The average organization experienced 223 incidents of data policy violations related to generative AI applications each month from October 2024 to October 2025.

The average organization saw a twofold increase in data policy violations related to generative AI applications over the past year.

The top 25% of organizations experienced an average of 2,100 data policy violation incidents per month across 13% of their generative AI user base in 2025.

Regulated data accounted for 54% of data policy violations linked to personal cloud applications in 2025.