A report identified that several of a company's SaaS applications are against corporate policy.
Which of the following is the MOST likely reason for this issue?

A. Shadow IT
B. Sensitive data
C. Encryption
D. Vendor lock-in