{
 "title": "Shadow IT Index: March 2026",
 "index": "Shadow IT Index",
 "published": "2026-03-01",
 "updated": "2026-10-07",
 "source": "Torii Research, anonymized and aggregated usage data",
 "url": "https://www.toriihq.com/research/reports/shadow-it-index-march-2026",
 "rank_note": "Ranked by adoption.",
 "rows": [
  {
   "rank": 1,
   "app": "OpenAI Codex",
   "category": "Developer Tools",
   "theme": "AI coding and building",
   "ai_native": true,
   "website": "https://openai.com/codex/",
   "adoption_pct": 33,
   "shadow_it_index": 89,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 2,
   "app": "ChatBox AI",
   "category": "Productivity",
   "theme": "AI assistants",
   "ai_native": true,
   "website": "https://chatboxapp.ai",
   "adoption_pct": 16,
   "shadow_it_index": 83,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 3,
   "app": "Avenue",
   "category": "Operations",
   "theme": "Ops, HR, and finance",
   "ai_native": false,
   "website": "https://avenue.app",
   "adoption_pct": 15,
   "shadow_it_index": 91,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 4,
   "app": "MNTN",
   "category": "Sales & Marketing",
   "theme": "Sales, marketing, and CX",
   "ai_native": false,
   "website": "https://mountain.com",
   "adoption_pct": 14,
   "shadow_it_index": 78,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 5,
   "app": "Travis CI",
   "category": "Developer Tools",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://www.travis-ci.org",
   "adoption_pct": 9,
   "shadow_it_index": 69,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 6,
   "app": "DX Insights",
   "category": "Developer Tools",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://getdx.com",
   "adoption_pct": 9,
   "shadow_it_index": 69,
   "soc2_claimed": true,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 7,
   "app": "Workplace",
   "category": "IT & Security",
   "theme": "Work suites and collaboration",
   "ai_native": false,
   "website": "https://work.facebook.com",
   "adoption_pct": 9,
   "shadow_it_index": 71,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 8,
   "app": "Sterling",
   "category": "Human Resource",
   "theme": "Ops, HR, and finance",
   "ai_native": false,
   "website": "https://sterlingcheck.com",
   "adoption_pct": 8,
   "shadow_it_index": 75,
   "soc2_claimed": true,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 9,
   "app": "Airplane.dev",
   "category": "Developer Tools",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://www.airplane.dev",
   "adoption_pct": 7,
   "shadow_it_index": 82,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 10,
   "app": "ARInsights",
   "category": "Analytics & BI",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://arinsights.com",
   "adoption_pct": 7,
   "shadow_it_index": 81,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 11,
   "app": "Crystal",
   "category": "Human Resource",
   "theme": "Sales, marketing, and CX",
   "ai_native": true,
   "website": "https://www.crystalknows.com",
   "adoption_pct": 6,
   "shadow_it_index": 72,
   "soc2_claimed": true,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 12,
   "app": "SHI",
   "category": "Operations",
   "theme": "Ops, HR, and finance",
   "ai_native": false,
   "website": "https://www.shi.com",
   "adoption_pct": 6,
   "shadow_it_index": 68,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 13,
   "app": "Fountain",
   "category": "Human Resource",
   "theme": "Ops, HR, and finance",
   "ai_native": false,
   "website": "https://fountain.com",
   "adoption_pct": 6,
   "shadow_it_index": 77,
   "soc2_claimed": true,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 14,
   "app": "Pocket",
   "category": "Productivity",
   "theme": "Personal productivity",
   "ai_native": false,
   "website": "https://getpocket.com",
   "adoption_pct": 6,
   "shadow_it_index": 74,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 15,
   "app": "Clara",
   "category": "Productivity",
   "theme": "AI agents",
   "ai_native": true,
   "website": "https://www.claralabs.com",
   "adoption_pct": 5,
   "shadow_it_index": 77,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 16,
   "app": "Kimi",
   "category": "Productivity",
   "theme": "AI assistants",
   "ai_native": true,
   "website": "https://www.kimi.com",
   "adoption_pct": 5,
   "shadow_it_index": 86,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 17,
   "app": "21st.dev",
