Skyhigh Security

Less than 10% of enterprises have implemented data protection policies and controls for AI applications.

In January 2025, customers uploaded a combined 176GB of data into the DeepSeek AI chatbot.

Only 22% of all AI applications are in adherence to one or more compliance certifications such as HIPAA, PCI, ISO, FISMA, and FedRAMP.

84% of AI applications don’t support ‘Data Encryption at Rest’.

95% of AI applications are at medium or high risk for EU GDPR violation.

In January 2025, Skyhigh Security recorded DeepSeek usage by 43% of customers.

94% of all AI services are at risk for at least one of the top Large Language Model (LLM) risk vectors, including prompt injection/jailbreak, malware generation, toxicity, and bias.

83% of AI applications don’t support integration with multi-factor authentication (MFA) tools

Data uploaded to AI applications is up 80%.

Enterprises use a staggering 320 AI cloud applications on average.

Microsoft Copilot is used by 82% of all Skyhigh Security customers within their enterprise. This is up from 18% last year for Microsoft Copilot usage by Skyhigh Security customers. Within the same timeframe, traffic to Microsoft Copilot increased 3,600x and data uploads to Microsoft Copilot increased 6,000x.

Skyhigh Security research reveals a 200% increase in AI application traffic within the last year. This compares to a 23% increase in traffic to non-AI applications.

11% of files uploaded to AI applications include sensitive corporate content.

Skyhigh Security research reveals a 200% increase in AI application traffic within the last year. This compares to a 23% increase in traffic to non-AI applications.