Why do companies have no visibility into what staff share with AI tools?
Because the content travels inside encrypted connections to services the company does not control. When someone pastes text into a chatbot in a browser, the firewall sees an HTTPS connection to the provider, and at most the name of the service; the prompt itself is encrypted end to end between the browser and the provider. Personal accounts keep the history on the provider's side, out of the company's reach. AI features inside approved apps look like ordinary traffic to those apps, and phones on mobile data never touch the company network at all. Getting content-level visibility needs control at one of the ends: a business account whose admin console and audit logs show usage, data-loss prevention in the browser or on the endpoint, or an interception proxy, each with its own privacy questions. What the network can give you is the next best thing: which hosts use which AI services, when and how much. NetSenX shows exactly that from the Pro plan.
This answer is part of the guide: Shadow AI: what it is and how to find it