Most companies lack automated AI data protections. Policies alone cannot prevent sensitive data sharing. The firm's AI policy exists, but it's buried in an employee handbook that most people rarely revisit after onboarding. That gap between having an AI policy and having technology that enforces it is the real story behind one of the most widely misunderstood statistics about workplace AI. Separate Kiteworks research found 43% of employees admitted sharing sensitive information with AI tools without their employer's knowledge, highlighting the continued growth of so-called "shadow AI."