corliss","Co-Founder and CTO","https:\u002F\u002Fgonimbus.ai",{"label":198},"Thought Leadership",{"type":166,"value":200,"toc":623},[201,216,224,276,281,284,296,299,369,373,376,379,383,386,389,396,402,408,414,475,479,482,485,493,565,569,572,576,579,582,585,589],[202,203,204,205,210,211,215],"p",{},"In the spring of 2023 a series of famous employers discovered that generative tools had entered the building without a project plan. Samsung told staff, after sensitive code was uploaded to ChatGPT, that generative AI was temporarily restricted on company machines. ",[206,207,209],"a",{"href":208},"https:\u002F\u002Fwww.cnbc.com\u002F2023\u002F05\u002F02\u002Fsamsung-bans-use-of-ai-like-chatgpt-for-staff-after-misuse-of-chatbot.html","CNBC"," and ",[206,212,214],{"href":213},"https:\u002F\u002Fwww.theverge.com\u002F2023\u002F5\u002F2\u002F23707796\u002Fsamsung-ban-chatgpt-generative-ai-bing-bard-employees-security-concerns","The Verge",", citing internal reporting, described a ban that also asked people not to upload sensitive business information from personal devices. The company said it was buying time to create a secure environment. JPMorgan and other large banks had already limited ChatGPT on similar grounds. The instinct was understandable. The control was incomplete the moment the phone stayed in the employee’s pocket.",[202,217,218,219,223],{},"A year later the numbers had not gone back in the bottle. ",[206,220,222],{"href":221},"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fworklab\u002Fwork-trend-index\u002Fai-at-work-is-here-now-comes-the-hard-part","Microsoft and LinkedIn’s Work Trend Index"," reported that 75 percent of knowledge workers use generative AI at work and that 78 percent of AI users bring their own tools. Leaders agree they need AI — 79 percent in that survey — and 60 percent worry their organisation lacks a plan. Prohibition did not produce a plan. It produced a second network.",[225,226,227,240],"table",{},[228,229,230],"thead",{},[231,232,233,237],"tr",{},[234,235,236],"th",{},"What the restriction changed",[234,238,239],{},"What it left in place",[241,242,243,252,260,268],"tbody",{},[231,244,245,249],{},[246,247,248],"td",{},"The tool in the managed browser",[246,250,251],{},"The deadline, the blank page, and the colleague whose draft took ten minutes",[231,253,254,257],{},[246,255,256],{},"A visible corporate destination",[246,258,259],{},"The personal account, the personal laptop, and the phone on a guest network",[231,261,262,265],{},[246,263,264],{},"The company’s ability to say it had acted",[246,266,267],{},"The log. The data still leaves. The company cannot see it",[231,269,270,273],{},[246,271,272],{},"The instinct, which was sound",[246,274,275],{},"The sequence. Restrict now, and postpone the secure environment until a steering committee agrees a vendor",[277,278,280],"h2",{"id":279},"what-a-ban-actually-removes","What a ban actually removes",[202,282,283],{},"A network block removes the tool from the managed browser. It does not remove the deadline, the blank page, or the colleague who says the draft took ten minutes instead of two hours. People under that pressure do what they did in every previous generation of shadow IT. They use a personal account, a personal laptop, or a phone on a guest network. The data still leaves. The company has lost the log.",[202,285,286,290,291,295],{},[206,287,289],{"href":288},"https:\u002F\u002Fnewsroom.ibm.com\u002F2025-07-30-ibm-report-13-of-organizations-reported-breaches-of-ai-models-or-applications,-97-of-which-reported-lacking-proper-ai-access-controls","IBM’s Cost of a Data Breach research"," put a cost on that pattern: one in five organisations studied reported a breach involving shadow AI. High levels of shadow AI were associated with roughly $670,000 in additional average breach cost. Incidents involving shadow AI compromised personally identifiable information and intellectual property at higher rates than the global averages in the study. Only 37 percent of organisations had policies to manage AI or detect unsanctioned use. A policy that says “do not” and a network rule that cannot see the phone are not, together, a programme. The ",[206,292,294],{"href":293},"https:\u002F\u002Fwww.ibm.com\u002Freports\u002Fdata-breach","Cost of a Data Breach report"," is the longer version of the same finding.",[202,297,298],{},"The same research found that 13 percent of organisations reported a breach of an AI model or application, and that 97 percent of those compromised lacked proper AI access controls. The lesson is not that AI is uniquely cursed. It is that companies turned it on, or allowed it to be turned