Why Shadow IT is bad

Data leaks

Files you put in a random app can be seen, shared, or sold by that app. You cannot take them back.

Fix: Keep work files in an approved, monitored place like /vault so sharing and access are logged.

Breaks privacy rules (GDPR)

Some laws say you must protect people's personal info. Random apps may not follow those laws, and your team gets the blame.

Fix: Use approved services that support data export and delete at /my/rights.

Breaks health rules (HIPAA)

Health info needs extra locks. Most free apps do not have them. One upload can break the law.

Fix: Never paste health info into unapproved apps; use only approved, access-controlled workspaces.

Fails security checks (SOC 2)

Big customers ask: who can see our data? If the answer is a mystery app, you fail the check and lose the deal.

Fix: Keep work in monitored services (/squads, /agents) where access and logs can be shown.

No backups

If the free app shuts down or deletes your account, your work is gone. Nobody has a copy.

Fix: Store work where backups and version history exist, such as /vault and /squads projects.

Passwords everywhere

Every new app is one more password. People reuse them, so one hack opens many doors.

Fix: Use fewer approved logins (one 4weird account) instead of a new password per tool.

Surprise bills

Free trials turn into paid plans on someone's credit card. Nobody knows what the team spends.

Fix: Buy through one approved path (/pricing, /account) so every coin spent is listed in one ledger.

Viruses and fake apps

Some look-alike apps hide viruses that steal files or lock your computer until you pay.

Fix: Install only from approved lists and links; ask before trying a new download.

No good goodbye

When someone leaves, their mystery apps keep your files. You cannot lock them out.

Fix: Keep membership in one place (/squads, orgs) so removing one person removes all access.