Nearly all environment, health, and safety (EHS+) teams are using artificial intelligence tools that have not been approved by their organizations [1].
This trend indicates a gap between the rapid adoption of AI and the formal governance frameworks required to manage data security and operational risks. As safety professionals integrate these tools into their workflows, the lack of official sanctioning suggests a systemic failure in organizational oversight.
According to research released April 23, 2026 [2], 95% of EHS+ teams are utilizing unapproved AI tools [1]. The study surveyed 2,000 senior leaders [1] to assess the current state of technology in the sector. The findings highlight a widespread disconnect between the tools employees are using and the same tools that corporate leadership has vetted for security and compliance.
Organizations are currently struggling with data integration and governance [3]. This struggle is often a cause for why AI adoption is accelerating faster than most organizations are prepared to manage [3]. The use of unsanctioned AI tools—often referred to as "shadow AI"—creates potential vulnerabilities in how sensitive safety data is handled.
While the technology is accelerating, the research indicates that there is a lack of trust in the ability of these tools to scale effectively across an organization. The reliance on unapproved tools suggests that professionals are seeking efficiency gains through AI, but the lack of a formal strategy creates a long-term risk to data integrity.
Global EHS+ teams are now facing a pressure to modernize their technology stacks. However, the gap between usage and governance remains a critical hurdle for the industry. The current state of technology suggests that the reliance on unapproved tools is not an isolated incident but a global phenomenon [3].
“95% of EHS+ teams are utilizing unapproved AI tools.”
The prevalence of 'shadow AI' within EHS+ teams signals a shift in professional expectations where workers are prioritizing efficiency over corporate protocol. For organizations, this means that the risk profile of their safety data is likely higher than currently reported in internal audits, as unsanctioned tools may not meet the same security standards as approved enterprise software.





