Taking back shadow IT

With Sinfonia, turn your business teams’ unofficial tools into secure applications, integrated into your IT system.

When the official system can’t keep up

The official system was configured for the company as it was five years ago. Every gap calls for a ticket, a budget, a project. After a while, teams give up and build a parallel system.

This system lives in spreadsheets, emails and Access databases. Nobody designed it, but everyone depends on it. It is at the mercy of a resignation or a transfer.

A risk, but also business knowledge

The usual responses treat shadow IT as an attack surface: detect, inventory, ban. The risk is real: personal data on machines outside any controlled perimeter, work at a standstill when the right person is away, hours of re-keying every week.

A tracking spreadsheet or an Access database also carries rules the ERP never took in. Banning the file without taking over its logic sends teams to a new workaround. Low-code takes over the application, not the gap that gave rise to it: at the next gap, the file comes back.

Shadow IT is spreading to AI

Generative AI is following the same path. Only 32% of employees in France consistently use generative AI tools approved by their company, according to Ipsos (June 2025). Among employees who use AI at work, 66% have already used a tool they believed was banned, according to PagerDuty (June 2026).

The risk changes scale: an AI agent plugged into these files reads and acts outside any control.

Transform rather than ban

Sinfonia starts from existing files: spreadsheets, bundles of documents, hand-drawn diagrams. Sinfonia automatically extracts the logic and composes the matching application. Each application taken over joins the IT landscape map, with a readable data model. The applications include the company’s security and audit rules, and live alongside the official systems or connect to them.

The applications then live with the business: Sinfonia spots new practices and proposes adding them. Each change first runs on a copy of the real data, then goes live once a person approves it: the file on the side loses its reason to exist.

Rules born from the application

Each composed application carries its own rules for AI agents: the actions allowed to an agent, for whom, within what limits. The rules are born from the application and evolve with it. Teams talk to the software from the AI assistant they already use, and the same rules apply whichever it is.

Data filtering and hosting: see Security and data.

Test it on one process

1. 01
   Seeding

   Three to five representative items of a process to take over: invoices, spreadsheets, screens.

2. 02
   Composition

   Sinfonia composes a working application from these items.

3. 03
   Review

   We use the application together, then hand over its data model, whether or not you go further.

The test takes an hour and is free. Your files are used only for the test and deleted after the review.