Any IT resource not approved by an organization’s IT team that members of the organization use to store or access the organization’s data. An example is an employee uploading the organization’s data to ChatGPT for help preparing a report (when the organization has not approved the use of ChatGPT).