on, without the boring machinery — identity, scope, retention — they would have demanded of a new file store.",[225,300,301,311],{},[228,302,303],{},[231,304,305,308],{},[234,306,307],{},"Figure",[234,309,310],{},"What a quiet proxy log will not tell you",[241,312,313,321,329,337,345,353,361],{},[231,314,315,318],{},[246,316,317],{},"75 percent of knowledge workers use generative AI at work",[246,319,320],{},"The block did not end the work",[231,322,323,326],{},[246,324,325],{},"78 percent of AI users bring their own tools",[246,327,328],{},"The second network is the normal path",[231,330,331,334],{},[246,332,333],{},"60 percent of leaders worry the organisation lacks a plan",[246,335,336],{},"Prohibition was asked to stand in for the plan",[231,338,339,342],{},[246,340,341],{},"1 in 5 organisations reported a breach involving shadow AI",[246,343,344],{},"The unofficial path is already in the incident set",[231,346,347,350],{},[246,348,349],{},"About $670,000 higher average breach cost where shadow AI use was high",[246,351,352],{},"The premium sits on the path you cannot see",[231,354,355,358],{},[246,356,357],{},"37 percent have policies to manage AI or detect unsanctioned use",[246,359,360],{},"Most companies cannot tell whether the ban worked",[231,362,363,366],{},[246,364,365],{},"97 percent of those with an AI-related compromise lacked proper access controls",[246,367,368],{},"The missing machinery is identity, scope, and retention",[277,370,372],{"id":371},"why-employees-are-not-villains-in-this-story","Why employees are not villains in this story",[202,374,375],{},"Call the behaviour misconduct and you will design the wrong remedy. The Work Trend Index’s harder finding is that employees adopted the tools because the work demanded it and the employer had not caught up. Sixty percent of leaders doubting their own plan is an admission. People do not wait for an admission to become a platform.",[202,377,378],{},"There is also a quality reason they leave the official path. Early “enterprise” assistants were often a boxed model with a login wall and no access to the files the job required. The personal chatbot at least let them paste the paragraph they needed rewritten. Paste is the leak. Paste is also a rational response to a tool that cannot see the document it is supposed to help with. If the sanctioned system cannot do the job, the ban trains people to become their own integration layer, copying sensitive text from the system of record into a consumer window and copying the answer back. You have built an exfiltration workflow and called it compliance.",[277,380,382],{"id":381},"what-a-substitution-programme-must-include","What a substitution programme must include",[202,384,385],{},"Samsung’s memo was explicit about the sequence: restrict now, build a secure environment, then allow the productivity. Many companies did the first step and postponed the second until the steering committee could agree a vendor. The postponement is the failure.",[202,387,388],{},"A substitution that works has four properties.",[202,390,391,395],{},[392,393,394],"strong",{},"It can see the right documents."," Not every document. The documents for this job, under the same permissions the person already has. If the assistant is blind, paste returns.",[202,397,398,401],{},[392,399,400],{},"It does not train a public model on the company’s text."," Employees cannot be expected to read a consumer privacy policy in the middle of a closing. The enterprise agreement has to say, in language a manager can repeat, what is retained and what is not.",[202,403,404,407],{},[392,405,406],{},"It keeps a record."," When something goes wrong, “we banned ChatGPT” will not explain the customer email that was sent anyway. The sanctioned path should show the draft, the sources, and whether a person approved the outbound version.",[202,409,410,413],{},[392,411,412],{},"It is not a punishment."," If the official tool is slower, uglier, and less capable, people will keep a personal account for the work they care about and use the official one for the work they are willing to have seen. That split is the worst of both worlds: the risky work is the invisible work.",[225,415,416,429],{},[228,417,418],{},[231,419,420,423,426],{},[234,421,422],{},"Property",[234,424,425],{},"Present",[234,427,428],{},"Missing",[241,430,431,442,453,464],{},[231,432,433,436,439],{},[246,434,435],{},"Sees the documents for this job, under the person’s existing permissions",[246,437,438],{},"Paste is unnecessary",[246,440,441],{},"Paste returns. The employee becomes the integration",[231,443,444,447,450],{},[246,445,446],{},"Does not train a public model