A sales manager connects an AI assistant to her inbox so it can draft follow-ups. An engineer gives a coding agent access to a staging database. Someone in finance builds an automation that reads invoices and posts to a vendor portal. Nobody asked IT. Nobody told security. Each person saved an hour a day. That is how shadow AI agents arrive. They come through a helpful afternoon, not a breach. We run a software company, and we speak with CTOs, CIOs, CISOs, COOs, and IT managers every week. The question has changed. Two years ago it was “should we adopt AI?” Now it is “how many AI tools are already running here, and what can they touch?” Most leaders cannot answer the second part. This guide helps you answer it, then act on it. Here is what you will get: how shadow AI agents enter a business, the shadow AI risks that matter, a six-step plan for AI agent security that brings shadow AI agents under control, and a checklist to decide whether you need a formal AI integration and security assessment. What Are Shadow AI Agents? Shadow AI agents are AI tools that read company data or take actions in company systems without approval, ownership or visibility from IT and security. The word “agent” matters. A chatbot answers a question. An agent opens your files, calls other tools, sends messages and changes records, usually under the login of the employee who set it up. That gap between answering and acting is why shadow AI agents need their own plan, separate from the old shadow IT playbook. A rogue spreadsheet sits still. Shadow AI agents keep working at 3 a.m. with permissions nobody reviewed. Classic shadow IT Shadow AI agents What it does Stores or moves data Reads, decides and acts on data Access One app, one login Many apps through connected accounts Visibility Shows up in software lists Often invisible to software lists Spread Slow, needs installs Fast, one click or one API key Failure mode Data sits in the wrong place Wrong action runs at machine speed The scale of shadow AI agents is larger than most leaders assume. Reco’s State of Agent Security 2026 report found that about 80% of the AI tools in its telemetry operated without IT oversight, and that small and mid-size companies averaged 414 unsanctioned AI tools per 1,000 employees. IBM’s 2025 Cost of a Data Breach report found that one in five breached organisations had a breach involving shadow AI, and that it added roughly $670,000 to breach costs. Treat these as directional numbers, since methods differ between studies. The direction is still clear. How Shadow AI Agents Enter Your Organisation Most shadow AI agents do not come from bad intent. They come from pressure to move faster than approved tooling allows. When the official route takes six weeks and a free tool takes six minutes, people pick the free tool. Entry route What it looks like Why it slips through Personal AI accounts An employee pastes a contract into a personal chatbot Runs in a browser, nothing to install Browser extensions and meeting bots A note-taker joins calls and stores transcripts externally One-click install with broad permissions OAuth connections “Sign in with Google” gives an AI app read access to mail and Drive Looks like a normal login Low-code automation A team builds workflows with AI steps in Zapier, Make or n8n Business users own them, IT never sees them Developer tooling Coding agents and MCP servers wired to repos and databases Engineers treat them as personal tools AI inside approved SaaS A CRM or helpdesk switches on an AI feature by default A vendor update changes behaviour overnight Look at the pattern. None of these routes needed a purchase order, and none triggered a security review. Shadow AI agents grow in the space between how fast teams want to work and how fast governance can respond. Shadow AI Risks Leaders Should Take Seriously The shadow AI risks that come with shadow AI agents fall into a few groups. Each one links to a business outcome you already track: revenue, trust, audit results and downtime. Risk What happens Business impact Data exposure Customer, financial or source code data leaves your control Contract breaches, loss of client trust Excess permissions An agent holds read and write access it never needed A small mistake becomes a large one Unreviewed actions An agent sends emails, edits CRM records or triggers payments Errors reach customers before anyone notices Compliance gaps Personal data flows through tools with no data agreement Trouble under GDPR, India’s DPDP Act or client contracts Orphaned agents The creator leaves, the connection stays active A live access path with no owner Prompt injection A poisoned document or web page tells the agent what to do An outsider steers your agent AI agent security is mostly an identity problem. Every one of the shadow AI agents borrows an identity, either a person’s login or a service key, and then acts with it. If you cannot list those identities, you cannot say who or what is acting inside your systems. Three practical points about shadow AI agents follow from that: Enterprise AI governance exists to fix exactly this. It gives every agent a name, an owner, a purpose and a permission set. Without it, shadow AI agents decide your risk profile for you. The Six-Step Plan to Find and Control Shadow AI Agents Banning AI does not work. People route around bans and shadow AI agents move further out of sight. The aim is visibility first, then control, then a sanctioned path for the work people are already trying to do. Here is the plan at a glance. Step Question it answers Output 1. Discover Where are shadow AI agents running? Raw list of tools, accounts and connections 2. Inventory What exactly is each one? One register with owner and purpose 3. Classify How risky is each one? Risk tier per agent 4.
