Report by Harmonic Security
GenAI in the Enterprise: It’s Getting Personal
Key Findings
15% of all sensitive data uploaded to generative AI tools involves personal or employee data, including identifiers such as names and addresses.
The average enterprise uploaded more than three times as much data to generative AI platforms in Q3 2025, with 4.4GB compared to 1.32GB in Q2 2025.
25% of all sensitive data disclosures involve technical data, with 65% of that consisting of proprietary source code copied into generative AI tools.
12% of all sensitive data exposures originate from personal accounts, including free versions of generative AI tools.
The average organization used 27 distinct AI tools in Q3 2025, down from 23 new tools introduced in Q2 2025.
57% of sensitive data uploaded to generative AI tools is classified as business or legal data, with 35% of that involving contract or policy drafting.
26.4% of all file uploads to generative AI tools contained sensitive data between July and September 2025, an increase from 22% in Q2 2025.