How An Enterprise AI Platform Can Help Protect An Institution’s IP

Husein Sharaf leads Cloudforce, a Frontier AI Firm based in the DC-metro, recently named Microsoft’s global Education Partner of the Year.

Nearly every institution I talk to describes its AI governance posture in roughly the same way: “It’s a work in progress.” I used to accept that answer. Then I started asking a different question in those meetings: Where did your staff’s prompts go this morning?

I have yet to get a complete answer.

That is the immediate problem. An institution without approved, enterprise-wide AI access remains exposed while its evaluation continues. Employees are already using public tools to draft grant proposals, summarize constituent correspondence, review procurement language and sharpen negotiation memos. Much of that activity sits outside the institution’s contracts, identity controls and audit logs.

The available research points in the same direction. A 2025 Mindgard survey of more than 500 cybersecurity professionals found that 56% knew employees were using AI without approval, while another 22% suspected it. Only 32% said their organizations actively monitored AI usage.

Leadership may still be evaluating, but the workforce has moved on.

Evaluation periods still carry risk.

Employees rarely wait for procurement to finish a review before asking a chatbot for help. They use whatever is already open in a browser, especially when a deadline is close and the approved options are unclear.

The contractual terms matter here. Public and consumer AI services can give providers broad rights to use prompts or outputs, depending on the product, account type and settings. Enterprise agreements commonly provide stronger confidentiality and data-use protections. An employee using a personal account may, therefore, place institutional information under terms that leadership never reviewed.

That outcome comes from ordinary work. Someone needed help, found a useful tool and clicked through.