New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

LayerX Security’s State of AI Usage report finds that enterprise AI risk is concentrated among a small group of 'AI power users' and a handful of dominant platforms, while usage increasingly fragments across personal accounts, browser extensions, embedded copilots, and connectors that evade governance. The research highlights that ~6% of AI conversations contain sensitive data (with DeepSeek and ChatGPT showing the highest exposure rates), that nearly half of AI conversations occur via personal identities, and that extensions/connectors expand persistent access. It recommends identifying and monitoring high-risk users, blocking unmanaged personal accounts, shifting from binary allow/block policies to inline guardrails, and expanding visibility beyond 'approved' AI tools.