Enterprise AI Measurement Guide
AI Governance · AI Tool Compliance
Unapproved AI Tools %
How do we know how many AI tools are in use across our organization, and what share of them haven't been reviewed or approved by IT?
What it shows
The Unapproved AI Tools metric shows the percentage of all AI tools detected in the organization's environment that carry an "unapproved" status, meaning they are not on the official sanctioned list, regardless of how actively they're used. This is a portfolio-level compliance view: it tells leaders how wide the shadow AI footprint is as a share of total AI tool diversity.
Why it matters
87% of tools being unapproved sounds alarming. But that number tells only part of the story. An org can have 87% of tools flagged and still have only 7% of actual usage happening on those tools, because most unapproved tools sit idle. The Unapproved AI Tools percentage is a breadth indicator, not a risk indicator on its own. CISOs and CIOs need to read it alongside the Unapproved AI Tool Usage Rate to understand whether the shadow portfolio is a long tail of dormant accounts or a live operational risk.
The Larridin angle
Larridin's discovery layer finds every AI tool in the environment, sanctioned and unsanctioned, giving the CISO a complete inventory before they can answer any compliance question. The tool count % is the first output of that discovery, and it's the baseline every governance conversation needs.
Related AI Governance Metrics
Common questions
How does the Unapproved AI Tools % help in understanding our AI governance workload?
The Unapproved AI Tools % provides a portfolio-level view of the unapproved AI tools within your organization, indicating the breadth of the governance gap. It helps identify the scale of the AI governance workload by showing the share of tools that are not officially sanctioned.
Why is it important to consider the Unapproved AI Tool Usage Rate alongside the Unapproved AI Tools %?
The Unapproved AI Tool Usage Rate is crucial because the Unapproved AI Tools % only measures the presence of unapproved tools, not their activity level. Understanding both metrics together helps determine if unapproved tools are actively used, which is essential for assessing operational risk and prioritizing governance efforts.
What should we do if the Unapproved AI Tools % is high?
If the Unapproved AI Tools % is high, it's important to check metrics like the Unapproved AI Tools DAU % and Unapproved AI Tool Usage Rate to assess if these tools are actively used. This helps determine whether the unapproved tools pose a significant operational risk and require immediate governance attention.
How can Larridin's discovery layer aid in AI tool compliance?
Larridin's discovery layer provides a complete inventory of all AI tools in the environment, both sanctioned and unsanctioned. This comprehensive inventory is essential for answering compliance questions and serves as the baseline for governance discussions, helping leaders understand the full scope of their AI tool portfolio.