   "category": "Developer Tools",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://21st.dev",
   "adoption_pct": 5,
   "shadow_it_index": 84,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 18,
   "app": "Continue.dev",
   "category": "Developer Tools",
   "theme": "AI coding and building",
   "ai_native": true,
   "website": "https://www.continue.dev",
   "adoption_pct": 5,
   "shadow_it_index": 94,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 19,
   "app": "Butter.us",
   "category": "Operations",
   "theme": "Work suites and collaboration",
   "ai_native": false,
   "website": "https://www.butter.us",
   "adoption_pct": 5,
   "shadow_it_index": 76,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 20,
   "app": "Harvest",
   "category": "Productivity",
   "theme": "Personal productivity",
   "ai_native": false,
   "website": "https://www.getharvest.com",
   "adoption_pct": 5,
   "shadow_it_index": 65,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 21,
   "app": "Pencil",
   "category": "Sales & Marketing",
   "theme": "AI content and media",
   "ai_native": true,
   "website": "https://trypencil.com",
   "adoption_pct": 4,
   "shadow_it_index": 85,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 22,
   "app": "Buffer",
   "category": "Sales & Marketing",
   "theme": "Sales, marketing, and CX",
   "ai_native": false,
   "website": "https://www.buffer.com",
   "adoption_pct": 4,
   "shadow_it_index": 69,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 23,
   "app": "Genspark",
   "category": "Productivity",
   "theme": "AI agents",
   "ai_native": true,
   "website": "https://www.genspark.ai",
   "adoption_pct": 4,
   "shadow_it_index": 82,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 24,
   "app": "Lucid",
   "category": "Productivity",
   "theme": "Work suites and collaboration",
   "ai_native": false,
   "website": "https://www.lucid.co",
   "adoption_pct": 4,
   "shadow_it_index": 62,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 25,
   "app": "Fern",
   "category": "Developer Tools",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://buildwithfern.com",
   "adoption_pct": 4,
   "shadow_it_index": 78,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 26,
   "app": "Arena",
   "category": "Sales & Marketing",
   "theme": "Sales, marketing, and CX",
   "ai_native": false,
   "website": "https://www.arenahq.io",
   "adoption_pct": 4,
   "shadow_it_index": 78,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 27,
   "app": "Doodle",
   "category": "Productivity",
   "theme": "Personal productivity",
   "ai_native": false,
   "website": "https://www.doodle.com",
   "adoption_pct": 4,
   "shadow_it_index": 73,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 28,
   "app": "Powerdrill",
   "category": "Analytics & BI",
   "theme": "Developer and data tools",
   "ai_native": true,
   "website": "https://powerdrill.ai",
   "adoption_pct": 4,
   "shadow_it_index": 81,
   "soc2_claimed": false,
   "iso27001_claimed": true,
   "gdpr_claimed": false
  },
  {
   "rank": 29,
   "app": "Netlify",
   "category": "Developer Tools",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://www.netlify.com",
   "adoption_pct": 4,
   "shadow_it_index": 68,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 30,
   "app": "Cornerstone OnDemand",
   "category": "Human Resource",
   "theme": "Ops, HR, and finance",
   "ai_native": false,
   "website": "https://www.cornerstoneondemand.com",
   "adoption_pct": 4,
   "shadow_it_index": 72,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 31,
   "app": "Clipchamp",
   "category": "Productivity",
   "theme": "Design and video",
   "ai_native": false,
   "website": "https://www.clipchamp.com",
   "adoption_pct": 4,
   "shadow_it_index": 76,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 32,
   "app": "SEOGets",
   "category": "Analytics & BI",
   "theme": "Sales, marketing, and CX",
   "ai_native": false,
   "website": "https://seogets.com",
   "adoption_pct": 3,
   "shadow_it_index": 100,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 33,
   "app": "Pinterest",
   "category": "Sales & Marketing",
   "theme": "Personal and consumer apps",
   "ai_native": false,
   "website": "https://www.pinterest.com",
   "adoption_pct": 3,
   "shadow_it_index": 81,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 34,
   "app": "Rocketreach",
   "category": "Sales & Marketing",
   "theme": "Sales, marketing, and CX",
   "ai_native": false,