on company text. A manager can say what is retained",[246,448,449],{},"People do not have to parse a consumer privacy policy at close of business",[246,451,452],{},"The agreement is a PDF nobody can repeat",[231,454,455,458,461],{},[246,456,457],{},"Keeps the draft, the sources, and whether a person approved the outbound version",[246,459,460],{},"“We banned ChatGPT” is not the only sentence you have",[246,462,463],{},"The customer email went out anyway, and you cannot show the path",[231,465,466,469,472],{},[246,467,468],{},"Faster than the personal account for the work people care about",[246,470,471],{},"The risky work is the visible work",[246,473,474],{},"The official tool gets the harmless work. The phone gets the rest",[277,476,478],{"id":477},"what-to-put-in-peoples-hands-the-same-week-you-tighten-the-block","What to put in people’s hands the same week you tighten the block",[202,480,481],{},"So design the week as a substitution, not as a speech. Name the three tasks that are driving the personal accounts — drafting from a document the person already has, summarising a thread, searching an internal policy — and make those three tasks fast on a tenant you operate. Fast means the account exists before the block tightens, the document can be reached under the person’s existing permissions, and the output stays in a log you can show later. If you cannot do those three tasks well yet, delay the spectacle of the ban and keep a narrower block on the truly uncontrolled paste of code, credentials, and unpublished numbers. A narrow block you can explain will be respected more often than a total block you cannot police.",[202,483,484],{},"Measure the thing you are afraid of, not the thing that flatters the policy. Proxy denials will fall after a ban and look like success. They are success only for traffic that respects the proxy. Ask, in a short pulse, whether people used a personal tool for company work in the last week, and whether that work included customer data, code, or financials. You will under-count. Even a partial count should be read against the external benchmark that most AI users bring their own tools, and against breach research in which shadow AI was common and usually ungoverned. A rising pulse after a ban means the policy moved the work. It did not remove it.",[202,486,487,488,492],{},"Give managers a sentence they can say without becoming hypocrites: “Use the company tool for anything that touches a customer, a number we have not published, or code. If it cannot do the job, tell me, and we will not pretend you should have pasted it elsewhere.” Then mean the second clause. A manager who is punished for a missed deadline and punished for a workaround will choose the workaround you cannot see. ",[206,489,491],{"href":490},"https:\u002F\u002Fwww.nist.gov\u002Fitl\u002Fai-risk-management-framework","The framework language for this is straightforward",": map the real use, give it a governed route, measure what still leaks. The route is a product problem. Security cannot finish it alone, and a policy team cannot finish it on paper.",[225,494,495,508],{},[228,496,497],{},[231,498,499,502,505],{},[234,500,501],{},"This week",[234,503,504],{},"Do this",[234,506,507],{},"Treat this as a false victory",[241,509,510,521,532,543,554],{},[231,511,512,515,518],{},[246,513,514],{},"Before the block",[246,516,517],{},"Provision the account. It can see the files the person may already see, and it keeps a log",[246,519,520],{},"A speech, then a block, then a vendor selection that takes a quarter",[231,522,523,526,529],{},[246,524,525],{},"The block itself",[246,527,528],{},"Narrow: code, credentials, unpublished numbers, customer data",[246,530,531],{},"A total ban you cannot police. The careful wait. The fast use a phone",[231,533,534,537,540],{},[246,535,536],{},"The three tasks driving personal accounts",[246,538,539],{},"Drafting from a document they have, summarising a thread, searching an internal policy — fast, on your tenant",[246,541,542],{},"An enterprise login that cannot see the document",[231,544,545,548,551],{},[246,546,547],{},"The measure",[246,549,550],{},"A pulse: personal tool in the last week, and whether it touched customer data, code, or financials",[246,552,553],{},"Proxy denials falling. Quiet logs are what phones look like",[231,555,556,559,562],{},[246,557,558],{},"The manager’s sentence",[246,560,561],{},"Use the company tool. If it cannot do the job, say so. You will not be told you should have pasted",[246,563,564],{},"Punishment for the deadline and punishment for the workaround. They will choose the workaround you cannot see",[277,566,568],{"id":567},"the-path-then-the-block","The