Shadow AI in the Enterprise: Ungoverned LLM API Keys and Data Exfiltration Risk

Employees using personal Claude, OpenAI, and Gemini API keys for work tasks bypass corporate DLP controls and send sensitive business data to external providers without logging, consent, or data handling agreements. Here's the threat model.