Imagine waiting in line for months to see your favorite band perform live. A moment when you missed the official ticket drop, so you bought a ticket from a reseller online. You stand outside the arena, stadium lights buzzing, heart pounding with excitement. You hand your smartphone to the attendant at the turnstile. They swipe your barcode under the scanner. BEEP. Red light. “Sorry, this ticket was already scanned two hours ago.” Your stomach drops. The seller didn’t sell you a fake ticket they sold you a real ticket, but they emailed the exact same PDF to five other people. The first person through the gate got in. You got locked out. If you’ve ever bought a concert ticket, you already understand the biggest hidden headache in the multi-billion-dollar green economy: how to make sure the carbon credit you buy actually belongs to you and only you. The Invisible Asset Problem Whether it’s a concert seat or a carbon credit, you are buying something you can’t physically hold in your hands. When a eco-conscious business wants to offset its pollution, it buys a carbon credit. One credit typically represents one metric tonne of carbon kept out of the atmosphere like paying a crew to pull 1,000 kilograms of plastic waste out of a polluted river or planting a row of trees. Because you can’t touch a “tonne of saved carbon,” buying one requires total trust. And just like the concert ticket market, the world of carbon trading has its own versions of reseller scams and gate errors. The 3 “Ticket Traps” of Carbon Trading When platforms sell carbon credits without proper digital records, buyers fall into three common traps: 1. The Duplicate PDF (Double-Selling) 2. The Fake Promoter (Phantom Projects) 3. The Box-Office Delay (“Ghost Credits”) Enter “Digital Proof”: The Ultimate Gate Scanner To stop scalpers, modern concert venues stopped using paper tickets and switched to dynamic, encrypted QR codes that change every few seconds and immediately lock out copies the second a scanner reads them. In the carbon market, that technology is called Digital Proof. Digital Proof is an un-hackable, automated digital record attached to every single credit. It serves as four things at once: When a business buys a credit backed by solid digital proof, three things happen instantly: How to Avoid Buying “Fake” Green Claims If your business is looking to purchase carbon credits—or if you’re evaluating a platform that sells them ask these three quick questions before making a purchase: Clean Rivers, Real Receipts When a worker pulls 1,000 kg of garbage from a river, that hard work deserves to be recognized and funded. And when a company steps up to pay for that cleanup, they deserve to know their money actually made a difference without worrying about duplicate receipts or ghost claims. By treating carbon credits with the same security and live verification as a high-stakes event ticket, we make sure that every dollar spent on the environment leads to real, measurable change on Earth. How Techaroha Helps At Techaroha, we build custom exchanges and registries with built-in Digital Proof of Carbon Credits like our FSA-registered Carbon Plant and Planet First Registry. We design live, tamper-proof systems that match your local rules, ensuring fake or duplicate credits never turn your buyers away
Your platform just closed its biggest month. Trade count is up, registered accounts are up, and the board deck looks healthy. Then the CFO asks one plain question: “What do we keep from the average trade after everything it costs us to complete it?” Nobody in the room has a number. That silence is the problem. Carbon platform unit economics is the profit or loss on one unit of activity: one trade, one account, one tonne of CO₂e moved. Most carbon platforms are priced and built without it. Revenue climbs because volume climbs. Margin shrinks because cost per trade climbs faster than anyone measured. Read this if: you are a founder, CEO, or CFO planning or running a carbon exchange, marketplace or brokerage, you earn a take rate or a subscription, and you cannot yet state your contribution margin per trade in one number. Why Carbon Platform Unit Economics Differ From Any Other Marketplace Generic marketplace advice tells you to track take rate, acquisition cost, lifetime value, and contribution margin. That advice is right and incomplete. A carbon platform carries cost lines a normal marketplace never meets. A product marketplace ships a parcel. A carbon platform must prove that one serial-numbered credit was genuine, unretired, eligible for the buyer’s use, and correctly transferred. That proof costs money on every trade. The cost drivers that surprise teams most: None of these appear as a line in the first financial model. All of them appear in month eight. The Three Units of Carbon Platform Unit Economics “Unit” is not one thing on a carbon platform. Pick the wrong one and the model lies to you. Unit What it measures Best question it answers Common mistake Trade Revenue and cost of one completed transaction Do we make money when someone trades? Using average ticket size and ignoring the spread