path, then the block",[202,570,571],{},"Provision the sanctioned account before you tighten anything. It has to see the files the person is already allowed to see, and it has to keep a log. Then block the destinations you truly cannot defend, and say so narrowly: code, credentials, unpublished numbers, customer data. A total ban you cannot police trains the careful to wait and the fast to use a phone. That is the failure mode already on the record. Pulse people on whether company work still happens in personal tools. A quiet proxy log is not the answer. The pulse is. Run it before you declare the policy a success.",[277,573,575],{"id":574},"a-call-to-chief-information-security-officers-and-chief-operating-officers","A call to chief information security officers and chief operating officers",[202,577,578],{},"Keep the block on truly uncontrolled destinations if you must. Do not confuse it with a strategy. Publish the sanctioned path, fund it until it is actually usable, and measure shadow use instead of declaring victory when the corporate proxy log goes quiet. Quiet logs are what phones look like.",[202,580,581],{},"Samsung was right that source code does not belong in a consumer chatbot. The companies that copy only the restriction will meet the same code again, later, in a breach report, with a line that says the employee was not on the network when they pasted it.",[583,584],"hr",{},[277,586,588],{"id":587},"references","References",[590,591,592,598,603,608,613,618],"ul",{},[593,594,595],"li",{},[206,596,597],{"href":208},"CNBC, Samsung bans staff use of generative AI after misuse",[593,599,600],{},[206,601,602],{"href":213},"The Verge, Samsung tells employees not to use ChatGPT",[593,604,605],{},[206,606,607],{"href":221},"Microsoft and LinkedIn, 2024 Work Trend Index",[593,609,610],{},[206,611,612],{"href":288},"IBM newsroom, 30 July 2025",[593,614,615],{},[206,616,617],{"href":293},"IBM, Cost of a Data Breach",[593,619,620],{},[206,621,622],{"href":490},"NIST AI Risk Management Framework",{"title":169,"searchDepth":170,"depth":170,"links":624},[625,626,627,628,629,630,631],{"id":279,"depth":170,"text":280},{"id":371,"depth":170,"text":372},{"id":381,"depth":170,"text":382},{"id":477,"depth":170,"text":478},{"id":567,"depth":170,"text":568},{"id":574,"depth":170,"text":575},{"id":587,"depth":170,"text":588},"2026-09-22","Banning public generative AI tools doesn't stop usage. It creates a corporate blind spot on employee mobile devices.",{"eyebrow":635,"title":636},"Short answers","A ban is a change of device",[638,641,644],{"question":639,"answer":640},"What happened when companies banned public chatbots?","After leaks and compliance scares, the ban felt like control. For many employees it was a change of device, not a change of behaviour.",{"question":642,"answer":643},"Why do people keep using the personal tool?","The official path is slower or missing, and the phone still works.",{"question":645,"answer":646},"What works instead of a ban?","A tool people can finish the job in, with a record and a stop, so the personal account is no longer the path of least resistance.","\u002Fblog\u002Fwhy-banning-chatgpt-trains-people-onto-their-phones",{"title":191,"description":633},"insight","blog\u002Fwhy-banning-chatgpt-trains-people-onto-their-phones",[652,653,654,655],"thought-leadership","security","shadow-ai","workforce","5cDfATYuAjTxQ_y_3Is6DhZK4Jgzxy-hlEQIttlFtLU",{"hero":658,"id":660,"title":661,"archived":163,"authors":164,"badge":164,"body":662,"date":164,"definedTerm":164,"department":164,"description":666,"extension":172,"eyebrow":667,"faqHeader":164,"faqs":164,"footerBand":668,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":60,"relatedHeading":674,"seo":675,"series":164,"sitemap":131,"status":164,"stem":676,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":677},{"filename":659},"u2221455217_Flat_design_of_a_futuristic_minimalist_landscape__5d589295-cdea-4ea9-a262-be766881accf_1.png","content\u002Fblog\u002Findex.md","Exploring the future of intelligence.",{"type":166,"value":663,"toc":664},[],{"title":169,"searchDepth":170,"depth":170,"links":665},[],"Deep dives into pre-cognitive intelligence, sentient enterprises, and the evolving landscape of AI-driven business transformation.","Latest Research",{"headline":669,"description":670,"primaryLabel":671,"primaryTo":672,"secondaryLabel":673,"secondaryTo":12},"Stay at the frontier.","Subscribe for product updates and new insights.","Subscribe","\u002Fnewsletter","Explore the platform","More