Unsanctioned AI use is creating a governance gap in many workplaces, where employees may move sensitive information into tools that sit outside approved controls.