Skyhigh Security

Less than 10% of enterprises have implemented data protection policies and controls for AI applications.

In January 2025, customers uploaded a combined 176GB of data into the DeepSeek AI chatbot.

95% of AI applications are at medium or high risk for EU GDPR violation.

Only 22% of all AI applications are in adherence to one or more compliance certifications such as HIPAA, PCI, ISO, FISMA, and FedRAMP.

84% of AI applications don’t support ‘Data Encryption at Rest’.

In January 2025, Skyhigh Security recorded DeepSeek usage by 43% of customers.

94% of all AI services are at risk for at least one of the top Large Language Model (LLM) risk vectors, including prompt injection/jailbreak, malware generation, toxicity, and bias.

Data uploaded to AI applications is up 80%.

83% of AI applications don’t support integration with multi-factor authentication (MFA) tools

Enterprises use a staggering 320 AI cloud applications on average.

Skyhigh Security research reveals a 200% increase in AI application traffic within the last year. This compares to a 23% increase in traffic to non-AI applications.

Microsoft Copilot is used by 82% of all Skyhigh Security customers within their enterprise. This is up from 18% last year for Microsoft Copilot usage by Skyhigh Security customers. Within the same timeframe, traffic to Microsoft Copilot increased 3,600x and data uploads to Microsoft Copilot increased 6,000x.

11% of files uploaded to AI applications include sensitive corporate content.

Skyhigh Security research reveals a 200% increase in AI application traffic within the last year. This compares to a 23% increase in traffic to non-AI applications.