Cross-check the sources
The agent reads in the network inventory, the procurement system and the cloud billing. For each item, it establishes which sources it appears in.
Three export files, including Cloud-Abrechnung_2026-07.csvShadow IT does not start on the network. It starts on a specialist department's cost centre.
Cross-checks sources to find what lives on the network but is missing from the inventory.
Public administration
Four processes that take up the most time today
Developed in Germany · Hosted in the EU or on-premises
Delivered together with
Sovereign hosting in Germany, single-tenant from the first user.
Legal, tax and compliance expertise for legally sound deployment.
Advisory and implementation for the public sector, starting with the AI readiness assessment.
A monthly charge only stands out when three sources are compared.
A specialist department pays for a tool out of its own budget. Information security only finds out when someone checks the cloud billing against the inventory and procurement records.
1monthly chargeA specialist department pays for a tool through its own cost centre.
1supplier listThe cloud billing shows a contractual partner that procurement never had on record.
0inventory entriesThe network inventory has no line for this tool.
23inventory reconciliationOnly a comparison of all three sources brings 23 such items to light.
The cross-check turns up 23 items with no inventory entry, six of them AI subscriptions; 50% more assets recorded is the result of a monthly run, not a one-off exercise.
The 50% increase in recorded assets comes from the agent's fact sheet. The four lines trace the usual path of a decentralised purchase and are not based on measurement.
Three steps through the process.
The agent brings to light any charge with no inventory entry; the head of IT decides whether the tool is permissible.
Find unknown assets
The agent picks out the items missing from the inventory. For each, it names the cost centre and the contractual partner.
Findings list with 23 items not in the inventoryRecord AI tools
The agent flags the subscriptions that involve AI services. It files them separately for information security.
AI tools note, 6 subscriptions with cost centre and contractual partnerWhat the agent does not do.
It does not block the tools it finds.
It produces a findings list. The head of IT decides whether to cancel, block or tolerate it.
It does not assess data protection.
It names the tool, cost centre and contractual partner. Whether personal data is involved is for the data protection officer to clarify.
It cannot see a subscription that leaves no trace in the three sources.
It compares cloud billing, network inventory and procurement system. If an employee pays for a tool privately and uses it outside the internal network, it is not among the 23 items.
Connected systems
- Budget system
- network inventory
- procurement system
Operations
- Deployment modelEU cloud, private cloud or on-premises
- Data processingGDPR-compliant, no model training on your data
- Responsible teamsInformation security, IT operations, data protection
The questions that come up before the first meeting.
How quickly is the Shadow IT Discovery Agent ready to use?
A pilot typically runs on your own data within 4 to 6 weeks. The agent connects to your existing systems rather than running as a separate, parallel environment.
Where is the data processed?
EU cloud, private cloud or on-premises. Processing is GDPR-compliant and models are never trained on your data. Details in the Trust Center.
Where does the figure “50% more assets recorded” come from?
It is based on experience from comparable projects and process benchmarks, not a commitment. We work out the realistic effect for your organisation during the assessment before the pilot.
Related agents.
- BSI IT-Grundschutz Modelling Agent50%less modelling effortInformation security, audit preparation
- IT Structure Analysis Agent60%less survey effortInformation Security, IT Management
- Audit Readiness Agent50%less audit preparationInformation security, internal audit, leadership
- IT Risk Prioritisation Agent50%faster prioritisationInformation Security, Management, IT Governance
- Survey Follow-Up Agent55%fewer follow-up roundsInformation security, organisational units
- Committee Paper Agent60%less preparation timeCouncil office, district council office, heads of department