between small and large trades Account Lifetime contribution of one onboarded buyer, seller or broker Is acquiring and keeping this customer worth it? Counting signups instead of accounts that actually trade Credit (tCO₂e) Cost to issue, hold, move and retire one tonne Where does cost scale with volume of carbon, not trades? Ignoring that cost per tonne falls with big tickets but rises with fragmented ones Start your carbon platform unit economics model with the trade. It is the unit closest to cash, and it exposes most of the leaks. The Contribution Stack: What One Trade Actually Earns This stack is the working core of carbon platform unit economics. Think of a trade as a stack. Revenue sits on top. Each variable cost takes a slice. What remains is contribution, the money that pays for your fixed team, office, and roadmap. Layer Line Who usually owns it Revenue Take rate, listing fee, retirement fee, data fee Founder / CFO Variable cost 1 Payment and settlement rails, FX CFO Variable cost 2 Registry API calls and status sync CTO Variable cost 3 KYC/KYB checks, amortised per account Compliance / CFO Variable cost 4 Compute, storage, audit-log retention CTO Variable cost 5 Reconciliation exception handling Operations / CTO Variable cost 6 Customer support per trade Operations Contribution What is left per trade Everyone Two things stand out. First, no single person owns the whole stack, which is why it goes unmeasured. Second, the CTO controls more of it than the P&L suggests. Architecture decisions made in month one decide the size of those slices in year two. Alt text: Stacked diagram showing carbon platform unit economics, with revenue per trade reduced by six variable costs down to contribution. A Carbon Platform Unit Economics Example: Revenue Up, Margin Down The numbers below are illustrative. They show the method, not your results. Assume an average ticket of $15,000 and three customer segments with different negotiated take rates. Segment Take rate Revenue per trade Variable cost per trade Contribution Margin Aggregators and project developers 1.5% $225.00 $95.00 $130.00 58% Institutional buyers 0.5% $75.00 $62.00 $13.00 17% Anchor strategic buyer 0.25% $37.50 $50.00 -$12.50 -33% Now mix them: 30% of trades from aggregators, 50% institutional, 20% from the anchor buyer. Assume fixed monthly costs of $60,000. Break-even is about 1,400 trades a month. Here is the trap in these carbon platform unit economics. The anchor buyer is the one your sales team celebrates, because they bring volume and a logo. Every trade they add loses money. If that segment grows from 20% to 40% of trades while the others shrink proportionally, revenue per trade falls and break-even moves further away, even as your headline volume hits a record. That is the pattern behind “we are growing but not getting richer.” Carbon platform unit economics would have flagged it before the contract was signed. What Your CFO Needs vs What Your CTO Must Deliver Most founders get stuck because finance and engineering use different vocabularies. Translate them. Decision The CFO needs The CTO must deliver Pricing Margin per trade by customer segment A fee engine that supports tiered, per-segment and per-registry rates without code changes Forecasting Cost per trade at 10x volume Cost tagging on every event, so cost can be traced to the trade that caused it Cash control Net settlement amounts, not gross Settlement logic that records FX, bank and rail fees against each trade Risk Exception cost and error exposure Automated reconciliation against registries, with exceptions queued and measured Roadmap Which feature protects margin A cost-per-trade dashboard that ranks engineering work by money saved Strong carbon platform unit economics need both columns filled in. If your CFO cannot get the left column, the CTO cannot prioritise the right column. They are one problem described twice. Five Architecture Decisions That Shape Carbon Platform Unit Economics From Day One Cost per trade is partly a market outcome and partly a design choice, so your carbon platform unit economics are partly in your engineers’ hands. These five choices move it most. None of this needs a bigger budget. It needs to be decided before the first line of settlement code
Read this if: you run a live carbon exchange or marketplace, your vendor quotes more for every change request, and you have started to wonder whether you should switch carbon trading software vendor before the next quarter’s invoice arrives. Most owners in that position do nothing. Migration looks risky, so the current vendor gets another year. The risk of leaving is visible and vivid. The cost of staying is spread across invoices, delayed launches and workarounds, so it never shows up as a single line anyone has to defend. This post puts both sides on the same sheet so you can decide with numbers instead of instinct. Why owners hesitate to switch carbon trading software vendor, and what it costs them If you own the exchange but not the roadmap, four costs are running quietly in the background. 