AI discovered across Microsoft 365
75
AI apps with a foothold in your organization: 3 through Entra consent grants, 5 seen on the network (3 with no Entra footprint), 9 running on 10 managed devices, 5 in the Microsoft 365 audit log including Copilot, 5 with accounts created by email, 12 built in Azure and Power Platform, 5 in SIEM network logs (1 seen nowhere else), 12 through Okta or Google Workspace (5 connected by users themselves), 14 wired into source code (3 keys committed), and Purview saw sensitive data reach 5 of them. Last sync 55 min ago.
Needs attention
19
5 critical · 14 high
People using AI
19
4 active in the last 7 days
Tenant-wide consents
1
An admin approved for everyone
App-only access
1
Can read data with no user present
Highest risk
What to look at first
Critical85Critical85Critical81Critical76Critical75High70
ChatGPT
OpenAI · Assistant · all users
Otter.ai
Otter.ai (AISense) · Meeting notes · 3 people
ChatGPT
OpenAI · Assistant · 0 people
Gemini
Google · Assistant · 0 people
DeepSeek
DeepSeek · Assistant · 2 people
ChatGPT: sensitive data
OpenAI · Assistant · 3 people
Purview · 30 days
Sensitive data that reached AI
Not blocked
8
Blocked
4
People
9
Unblocked matches per app. Top types: All Full Names, U.S. Social Security Number (SSN), Email Address · 1 user override
Severity
Ledger
- Critical5
- High14
- Medium53
- Low3
- Info0
Activity · 30 days
Most used
45 sign-ins to AI apps
Identity · 2 providers
Okta and Google Workspace
AI apps
12
User-connected
5
High-scope grants
4
People per app · 12 people in total
Source code · 5 repos
AI your engineers are building in
Vendors
14
Keys in code
3
MCP setups
2
Repositories per vendor · 4 coding-assistant setups
SIEM · 1 integration
What your own logs say
Uploaded per app · 1 app seen only here
Network · uploads
Data leaving over the wire
Microsoft 365 · 30 days
Copilot and agents
Interactions
70
People
12
Labeled hits
4
- Word15
- PowerPoint14
- Excel12
- BizChat11
- Teams11
- Outlook7
1 custom agent · 3 Teams AI apps
Azure and Power Platform
AI your teams are building
Azure resources
7
Public endpoints
4
AI connectors
5
3 model deployments · 2 third-party connectors · 2 in the Default environment
Email · 30 days
Accounts created with work addresses
Signups
9
People
8
Paid personally
4
Endpoints
AI running on devices
Exposure
Data these apps can reach
- Files & sites8
- Calendar5
- Email3
- Directory2
- Meetings & transcripts2
Categories