What Is Shadow IT Spending?

Shadow IT spending refers to the cost incurred by software tools that employees adopt, pay for, and use independently — without going through a formal approval or procurement process. The "shadow" in the name reflects that these tools exist outside the visibility of IT, finance, or operations teams.

Shadow IT is not inherently malicious. Most of it happens because a team member finds a tool that solves an immediate problem, signs up with a personal card to get started quickly, and either forgets to expense it or expenses it informally without entering it into any system of record.

Why Shadow IT Spending Is a Problem

Budget unpredictability

When software purchases are made independently across the organisation, finance has no reliable view of total SaaS spend. Actual costs routinely exceed planned software budgets when shadow IT is not accounted for.

Subscription waste

Shadow IT tools are often abandoned but not cancelled. An employee signs up for a project tool, uses it for a sprint, moves on to a different solution, and leaves the subscription running on their card. When the employee eventually leaves the company, the subscription continues billing — with no one left to cancel it.

Duplicate functionality

Without visibility across the organisation, multiple teams independently adopt tools that do the same job. Team A uses Notion. Team B uses Confluence. Team C uses a personal Obsidian licence. The same function is being paid for three times.

Security and compliance exposure

Every unapproved tool is a potential data pathway that has not been reviewed for compliance, data residency, or access controls. For regulated industries, this can create audit findings or policy violations.

How Common Is Shadow IT?

Shadow IT accelerated significantly during the shift to remote work, when employees increasingly used personal devices, personal cards, and personal email addresses to access work tools. In many organisations, the line between "personal tool I use for work" and "company software subscription" has become blurred — creating significant tracking challenges.

How to Find Shadow IT Spending

Email receipt scanning

Search business email inboxes — and any work-adjacent personal email addresses — for billing confirmations, invoices, and subscription receipts. This surfaces tools purchased through any payment method, regardless of which card was used. It often finds tools that have never appeared on an expense report.

Expense report analysis

Review expense submissions for SaaS-related charges and cross-reference them against your official software register. Any tool on an expense report that is not on the software register is a shadow IT candidate.

Team surveys

Ask each department: "What tools do you use regularly that are not on our approved software list?" This surfaces tools that employees pay for personally and never expense. It also tends to reveal redundant tools across teams.

Card statement review

Review company card and expense card statements for recurring charges from software vendors. Any vendor not on the approved list is worth investigating.

How to Manage Shadow IT Without Blocking Productivity

The goal is visibility and consolidation, not prohibition. Blocking all unapproved software typically drives tools further underground. A more effective approach:

• Create a lightweight approval process — a simple form or Slack message to request a new tool. This channels adoption through a visible process without adding significant friction.
• Run quarterly discovery audits to catch new shadow IT before it compounds.
• Establish a software register — a single source of truth for approved tools, with costs, owners, and renewal dates.
• Set a spending threshold — tools under $X per month per user might be approved automatically; above that, require sign-off.
• Give teams a budget — a per-team or per-person software allowance that individuals can use without individual approval, but that appears in a central register.

How SubDupes Helps Surface Shadow IT

SubDupes discovers subscriptions from email receipts and invoices — including tools purchased independently by employees and billed to personal or departmental accounts. Because it does not require bank access, it works across payment methods: corporate cards, personal cards used for work, and digital wallets.

For teams managing shadow IT, SubDupes provides a consolidated subscription inventory that can serve as a starting point for a software register — with renewal dates, costs, and duplicate flags already included. New tools that appear in email receipts are surfaced automatically, making it easier to maintain visibility without relying on employees to self-report.