Depends on the product. Products like Confluence and Slack come in through the backdoor because employees start adopting it (without management consent).