Shadow data are company records that are hidden from organizational view or not covered by a centralized data management framework, putting them at higher risk. Shadow data is typically the result of data that has been copied, backed up, or stored in a datastore that is not controlled, is not governed by the organizational security framework, and is not kept up-to-date.