research",{"title":661,"description":666},"blog\u002Findex","BFSWGYO9bcTlaulivKYWyg08_DJHsdGg3OC6g_CG1Hw",[164,679],{"id":680,"title":681,"archived":163,"authors":682,"badge":684,"body":685,"date":632,"definedTerm":164,"department":164,"description":1105,"extension":172,"eyebrow":164,"faqHeader":1106,"faqs":1108,"footerBand":164,"headline":164,"image":164,"industry":164,"jobType":164,"listed":163,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":1118,"relatedHeading":164,"seo":1119,"series":649,"sitemap":131,"status":164,"stem":1120,"subhead":164,"tags":1121,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":1124},"content\u002Fblog\u002Fwhy-ai-pilots-die-in-the-quarterly-review.md","Why AI Pilots Fail the Quarterly Review Every Time",[683],{"name":194,"role":195,"to":196},{"label":198},{"type":166,"value":686,"toc":1096},[687,690,697,700,738,742,748,751,755,758,764,770,786,792,853,857,860,867,871,874,877,880,883,889,895,901,904,917,920,990,1040,1044,1047,1051,1054,1057,1059,1061],[202,688,689],{},"The pilot survives the demo. It rarely survives the quarter. A team shows a fluent summary, a faster draft, a chart that used to take an analyst a day. The room is impressed. Someone says “let’s scale this.” Three months later the same slide is still a pilot, the owner has moved teams, and the data it depended on has changed. The tool is not the thing that died. The absence of an operating owner did.",[202,691,692,696],{},[206,693,695],{"href":694},"https:\u002F\u002Fwww.mckinsey.com\u002Fcapabilities\u002Fquantumblack\u002Four-insights\u002Fthe-state-of-ai","McKinsey’s 2025 global survey"," describes the pattern at industrial scale. Eighty-eight percent of respondents say their organisations regularly use AI in at least one function. Nearly two-thirds have not begun scaling it across the enterprise. About a third say they have started. Use is no longer the news. The news is that use and scale have come apart, and that the quarterly business review is where the gap becomes visible to people who control headcount and capital.",[202,698,699],{},"The following examines why pilots stall in that room, what leaders mistake for progress, and how to design an experiment that can either become a job or be shut without theatre.",[225,701,702,712],{},[228,703,704],{},[231,705,706,709],{},[234,707,708],{},"What the survey is willing to say",[234,710,711],{},"What the quarterly review is then forced to ask",[241,713,714,722,730],{},[231,715,716,719],{},[246,717,718],{},"88 percent use AI in at least one function",[246,720,721],{},"What changed in the P&L, the cycle time, the error rate, or the risk register?",[231,723,724,727],{},[246,725,726],{},"Nearly two-thirds have not begun scaling",[246,728,729],{},"Why is this still a pilot if people already depend on it?",[231,731,732,735],{},[246,733,734],{},"About a third say they have started to scale",[246,736,737],{},"Which job, with which owner, survived a baseline?",[277,739,741],{"id":740},"a-pilot-is-a-permission-slip-not-a-product","A pilot is a permission slip, not a product",[202,743,744,745,747],{},"In most companies a pilot is how a function gets to try something without promising a result. That was reasonable when the something was a sandbox. It is a poor container for a system that employees are already using every day. ",[206,746,222],{"href":221}," found that three-quarters of knowledge workers use generative AI, and that 78 percent of AI users bring their own. The “pilot” on the roadmap and the “assistant” on the laptop are not the same programme. One is governed by a slide. The other is governed by habit.",[202,749,750],{},"When the quarterly review arrives, the sponsor is asked a question the pilot was never built to answer: what changed in the P&L, the cycle time, the error rate, or the risk register? A demo cannot answer it. A usage chart cannot answer it. The team reaches for anecdotes. The finance partner reaches for a baseline that was never frozen. The review ends with “continue to learn,” which is how organisations store work they are not willing to fund or kill.",[277,752,754],{"id":753},"what-actually-kills-the-pilot","What actually kills the pilot",[202,756,757],{},"The model is seldom the cause. Four management facts are.",[202,759,760,763],{},[392,761,762],{},"No frozen baseline."," If you did not record how long the job took, how often it was wrong, and what it cost before the assistant arrived, you cannot claim an improvement that a sceptical controller will accept. Teams discover this in the meeting. They should have discovered it in week one.",[202,765,766,769],{},[392,767,768],{},"No system of record."," The pilot lives in a chat beside the work. The work lives in the CRM, the ledger, the contract store, the ticket queue. When