# G13 — Shadow AI discovery in Global Secure Access

- Publisher: Microsoft Learn
- Primary source: [Shadow AI discovery in Global Secure Access](https://learn.microsoft.com/en-us/entra/global-secure-access/concept-shadow-ai-discovery)
- Observed: 2026-10-22 (Europe/Berlin session date)
- Publication date: unknown — no reliable date established from the read
- Updated date: unknown — no reliable date established from the read
- Read status: opened and relevant section read through web tool
- Evidence locator: How shadow AI discovery works; Access shadow AI discovery; comparison with Generative AI Insights
- Evidence class: primary maintainer/provider guidance; not an independent impact study

## Short evidence fragment

> Shadow AI discovery helps mitigate these risks by revealing unsanctioned AI usage

## Researcher's reading note

Microsoft documents network-based discovery of generative AI applications using its app catalog, surfaced with usage and risk statistics.

## Limits and use

App/network discovery is not an invoice or complete spend ledger; limited by traffic coverage and catalog matching. No claim that Knauf has this product or shadow AI spend.

## Retention

This card preserves a short evidence fragment and an original reading note; full source text is not copied. FinOps/FOCUS adaptations should credit the FinOps Foundation / FOCUS as applicable (their pages state CC BY 4.0). Re-open mutable documentation before implementing controls.