Report by Skyhigh Security
2025 Cloud Adoption and Risk Report
Key Findings
Less than 10% of enterprises have implemented data protection policies and controls for AI applications.
In January 2025, customers uploaded a combined 176GB of data into the DeepSeek AI chatbot.
95% of AI applications are at medium or high risk for EU GDPR violation.
Only 22% of all AI applications are in adherence to one or more compliance certifications such as HIPAA, PCI, ISO, FISMA, and FedRAMP.
84% of AI applications don’t support ‘Data Encryption at Rest’.
In January 2025, Skyhigh Security recorded DeepSeek usage by 43% of customers.
94% of all AI services are at risk for at least one of the top Large Language Model (LLM) risk vectors, including prompt injection/jailbreak, malware generation, toxicity, and bias.
Data uploaded to AI applications is up 80%.
83% of AI applications don’t support integration with multi-factor authentication (MFA) tools
Enterprises use a staggering 320 AI cloud applications on average.
Skyhigh Security research reveals a 200% increase in AI application traffic within the last year. This compares to a 23% increase in traffic to non-AI applications.
Microsoft Copilot is used by 82% of all Skyhigh Security customers within their enterprise. This is up from 18% last year for Microsoft Copilot usage by Skyhigh Security customers. Within the same timeframe, traffic to Microsoft Copilot increased 3,600x and data uploads to Microsoft Copilot increased 6,000x.
11% of files uploaded to AI applications include sensitive corporate content.
Skyhigh Security research reveals a 200% increase in AI application traffic within the last year. This compares to a 23% increase in traffic to non-AI applications.