Photo of a screen
Sensitive information photographed from a company screen and uploaded through a personal device.
SHADOW AI & PERSONAL-DEVICE CONTROL PACK
You’ve secured your endpoints.
What about the AI use happening on personal phones?
AI Beyond the Laptop helps UK IT Managers, Cyber Security Managers and small businesses identify, assess and manage shadow AI risks that traditional endpoint security may not detect. Our practical, editable shadow AI risk assessment and governance toolkit addresses unmanaged AI use, personal AI accounts and the handling of business information on personal devices.
Personal phones. Personal AI accounts. Photos of screens. Recorded meetings. This is the shadow AI gap your endpoint controls may never see.
£99 launch price · One-off purchase · Editable files · Planned standard price £199 from early 2027
THE BLIND SPOT
Your AI controls may end where the managed device ends.
Approved tools, corporate accounts, browser controls, endpoint security, SSO and policy can all help. But they may tell you very little about what happens when someone reaches for their own phone.
Recorded meeting
A meeting recorded and fed into a personal AI account outside company systems.
Copy across environments
Corporate information copied from a managed device into an unmanaged AI session.
Invisible AI use
Employees using AI tools and accounts that never appear in corporate endpoint telemetry.
You can lock down the endpoint without locking down the information.
WHAT IT HELPS YOU DO
Find the gap. Decide what’s acceptable. Put something usable in place.
AIBtL is not another generic AI policy template. It is a connected set of practical, editable tools designed to help you move from “we probably have a gap here” to “we’ve assessed it, made decisions, briefed people, and put controls in place.”
Assess
Identify where personal-device and unmanaged AI use may sit outside your existing controls.
Decide
Define what is acceptable, what needs approval, and what should not happen.
Control
Put practical governance and working controls around unmanaged AI use.
Brief
Give employees clear, usable guidance without burying them in policy language.
Respond
Handle reported use, exceptions and incidents consistently.
Show
Give leadership evidence of what you found, what you decided and what changed.
INSIDE THE PACK
See what you’re buying
Five practical jobs, covered by one connected toolkit. Start with the blind spot, decide what needs controlling, brief people clearly, and have a response ready when something goes wrong.
START HERE GUIDE
How to use the pack, what to do first, and a practical route through the material.
How to use the pack, what to do first, and a practical route through the material.
ASSESSMENT TOOL
Surface unknown or exposed personal-device AI use and record what needs attention.
Surface unknown or exposed personal-device AI use and record what needs attention.
POLICY / CONTROL
Editable governance, control and declaration material for unmanaged AI use.
Editable governance, control and declaration material for unmanaged AI use.
STAFF BRIEFING
Ready-to-edit guidance and presentation material for employees and leadership.
Ready-to-edit guidance and presentation material for employees and leadership.
INCIDENT / RESPONSE
A consistent way to handle reported use, exceptions, follow-up and evidence.
A consistent way to handle reported use, exceptions, follow-up and evidence.
15 editable Word, PowerPoint and Excel artefacts designed to work together — not a folder full of disconnected templates.
WHAT'S INCLUDED
15 editable artefacts. One connected pack.
Assess & understand
- Personal-device AI blind-spot assessment
- Current-state review material
- AI use / behaviour recording tools
- Scope and terminology guidance
Decide & govern
- AI governance and control material
- Named AI use declaration
- Decision and ownership templates
- Practical policy artefacts
Brief & communicate
- Employee guidance
- Leadership briefing material
- Staff presentation content
- Practical communication tools
Respond & evidence
- Incident handling material
- Exception and follow-up tools
- Governance evidence
- Management reporting support
WHO IT'S FOR
Built for people who actually have to deal with this.
Designed primarily for IT Managers, Cyber Managers, Heads of IT, and security or governance leads — especially in small and mid-sized organisations where the person spotting the risk is often also the person expected to do something about it.
It probably isn’t for you if…
- You want legal advice.
- You want an ISO certification pack.
- You want someone else to run your AI governance programme.
- You only need a generic AI policy template.
There are plenty of free ones already.
FREE CHECK
Not sure you have the problem?
Run the free 10-Minute Personal Device AI Blind Spot Check.
A short diagnostic designed to expose where personal-device and unmanaged AI use may sit outside your current controls.
No giant framework. No forty-question maturity assessment. No sales call required to understand the result.
Run the Free Blind Spot CheckNo login. No sales call. Your answers stay in your browser.
COMMON QUESTIONS
Shadow AI risks: questions IT teams ask
What is shadow AI in the workplace?
Shadow AI is the use of AI tools, services or accounts outside an organisation’s approved or governed environment. When business information is involved, it can create security, privacy and governance risks.
Can endpoint security detect employees using AI on personal phones?
Endpoint and corporate security controls may monitor managed devices, but they generally have limited visibility into AI activity conducted entirely on personal devices and accounts. Policies, employee guidance and reporting processes help address this blind spot.
How can an organisation assess shadow AI risks?
Start by understanding where staff use AI, which personal accounts or devices are involved, what information may be shared and which controls already exist. Record gaps, identify owners and prioritise practical safeguards. Our free Shadow AI Blind Spot Check provides a starting point.
Does a business need a separate shadow AI policy?
Not necessarily. Existing acceptable-use, information-security and data-protection policies may be extended to address unmanaged AI. Staff need clear rules about permitted use, approvals and reporting potential information exposures.
LAUNCH PRICE
AI Beyond the Laptop
£99
one-off purchase
- 15 editable artefacts
- Word, PowerPoint and Excel files
- Practical assessment and control tools
- Staff guidance and briefing material
- Governance and incident-response material
- No subscription
- Yours to keep and adapt
Get the AIBtL Pack — £99
Planned standard price: £199 from early 2027.
NO PRETEND AUTHORITY
Practical tools, not pretend authority.
AIBtL is designed to save IT and cyber teams time by providing a coherent starting point for addressing personal-device and unmanaged AI use.
It is not legal advice, certification, or a substitute for your organisation’s HR, legal, data-protection or compliance review.
You know your organisation. The pack gives you something practical to work from.