Turn clients’ shadow AI into a 2027 budget item

Their employees are already using AI, and their owners don’t know. Here’s a 30-day play to turn that gap into your next project.

Odds are, someone at one of your clients pasted a contract into ChatGPT today. Maybe it was a proposal, a spreadsheet of client names or an employee review they wanted to “make it sound more professional.” They may have used a personal account or a free plan that nobody approved.

The owner may have no idea, and you probably don’t either.

That’s shadow AI. You’ve seen this movie before with shadow IT, when employees signed up for personal file-sharing accounts because the approved tools were too slow. The difference now is what’s being shared. Your clients’ most sensitive information is going into tools nobody vetted.

The good news is that most owners aren’t ignoring this. Nobody has asked them about it yet. Now, while they’re building their 2027 budgets, you have a natural reason to ask.

Why Q4 is the window

Whatever lands in a client’s 2027 budget gets funded. Whatever doesn’t make it waits a year or shows up later as an emergency. Raise AI in March and it’s an unplanned expense. Raise it in your year-end review and it’s part of the plan.

Keep in mind that if you don’t start this conversation, someone else will: a software vendor, a consultant or the owner’s tech-savvy nephew. Whoever brings it up first usually ends up owning it.

The 30-day shadow AI play

Skip the AI strategy deck. You need four moves.

Move 1: Send a five-question staff survey. Keep it anonymous and short enough to finish in two minutes:

1. Which AI tools have you used for work in the past 30 days?
2. Do you use a personal account or a company account?
3. What do you use it for? (emails, documents, research, spreadsheets, other)
4. Have you ever put client, financial or employee information into an AI tool?
5. Would you use AI more if the company gave you an approved, secure tool?

That last question frames the results as “your staff want this, so let’s do it right” instead of “your staff are breaking the rules.”

Move 2: Check the admin console. Spend 15 minutes reviewing the third-party apps employees have connected to their Microsoft 365 or Google Workspace accounts. AI note-takers, writing assistants and browser add-ons tend to show up here, and you’ll often find tools the owner has never heard of.

Move 3: Bring the findings to the year-end review. One slide titled “AI in your business” with three things on it: how many people are using AI, which tools they use and what kind of data is going in. Then say something like:

“Your team is getting value from AI, and that’s a good thing. The problem is that most of it is happening on personal accounts, and some of it involves client data. Let’s make it safe and make it official in 2027.”

This approach doesn’t scare anyone or take AI away. It positions you as the partner who helps them use it well.

Move 4: Put it in the budget. Offer three line items and let the client pick:

• AI readiness assessment. A one-time project to inventory tools, find where sensitive data is exposed and recommend next steps.
• AI acceptable-use policy. A plain-language document that spells out approved tools, what data stays out and who to ask, plus staff sign-off.
• Ongoing AI management. Approved tools set up and secured, accounts tied to the business instead of personal logins and a quarterly check-in. This is where AI becomes recurring revenue.

Not every client will buy all three. Getting even the assessment into the 2027 budget puts you in charge of everything that follows.

Start this week

Pick your five best clients, the ones with year-end reviews coming up, and send each of them the survey this week. Then run the admin check before you meet and add the slide.

Some owners will shrug. Others will look at the results and ask, “What do we do about this?” That question is your 2027 project.

Related: How AI adds capacity in a volatile market