# Low-code and AI development security and governance

> Live situation record from CLSTR: https://clstr.news/situations/low-code-and-ai-development-security-and-governance
> Updated: 2026-09-28T08:30:00.000Z. Sources: 4. Developments: 2.

The rapid adoption of low-code and no-code platforms has introduced a dual landscape of operational innovation and heightened security vulnerabilities. Initially, the democratization of application development led to the rise of shadow IT, where non-technical users bypass traditional software development lifecycles. This has resulted in significant risks, including exposed API keys, unencrypted data repositories, and the public exposure of sensitive information. One study indicated that 22% of 380,000 publicly accessible applications on certain platforms contained exposed credentials or proprietary data.

As the technology evolves to include AI-driven coding, the focus has shifted toward the necessity of robust governance to manage increasing complexities in data access and organizational responsibility. Experts recommend implementing ‘governance by design’ to mitigate risks, which involves minimizing data exposure through need-to-know principles and ensuring auditability. Despite these security challenges, the technology continues to provide utility in digitizing manual processes, modernizing legacy systems, and automating workflows to improve efficiency.

## Timeline

### 2026-09-28: Low-code and AI coding require robust governance to manage data risks

Low-code and AI coding accelerate development but require strong governance to manage data risks, interface complexity, and the transition from manual processes to automated digital workflows.

2 sources. https://clstr.news/cluster/low-code-and-ai-coding-require-robust-governance-to-manage-data-risks

### 2026-08-31: Low-code platforms drive innovation while increasing shadow IT security risks

Low-code and no-code platforms are driving business innovation but increasing security risks by enabling shadow IT and bypassing traditional development security protocols.

2 sources. https://clstr.news/cluster/low-code-platforms-drive-innovation-while-increasing-shadow-it-security-risks

---
Cite as: Low-code and AI development security and governance. CLSTR, https://clstr.news/situations/low-code-and-ai-development-security-and-governance