1. The change-request premium. A new fee tier, a new registry, a new asset class. Each one is quoted as a project, and each quote tends to be higher than the last because the codebase gets harder to touch. The trend matters more than any single quote. 2. Delay cost. When a feature takes three months instead of three weeks, the revenue it would have earned in those ten weeks is gone. A buyer who wanted a forward contract product signed with a competitor instead. 3. Workaround labour. Every gap the platform cannot handle becomes a spreadsheet, a manual reconciliation or a late-night support task. Your ops team is paying the vendor’s technical debt in salary. 4. Control risk. If the vendor decides your feature is not on their roadmap, or gets acquired, or raises prices, you have no lever. You are a tenant in your own business. You can put a number on all four. The next section shows how, and the section after it does the same for leaving. Price the decision to switch carbon trading software vendor on one sheet A useful comparison has two columns, each covering the same 24-month window. Cost line Staying Leaving Licence or retainer fees Current annual fees, plus expected increases Fees on the new platform, if any Change requests Last 4 quarters of quotes, trended forward Build cost of the same changes on the new stack Delay cost Revenue lost per month of delay, times months delayed Lower after cutover, but count the migration months Workaround labour Ops hours per week, times loaded hourly cost Should fall; estimate honestly Migration project Zero Discovery, data mapping, build, testing, parallel run Dual-running period Zero Two platforms live for a period, typically several weeks Downtime and error risk Ongoing risk of incident Risk during cutover; price the mitigation, not the fear Exit and IP costs Hidden until you try to leave Data export, code ownership, contract notice Here is an illustrative example. These numbers are made up to show the method, not to predict yours. Run that forward 24 months and staying often costs more than a scoped migration. It does not always. That is why you build the sheet before making the call, and why the answer should sometimes be “stay and renegotiate.” Why migration feels riskier than it is The fear is legitimate, but it usually attaches to the wrong thing. When owners consider a decision to switch carbon trading software vendor, they worry about “the migration” as one giant event. It is actually three separate problems, and each has a known way to handle it. Treat them separately and the project stops being one frightening leap. How to migrate trade history without losing it Trade history is data you own, and it should leave the old platform in a form you control. The sequence that tends to work: If the old platform’s records and the registry disagree today, you want to know before migration, not after. That finding is worth having on its own. (Multi-registry platforms should also read our note on registry API integration deadlines, since registry changes land on the same calendar as your migration.) How to cut over without downtime Downtime is an engineering choice, not a law of nature. Exchanges that switch carbon trading software vendor without a trading halt generally follow the same pattern. Read your contract before you read proposals Some of the biggest costs of leaving sit in the agreement you already signed. Check these before you talk to any new vendor: If you do not own your code, the cost of leaving is partly a cost of rebuilding. That is worth knowing early because it changes the sheet. When you should stay Switching is not always the right answer. Stay, and renegotiate, when: A good second opinion will tell you this. If an advisor recommends leaving without seeing your numbers, be cautious about the advice. Decision guide Your situation Likely direction Quotes rising each quarter, features late, no code access Leave, after scoping the switch Quotes stable, delivery on time, roadmap shared Stay and renegotiate terms Platform works, but registry sync or reconciliation is fragile Fix or decouple that layer first Vendor acquired, sunsetting or unresponsive Leave, on a planned timeline Unsure Get an independent assessment before deciding How Techaroha approaches a decision to switch carbon trading software vendor When an owner is weighing whether to switch carbon trading software vendor, we start with an assessment, not a rebuild. Before we propose anything, we look at your current architecture, your registry connections, your change-request history and your contract position, then tell you whether leaving pays back. Sometimes the honest answer is to stay. Our carbon work is not theoretical. We built Carbon Plant, an FSA-registered NFT-based carbon credit exchange, and Planet First Registry, the registry infrastructure behind it. Both run on the same concerns this post covers: credit lifecycle, registry reconciliation and trade integrity. If you want the wider picture of what a carbon exchange platform involves, see our carbon credit exchange platform page. Get your numbers Download the Switch-or-Stay Cost Sheet. It is the two-column model from this post, ready to fill in