the quarter ends, nobody can reopen the pilot and see the decision. They can reopen a transcript, if it was retained, which it often was not. A quarterly review is a memory test. Chat is a bad memory.",[202,771,772,775,776,780,781,785],{},[392,773,774],{},"No named signer."," Someone has to be willing to say that this output may leave the team. If that person does not exist, the pilot is entertainment. The moment a customer, an auditor, or a regulator might rely on it, the sponsor retreats. ",[206,777,779],{"href":778},"https:\u002F\u002Fwww.cbc.ca\u002Fnews\u002Fcanada\u002Fbritish-columbia\u002Fair-canada-chatbot-lawsuit-1.7116416","Air Canada’s chatbot case"," is the external version of the same retreat: the airline argued, unsuccessfully, that the bot was a separate legal entity. The ",[206,782,784],{"href":783},"https:\u002F\u002Fwww.canlii.org\u002Fen\u002Fbc\u002Fbccrt\u002Fdoc\u002F2024\u002F2024bccrt149\u002F2024bccrt149.html","tribunal decision"," held that a company is responsible for information on its own website, whether the words come from a static page or a chatbot. Internally, leaders already know this. They just prefer not to attach their name until the pilot feels finished. It never feels finished.",[202,787,788,791],{},[392,789,790],{},"A success metric borrowed from the vendor."," “Time to first draft” is not a business metric. “Messages handled” is not a business metric if the messages are worse. Klarna and others have published striking service-automation figures; the leadership question is not whether a vendor can produce a large number. It is whether your complaint rate, your refund rate, and your reopen rate moved with it. If those were not in the pilot charter, the quarterly review will invent a verdict anyway, and it will be no.",[225,793,794,807],{},[228,795,796],{},[231,797,798,801,804],{},[234,799,800],{},"What is missing",[234,802,803],{},"How it shows up in the room",[234,805,806],{},"The verdict a controller will reach",[241,808,809,820,831,842],{},[231,810,811,814,817],{},[246,812,813],{},"A frozen baseline: time, error rate, cost, before the assistant",[246,815,816],{},"The team discovers the gap in the meeting",[246,818,819],{},"No improvement you can accept",[231,821,822,825,828],{},[246,823,824],{},"A system of record",[246,826,827],{},"The work is in the CRM or the ledger. The pilot is in a chat that may not have been kept",[246,829,830],{},"You cannot reopen the decision. Chat is a bad memory",[231,832,833,836,839],{},[246,834,835],{},"A named signer",[246,837,838],{},"The sponsor retreats the moment a customer or an auditor might rely on the output",[246,840,841],{},"The pilot was entertainment. A company is responsible for words on its own site",[231,843,844,847,850],{},[246,845,846],{},"A metric that is not the vendor’s",[246,848,849],{},"“Time to first draft” or “messages handled,” with complaint, refund, and reopen rates absent from the charter",[246,851,852],{},"The review invents a verdict. It will be no",[277,854,856],{"id":855},"the-agentic-version-of-the-same-stall","The agentic version of the same stall",[202,858,859],{},"The newer disappointment has a new noun. Agentic systems — assistants that plan steps and call tools — are being trialled widely and scaled narrowly. McKinsey’s researchers have been plain that experimentation with agents is common and that scaling is usually confined to one or two functions, often IT or knowledge management. That is not a paradox. An agent that can act is an operating change. An operating change needs a boundary: what it may read, what it may propose, who stops it.",[202,861,862,863,866],{},"A pilot that grants an agent a broad connector “so we can see what it does” will not survive contact with security, and it should not. ",[206,864,865],{"href":288},"IBM’s 2025 breach research"," found that among organisations reporting an AI-related breach, 97 percent lacked proper AI access controls, and that 31 percent of those incidents produced operational disruption. A quarterly review that celebrates an agent demo and has not asked about access is celebrating the precondition of an incident.",[277,868,870],{"id":869},"the-review-that-kills-a-pilot-cleanly","The review that kills a pilot cleanly",[202,872,873],{},"A pilot dies usefully or it dies in disguise. The useful death happens in the quarterly review, in front of the sponsor, with the baseline on the table. The disguised death is “continue to explore,” which keeps the licence, the Slack channel, and the manager’s rework, and removes only the obligation to conclude.",[202,875,876],{},"Set the review up so disguise is hard. One job, described in a