Shadow AI refers to employees using AI tools that have not been approved or governed by the organization. This can create risks such as disclosure of confidential information, data protection violations, and lack of oversight over how company data is processed.