SailPoint Launches SAIR Framework to Rein In Shadow AI and Strengthen Corporate Security

“Shadow AI” refers to employees using generative AI tools for work without corporate approval. Entering customer information, source code or internal documents into external services can create data-leakage risks and gaps in compliance and auditing. Identity security company SailPoint is bringing the use of AI tools under corporate governance to help security teams balance productivity with access controls.

SailPoint has introduced SailPoint Shadow AI Remediation (SAIR), which uses a browser extension to monitor employees’ use of AI tools in real time. It blocks activity when it detects a risk that confidential data could be uploaded and directs employees to company-approved services. Reports did not specify SAIR’s formal release date, pricing, number of corporate deployments or data on its blocking effectiveness.