sentence a customer would recognise. The baseline, frozen before the pilot, for cycle time, error or reopen rate, and one external cost. The result on the same definitions. The step that was deleted, or the honest note that nothing was deleted. The refusal count. If any of those is missing, the outcome is stop, not a request for a follow-up deck. Follow-up decks are how a quarter becomes a year. The survey picture — widespread use, a minority scaling — is what those decks add up to.",[202,878,879],{},"Invite the manager who has to sign the output, and let her speak before the sponsor. If she says the assistant’s answer cannot be sent, booked, or paid, that is not resistance. That is the result. Leaders worry their organisations lack a plan even while staff use the tools every day. The plan is this meeting. It fails when the sponsor narrates adoption and the operator is given two minutes at the end.",[202,881,882],{},"Allow three outcomes only.",[202,884,885,888],{},[392,886,887],{},"Promote."," The job moves into the ordinary budget, the old step is removed, an owner is named.",[202,890,891,894],{},[392,892,893],{},"Narrow."," The pilot keeps only the slice that met the bar, and the rest is turned off, including the credentials.",[202,896,897,900],{},[392,898,899],{},"Stop."," The channel is closed, the story is written down, and the team is thanked for a negative result.",[202,902,903],{},"Negative results are how the next pilot gets a better question. A culture that punishes them will produce pilots that cannot fail and therefore cannot teach.",[202,905,906,907,911,912,916],{},"Write the stop in the same pack that once announced the launch. People remember the launch. If the stop lives only in a footnote, the next team will rebuild it. If you told the market or the board that the pilot was already a capability, correct that description with the same specificity. ",[206,908,910],{"href":909},"https:\u002F\u002Fwww.sec.gov\u002Fnewsroom\u002Fpress-releases\u002F2024-36","Firms have settled charges"," for describing AI they were not running. An internal myth is how an external sentence starts. ",[206,913,915],{"href":914},"https:\u002F\u002Fwww.ftc.gov\u002Fbusiness-guidance\u002Fblog\u002F2023\u002F02\u002Fkeep-your-ai-claims-check","Say what you can show",".",[202,918,919],{},"There is a security reason to stop cleanly as well. A pilot that “continues” often continues with the broad service account that made the demo work. AI-related compromises are overwhelmingly associated with missing access controls. Ending the pilot includes revoking the token. A token without an owner is not exploration. It is an account.",[225,921,922,933],{},[228,923,924],{},[231,925,926,929,931],{},[234,927,928],{},"On the table",[234,930,425],{},[234,932,428],{},[241,934,935,946,957,968,979],{},[231,936,937,940,943],{},[246,938,939],{},"One job, in a sentence a customer would recognise",[246,941,942],{},"The review can judge a job",[246,944,945],{},"You are judging a demo. Stop",[231,947,948,951,954],{},[246,949,950],{},"Baseline frozen before the pilot: cycle time, error or reopen rate, one external cost",[246,952,953],{},"The result uses the same definitions",[246,955,956],{},"“Continue to learn.” That is how a quarter becomes a year",[231,958,959,962,965],{},[246,960,961],{},"The step that was deleted, or an honest note that nothing was",[246,963,964],{},"A saving you can see on a calendar",[246,966,967],{},"Nothing was deleted. Do not claim one",[231,969,970,973,976],{},[246,971,972],{},"Refusal count",[246,974,975],{},"The control was in the path",[246,977,978],{},"A token with no owner is still an account",[231,980,981,984,987],{},[246,982,983],{},"The operator speaks before the sponsor",[246,985,986],{},"“Cannot be sent, booked, or paid” is a result",[246,988,989],{},"Adoption narrative, two minutes for the person who signs",[225,991,992,1005],{},[228,993,994],{},[231,995,996,999,1002],{},[234,997,998],{},"Outcome",[234,1000,1001],{},"What changes the same week",[234,1003,1004],{},"What does not count",[241,1006,1007,1018,1029],{},[231,1008,1009,1012,1015],{},[246,1010,1011],{},"Promote",[246,1013,1014],{},"Ordinary budget, the old step removed, a named owner",[246,1016,1017],{},"A pilot that keeps its side channel",[231,1019,1020,1023,1026],{},[246,1021,1022],{},"Narrow",[246,1024,1025],{},"Only the slice that met the bar stays on. Credentials for the rest are revoked",[246,1027,1028],{},"A smaller demo of the same unbounded tool",[231,1030,1031,1034,1037],{},[246,1032,1033],{},"Stop",[246,1035,1036],{},"The channel is closed, the story is in the same pack that announced the launch, the token is