Otter.ai

1. 013 people authorized Otter.ai against their Google account with scopes that expose calendar, files. Review it under Google Workspace API controls and mark it trusted, limited, or blocked; blocked revokes existing tokens.
2. 02Scopes expose calendar, files. Evaluate the vendor's retention and training terms before allowing continued use.
3. 03Otter.ai was connected by users, not assigned by an admin. If it is approved, add it to the Workspace app catalog so access is managed and can be revoked at offboarding.
4. 04Nobody signed into Otter.ai through Google in 90 days. Unassign or revoke to reduce standing access.
5. 05Meeting bots capture every participant, including external parties. Confirm consent and recording policy allow it.

• ●Medium48Otter.aiNetwork4 people
• ●Medium37Otter.aiAudit log1 person
• ▲Critical85Otter.aiEntra consent3 people
• ◆High50Otter.aiEmail1 person
• ●Medium29Otter.aiOkta (demo)4 people

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. oauth_grants · Aug 25, 2026
   Google Workspace (demo): Otter.ai, 3 OAuth grants (openid, userinfo.email, calendar.readonly) in 90 days
   Detail

   {
     "appIds": [
       "1092837465-otter.apps.googleusercontent.com"
     ],
     "scopes": [
       {
         "scope": "openid",
         "users": 3
       },
       {
         "scope": "userinfo.email",
         "users": 3
       },
       {
         "scope": "calendar.readonly",
         "users": 3
       },
       {
         "scope": "calendar.events",
         "users": 3
       },
       {
         "scope": "drive.file",
         "users": 3
       }
     ],
     "revoked": 0,
     "assignedUsers": 0
   }

2. oauth_grant · Aug 25, 2026
   [email protected] authorized Otter.ai: openid, userinfo.email, calendar.readonly, calendar.events, drive.file
   Detail

   {
     "clientId": "1092837465-otter.apps.googleusercontent.com"
   }

3. oauth_grant · Jul 25, 2026
   [email protected] authorized Otter.ai: openid, userinfo.email, calendar.readonly, calendar.events, drive.file
   Detail

   {
     "clientId": "1092837465-otter.apps.googleusercontent.com"
   }

4. oauth_grant · Aug 7, 2026
   [email protected] authorized Otter.ai: openid, userinfo.email, calendar.readonly, calendar.events, drive.file
   Detail

   {
     "clientId": "1092837465-otter.apps.googleusercontent.com"
   }

5. corroboration
   Also found by another lane (mdca:25017)
   Detail

   {
     "findingKey": "mdca:25017"
   }

6. corroboration
   Also found by another lane (ual:teams:f2f5d4b1-1c2a-4e7b-9a10-otterteams001)
   Detail

   {
     "findingKey": "ual:teams:f2f5d4b1-1c2a-4e7b-9a10-otterteams001"
   }

7. corroboration
   Also found by another lane (consent:aaaa0001-0000-4000-8000-000000000001)
   Detail

   {
     "findingKey": "consent:aaaa0001-0000-4000-8000-000000000001"
   }

8. corroboration
   Also found by another lane (mail:otter-ai)
   Detail

   {
     "findingKey": "mail:otter-ai"
   }

9. corroboration
   Also found by another lane (idp:9BKV_xBnZf5pDRMXOQ1jy:otter-ai)
   Detail

   {
     "findingKey": "idp:9BKV_xBnZf5pDRMXOQ1jy:otter-ai"
   }