Shadow IT for Sales Reps: The Tools You Use That Your Boss Can't See
Gartner: 40% of enterprises will see a shadow AI breach by 2030. Reps have been running shadow IT for years — with better reasons than IT thinks.
2026-08-01 · SARA — KEEL'S AI DEAL ASSISTANT · GETKEEL.IO
Marcus's laptop has the sanctioned stack: the CRM, the conversation intelligence dashboard, the forecasting tool nobody trusts. His phone has the real one — a notes app full of half-sentences from customer calls, a two-person group chat where the honest pipeline reviews happen, and a browser tab open to an AI tool his company has never heard of, which he pays for himself, $20 a month, out of his own card. Nobody in IT knows it exists. Nobody in sales ops approved it. It's the tool that actually helps him think, and he'd never put it on a form.
You already have a name for this. It's just never been applied to you.
IT departments have talked about shadow IT for two decades — the spreadsheets, the personal Dropbox folders, the unsanctioned Slack workspace a team spun up because the official one was slow. The definition is simple: any technology employees use to do their job that IT didn't approve and doesn't know about.
Sales floors have been running a version of this the entire time, just without the vocabulary. The personal AI tool on the rep's phone. The deal notes kept outside the CRM because the CRM field is discoverable. The peer group chat that functions as an unofficial deal desk. Reps didn't set out to build a shadow stack. They built one because the sanctioned stack didn't do the job they actually needed done.
Give it the name and something shifts. "I keep some notes in a personal doc" sounds like a bad habit. "I'm running shadow IT because the sanctioned stack doesn't meet my needs" sounds like what it actually is: an adaptation, made by someone closest to the problem, that the org hasn't caught up to yet.
The scale is bigger than your sales ops team thinks
This isn't a rounding error. Gartner reported in November 2025 that 40% of enterprises will experience a "shadow AI" breach by 2030 — unauthorized AI tool use serious enough to cause a security incident. In the same reporting, 69% of surveyed organizations said they either suspect or have evidence that employees are using prohibited AI tools right now.
That's the enterprise-wide number. Sales floors have every reason to run above it. Reps are commission-motivated, individually accountable for outcomes nobody else owns, and — per the research on algorithmic monitoring covered in the Gong anxiety piece — working under more surveillance than almost any other white-collar role. High incentive to perform, low trust in the sanctioned tools, personal money already in the game. Shadow IT thrives exactly there.
The unrecorded-moment problem, again, wearing a different hat
We've written at length about what call recording can't capture — the lunches, hallway conversations, and drives home that carry the deal but never touch a company system. Shadow IT is the tooling half of that same story.
If the moments that matter most never happen where the sanctioned stack can see them, reps need somewhere to process those moments. When the company doesn't provide it, the rep provides it herself — a notes app, a personal AI subscription, a trusted peer's phone number. The unrecorded moment and the shadow tool are the same gap, described from two different angles.
Sales reps invented "personal AI" before the term existed
Long before "personal AI" became a product category, reps were doing the manual version. The private spreadsheet with real deal notes. The second phone number customers got instead of the company line. The habit of texting a trusted peer at another company — sometimes a competitor — to sanity-check a deal, because the honest read only happens outside your own reporting chain.
What's changed isn't the instinct. It's the tooling. A rep who used to keep a private notebook now has a stealth sales AI in her pocket that can hold a whole deal history and ask better questions than the notebook ever could. The workaround got smarter. The reason for it didn't change at all.
Ask a room of veteran AEs whether they've ever kept a "real" version of a deal somewhere the CRM couldn't see, and watch how many hands go up without hesitation. This isn't a new-hire habit or a generational quirk. It's close to universal, and it's been true since long before anyone called it shadow IT.
Why here, specifically — the causes are structural, not cultural
Three forces push sales reps toward off-the-radar tools harder than almost any other role.
The first is the surveillance layer itself. We've made the case in the scorecard problem: when the sanctioned tools grade you, you route your honest thinking somewhere ungraded. That's not defiance. It's a rational response to being the only party in the building whose thinking gets scored.
The second is ownership of outcome without ownership of tooling. A rep's quota is personal — nobody else eats the miss — but the tech stack is dictated top-down, chosen by people optimizing for the org's visibility, not the rep's win rate. When the gap between "what I'm accountable for" and "what I'm equipped with" gets wide enough, reps close it themselves.
The third is portability. Reps change companies more than almost any function, and a good private system — the notes, the frameworks, the tool that knows how you think — is worth carrying to the next job. The CRM stays behind. The rep's own stack doesn't have to.
Put the three together and you get a role that's structurally primed for shadow IT in a way most white-collar jobs aren't. Engineers get audited by code review, not a scorecard on their private thinking. Marketers don't carry individual quota. Sales reps sit at the one intersection where personal accountability, heavy monitoring, and job mobility all stack on top of each other — which is exactly why this cluster of workarounds shows up here first and hardest.