revoked",[246,1038,1039],{},"“Continue to explore” without new money",[277,1041,1043],{"id":1042},"write-the-stop-where-you-wrote-the-launch","Write the stop where you wrote the launch",[202,1045,1046],{},"The review allows promote, narrow, or stop. If the baseline is missing, the outcome is stop. Record the stop in the same pack that announced the pilot, and revoke the credentials the same week. A pilot that “continues to explore” without new money is a system with no owner. That is how use stays widespread and scale stays rare. Negative results are a product of a functioning review. Protect them.",[277,1048,1050],{"id":1049},"a-call-to-operating-executives","A call to operating executives",[202,1052,1053],{},"Stop collecting pilots. Collect jobs that survived a quarterly test. The companies that pull ahead will not be the ones with the longest innovation backlog. They will be the ones whose reviews can point to a handful of processes that are faster, whose errors are visible, and whose owners would defend the result without a vendor in the room.",[202,1055,1056],{},"If a pilot cannot be defended that way, end it in the meeting. The kindness is not another quarter. The kindness is giving the organisation permission to spend its attention on work that is real.",[583,1058],{},[277,1060,588],{"id":587},[590,1062,1063,1068,1072,1077,1082,1087,1091],{},[593,1064,1065],{},[206,1066,1067],{"href":694},"McKinsey, The State of AI: Global Survey 2025",[593,1069,1070],{},[206,1071,607],{"href":221},[593,1073,1074],{},[206,1075,1076],{"href":778},"CBC News, Air Canada found liable for chatbot’s bad advice",[593,1078,1079],{},[206,1080,1081],{"href":783},"Civil Resolution Tribunal, Moffatt v. Air Canada, 2024 BCCRT 149",[593,1083,1084],{},[206,1085,1086],{"href":288},"IBM newsroom, Cost of a Data Breach findings on AI, 30 July 2025",[593,1088,1089],{},[206,1090,622],{"href":490},[593,1092,1093],{},[206,1094,1095],{"href":909},"U.S. SEC press release 2024-36",{"title":169,"searchDepth":170,"depth":170,"links":1097},[1098,1099,1100,1101,1102,1103,1104],{"id":740,"depth":170,"text":741},{"id":753,"depth":170,"text":754},{"id":855,"depth":170,"text":856},{"id":869,"depth":170,"text":870},{"id":1042,"depth":170,"text":1043},{"id":1049,"depth":170,"text":1050},{"id":587,"depth":170,"text":588},"The top reasons AI proofs of concept stall at the quarterly review, and how establishing baseline metrics and clear owners saves them.",{"eyebrow":635,"title":1107},"Praised, then cancelled",[1109,1112,1115],{"question":1110,"answer":1111},"Why do AI pilots die in the quarterly review?","They are praised as experiments and then cancelled because nobody changed the job they were supposed to replace.",{"question":1113,"answer":1114},"Is that a model failure?","Usually it is a management failure. The pilot never had an owner, a baseline, or a decision it was allowed to change.",{"question":1116,"answer":1117},"What should the review ask?","What job changed, what it cost, and whether it will run next quarter without a special team.","\u002Fblog\u002Fwhy-ai-pilots-die-in-the-quarterly-review",{"title":681,"description":1105},"blog\u002Fwhy-ai-pilots-die-in-the-quarterly-review",[652,1122,1123],"enterprise-ai","operating-model","WgFy0Xl-ivLIO-6CJgZqmhJUYtJd3W19gvAjTWtY0JE",{"fold":1126,"id":1130,"title":1131,"archived":163,"authors":164,"badge":164,"body":1132,"date":164,"definedTerm":164,"department":164,"description":169,"extension":172,"eyebrow":164,"faqHeader":164,"faqs":164,"footerBand":1136,"headline":164,"image":164,"industry":164,"jobType":164,"listed":131,"location":164,"navigation":131,"openRoles":164,"pageLayout":164,"path":1140,"relatedHeading":164,"seo":1141,"series":164,"sitemap":163,"status":164,"stem":1142,"subhead":164,"tags":164,"video":164,"whyJoin":164,"workplaceType":164,"__hash__":1143},{"headline":1127,"description":1128,"primaryLabel":8,"primaryTo":1129,"secondaryLabel":673,"secondaryTo":12},"Run frontier AI your business actually owns.","Governed workstreams, 3,000+ integrations, and a proprietary knowledge graph. Start on Free.","\u002Fsignup?plan=free","content\u002Fshared\u002Fcta.md","Site CTAs",{"type":166,"value":1133,"toc":1134},[],{"title":169,"searchDepth":170,"depth":170,"links":1135},[],{"headline":1137,"description":1138,"primaryLabel":8,"primaryTo":1129,"secondaryLabel":1139,"secondaryTo":85},"See what governed AI looks like on your stack.","Connect your tools, run a workstream, and keep every decision on your ledger. Start on Free.","Talk to our team","\u002Fshared\u002Fcta",{"title":1131,"description":169},"shared\u002Fcta","eYqahyaPnbp8GKrWpoORbZdtmkWmgHr5F61ZHOnb8sY",1791647067315]