Shadow AI is a dual visibility problem: AI-enabled developer tools introduce measurable supply chain risks, while AI-generated and AI-deployed artifacts — built and shipped via personal SaaS subscriptions and one-click deploy platforms — exist entirely outside organizational control yet still process business data. This talk reframes Shadow AI as an asset discovery and supply chain visibility problem, and shares practical detection and engagement strategies for bringing externally deployed AI artifacts back into view before they become business-critical.