82% of organizations have found shadow AI as agents collect permissions and retain access, while only 21% have a proper shutdown process.