   "website": "https://www.rocketreach.co",
   "adoption_pct": 3,
   "shadow_it_index": 79,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 35,
   "app": "Microsoft Graph",
   "category": "Developer Tools",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://developer.microsoft.com/en-us/graph",
   "adoption_pct": 3,
   "shadow_it_index": 73,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 36,
   "app": "Notion Mail",
   "category": "Productivity",
   "theme": "Personal productivity",
   "ai_native": true,
   "website": "https://www.notion.com/product/mail",
   "adoption_pct": 3,
   "shadow_it_index": 74,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 37,
   "app": "tweakcn",
   "category": "Design",
   "theme": "Developer and data tools",
   "ai_native": false,
   "website": "https://tweakcn.com",
   "adoption_pct": 3,
   "shadow_it_index": 85,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 38,
   "app": "GoTo",
   "category": "Operations",
   "theme": "Work suites and collaboration",
   "ai_native": false,
   "website": "https://www.goto.com",
   "adoption_pct": 3,
   "shadow_it_index": 70,
   "soc2_claimed": false,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 39,
   "app": "Feedly",
   "category": "Sales & Marketing",
   "theme": "Sales, marketing, and CX",
   "ai_native": false,
   "website": "https://www.feedly.com",
   "adoption_pct": 3,
   "shadow_it_index": 64,
   "soc2_claimed": false,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 40,
   "app": "Thunderbird",
   "category": "Productivity",
   "theme": "Personal productivity",
   "ai_native": false,
   "website": "https://www.thunderbird.net",
   "adoption_pct": 3,
   "shadow_it_index": 78,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 41,
   "app": "Opal",
   "category": "Sales & Marketing",
   "theme": "Sales, marketing, and CX",
   "ai_native": false,
   "website": "https://www.workwithopal.com",
   "adoption_pct": 4,
   "shadow_it_index": 100,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 42,
   "app": "Quizlet",
   "category": "Human Resource",
   "theme": "Personal and consumer apps",
   "ai_native": false,
   "website": "https://www.quizlet.com",
   "adoption_pct": 4,
   "shadow_it_index": 93,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 43,
   "app": "MiniMax.io",
   "category": "Developer Tools",
   "theme": "AI coding and building",
   "ai_native": true,
   "website": "https://www.minimax.io",
   "adoption_pct": 4,
   "shadow_it_index": 93,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 44,
   "app": "Scribd",
   "category": "Human Resource",
   "theme": "Personal and consumer apps",
   "ai_native": false,
   "website": "https://www.scribd.com",
   "adoption_pct": 4,
   "shadow_it_index": 93,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 45,
   "app": "Fellow",
   "category": "Productivity",
   "theme": "AI notes and voice",
   "ai_native": true,
   "website": "https://fellow.app",
   "adoption_pct": 4,
   "shadow_it_index": 93,
   "soc2_claimed": true,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 46,
   "app": "Picsart",
   "category": "Design",
   "theme": "Design and video",
   "ai_native": false,
   "website": "https://www.picsart.com",
   "adoption_pct": 4,
   "shadow_it_index": 93,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": false
  },
  {
   "rank": 47,
   "app": "SignNow",
   "category": "Operations",
   "theme": "Ops, HR, and finance",
   "ai_native": false,
   "website": "https://www.signnow.com",
   "adoption_pct": 4,
   "shadow_it_index": 87,
   "soc2_claimed": true,
   "iso27001_claimed": true,
   "gdpr_claimed": true
  },
  {
   "rank": 48,
   "app": "Vivaldi",
   "category": "Productivity",
   "theme": "Browsers and search",
   "ai_native": false,
   "website": "https://vivaldi.com",
   "adoption_pct": 4,
   "shadow_it_index": 87,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 49,
   "app": "Imagine art",
   "category": "Design",
   "theme": "AI content and media",
   "ai_native": true,
   "website": "https://www.imagine.art",
   "adoption_pct": 4,
   "shadow_it_index": 87,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  },
  {
   "rank": 50,
   "app": "Higgsfield",
   "category": "Design",
   "theme": "AI content and media",
   "ai_native": true,
   "website": "https://higgsfield.ai",
   "adoption_pct": 4,
   "shadow_it_index": 81,
   "soc2_claimed": false,
   "iso27001_claimed": false,
   "gdpr_claimed": true
  }
 ]
}