What is shadow procurement?

Shadow procurement is unauthorised purchasing that bypasses a company's approved buying process. The term borrows from "shadow IT", which describes software adopted without IT's knowledge, but shadow procurement covers any category of spend: software, contractors, marketing agencies, office equipment, or anything else an employee can buy without asking first.

Shadow procurement is rarely malicious. Most of it comes from people trying to do their jobs faster than the official process allows. If they perceive the process as unreliable, too complex to complete, or opaque they’ll circumvent it wherever possible.

What does shadow procurement look like in practice?

Shadow procurement hides in ordinary, everyday behaviour. Common examples include:

• Card and expense purchases. An employee buys a SaaS subscription on a corporate card and files it as an expense. Finance sees a line item, but no one reviewed the contract, checked for an existing tool that does the same thing, or negotiated the price.
• Free trials that convert. A team starts a free trial, invites colleagues, and builds workflows around the tool. By the time the trial ends, the company is locked in and pays whatever the vendor asks.
• Contracts signed outside procurement. A department head signs a statement of work with an agency directly. Legal never sees the terms, and the auto-renewal clause surprises everyone twelve months later.
• Duplicate vendors. Sales buys one data enrichment tool, marketing buys another, and operations buys a third. The company pays three vendors for overlapping capability, and doesn’t maximize buying power with any of them.

If your finance team has ever discovered a vendor for the first time by reading a credit card statement, you have shadow procurement.

Why shadow procurement happens

Shadow procurement is a symptom, and the disease is almost always a purchasing process that employees find painful. Three causes come up repeatedly:

The official process is too slow. When a routine software purchase takes weeks of emails, forms, and approval chases, employees do the maths. The risk of a quiet card purchase feels smaller than the cost of waiting.

The process is hard to find or hard to follow. If nobody knows whether to email procurement, raise a ticket, or fill in a form buried on the intranet, people default to the path of least resistance, which is usually their own card.

Thresholds and policies do not match reality. A policy that requires full procurement review for a £30-a-month tool teaches employees that the process is unreasonable, so they ignore it for larger purchases too.

Blaming employees misses the point. People route around processes that fail them. Gartner has estimated that shadow IT alone accounts for 30 to 40 percent of IT spending in large enterprises, and software is only one category where this behaviour shows up.

What shadow procurement actually costs

Unmanaged spend means no volume discounts, no negotiated terms, and duplicate tools across teams. But the costs go well beyond wasted money. 

The bigger risks sit with legal, security, and finance:

• Security and compliance exposure. Unvetted vendors may hold customer data without a data processing agreement in place. For companies subject to GDPR or SOC 2 requirements, a single unreviewed tool can create a reportable problem.
• Contract risk. Nobody negotiated the liability caps, termination rights, or auto-renewal terms, because nobody read the contract.
• Budget inaccuracy. Finance cannot forecast spend it cannot see. Shadow purchases surface as surprises at month-end close, and renewal costs appear with no warning.
• Audit pain. When auditors ask for a complete vendor list and the answer requires trawling expense reports, the audit takes longer and costs more.

How to reduce shadow procurement

You cannot eliminate shadow procurement by writing a stricter policy. Employees already know the rules; they break them because compliance costs more than the alternative. The fix is to make the official route the easiest one.

Start with three changes:

1. Give employees one obvious front door. Every purchase request should start in the same place, ideally somewhere people already work, like Slack. If raising a request takes two minutes, the corporate card stops looking like a shortcut.
2. Match the process to the purchase. A £50-a-month tool does not need the same review as a £200,000 contract. Route low-risk purchases through a fast, lightweight approval and save the full review for spend that warrants it.
3. Find the shadow spend you already have. Review card transactions and expense reports to build a real vendor list, then bring those contracts under management before the next renewal hits.

This is the problem Omnea exists to solve. When employees raise requests through an intake that takes minutes rather than weeks, and approvals route automatically to the right people, the incentive to go around the process disappears. Omnea customers see this directly: compliant purchasing rises when the compliant path is the fastest one.

The useful way to think about shadow procurement is as feedback. Every off-process purchase tells you exactly where your buying process is failing, and for whom. Companies that treat that feedback seriously end up with a process people actually follow, which is the only kind of process that provides control.