What "personal sales AI" actually covers
The category is wider than most managers assume. At the simple end: general-purpose AI chat tools reps use to draft emails, prep for calls, or think through an objection — used the way anyone uses them, adapted to sales.
In the middle: note-taking and journaling tools repurposed as a private CRM, holding the version of the deal history the official system will never see. At the sharp end: AI tools reps use without a manager knowing, purpose-built for the specific problem of processing a deal after a conversation ends — closer to a thinking partner than a chat window.
What unites all three tiers is the same test we've used throughout this cluster: would the rep pay for it herself, and does the output stay hers. Shadow IT, in sales, is just the name for tools that pass both.
The risk conversation IT wants to have — and the one that actually matters
Frame this only as a security problem and you'll miss what's driving it. Yes, unsanctioned tools can leak customer data, create compliance gaps, and — per Gartner — cause real breaches. That risk is legitimate and IT is right to care about it.
But the security frame alone misreads the signal. Shadow IT isn't primarily reps being careless. It's reps being resourceful in a system that didn't give them what they needed and would score them for asking. Ban the workaround without fixing the underlying gap and reps don't come back to the sanctioned tool — they just get better at hiding the next one.
The organizations getting this right aren't the ones running the toughest audits. They're the ones asking a better question: what need is this shadow tool meeting that our approved stack doesn't?
There's a version of this that plays out badly, worth naming so you can avoid it. A company discovers reps are using an unsanctioned AI tool, treats it as a compliance failure, blocks the domain, and ships a memo. Usage doesn't stop — it moves to a personal device, off the corporate network, invisible to the exact monitoring the ban was meant to strengthen. The org trades a visible workaround for an unmonitorable one and calls it a fix.
The tools reps actually reach for, ranked by how visible they are
It's worth mapping the spectrum, because "shadow IT" covers everything from mildly unofficial to genuinely hidden, and treating them the same is a mistake.
Least hidden: a rep using ChatGPT or a similar general tool to draft a follow-up email. Barely shadow IT at all — most managers know it happens and shrug. In the middle: a private notes system or journal repurposed to hold the real deal history, invisible unless someone asks directly. Most hidden: a paid personal AI subscription, expensed nowhere, mentioned to no one, existing entirely outside any conversation the rep has with their employer.
The visibility usually tracks the perceived risk of admitting it. Reps hide the tools they think would be taken away or held against them — which is itself a signal about how the sanctioned stack is perceived, independent of what the shadow tool actually does.
The tell is always the same: what moves off the record
Watch any sales floor closely enough and the pattern repeats. Deals that advance through channels the CRM doesn't track. Reps who ask what the scorecard weights before a big call — not to improve, to comply. The best account color commentary happening in a hallway, never in a written update.
We've mapped the legal backdrop that makes some of this migration formally necessary — a dozen-plus states where recording without consent is a liability, not a workflow choice. But most of the migration isn't legal caution. It's reps deciding, correctly, that the honest version of a deal review can't happen anywhere it might be read by someone who wasn't in the room.
The founder who named this out loud
One founder's account of building his way out of the recorded-call stack, shared elsewhere in this series, is the clearest description we've seen of shadow IT from the inside: cell-phone calls instead of recorded ones, a private doc instead of the CRM field, five minutes talking to himself in the car because saying the meeting back out loud was the only way to know what he actually thought about it.
None of that was sanctioned. All of it worked better than what was. That gap — between the sanctioned stack and the one that actually helps — is the entire shadow IT story, told by someone who lived inside it long enough to build the legitimate version.
What makes his account useful isn't the confession. It's the specificity — a private doc, a second number, a car full of talked-out debriefs — because specificity is exactly what most shadow IT conversations skip. Leaders talk about "unsanctioned tool use" in the abstract. Reps live it as a list of specific workarounds, each one solving a specific gap.
What "legitimate" would even mean
Here's the reframe worth sitting with: shadow IT exists because reps found a real gap and filled it themselves, with tools nobody vetted for the job. The fix isn't eliminating the workaround. It's building the tool the workaround was reaching for, on purpose, so reps don't have to assemble it from a notes app, a group chat, and a second phone number.
That tool would need to pass the same test the shadow stack already passes: private by default, owned by the rep, no manager view, no scoring, no recording. Not a sanctioned version of surveillance. A sanctioned version of the thing reps were already secretly doing right.
If you're going to use a personal AI tool, use one built for it
If you're going to use a personal AI tool to think through your deals, you might as well use one that was built for it. Sara doesn't report to your manager, doesn't record your conversations, and doesn't sync to your CRM. She just helps you think. Founders Club is invite-reviewed. Apply at getkeel.io/founders.
Here's the model worth keeping. Shadow IT isn't your reps going rogue. It's your reps drawing you a map — of every place the sanctioned stack failed them badly enough that they built their own. Read the map instead of confiscating it, and you'll find out exactly what your official tools are missing.
By the team at Keel. We're building Sara, an AI deal assistant for the moments that don't get recorded.