Read AI

1. 012 people authorized Read AI against their Google account with scopes that expose calendar, email, files. Review it under Google Workspace API controls and mark it trusted, limited, or blocked; blocked revokes existing tokens.
2. 02Scopes expose calendar, email, files. Evaluate the vendor's retention and training terms before allowing continued use.
3. 03Read AI was connected by users, not assigned by an admin. If it is approved, add it to the Workspace app catalog so access is managed and can be revoked at offboarding.
4. 04Nobody signed into Read AI through Google in 90 days. Unassign or revoke to reduce standing access.
5. 051 grant was revoked in the window; check whether by users or by an admin policy before assuming the exposure is closed.
6. 06Meeting bots capture every participant, including external parties. Confirm consent and recording policy allow it.

• ●Medium42Read AIAudit log2 people

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. oauth_grants · Sep 2, 2026
   Google Workspace (demo): Read AI, 2 OAuth grants (openid, userinfo.email, calendar) in 90 days
   Detail

   {
     "appIds": [
       "5566778899-readai.apps.googleusercontent.com"
     ],
     "scopes": [
       {
         "scope": "openid",
         "users": 2
       },
       {
         "scope": "userinfo.email",
         "users": 2
       },
       {
         "scope": "calendar",
         "users": 2
       },
       {
         "scope": "gmail.readonly",
         "users": 2
       },
       {
         "scope": "drive",
         "users": 2
       }
     ],
     "revoked": 1,
     "assignedUsers": 0
   }

2. oauth_grant · Sep 2, 2026
   [email protected] authorized Read AI: openid, userinfo.email, calendar, gmail.readonly, drive
   Detail

   {
     "clientId": "5566778899-readai.apps.googleusercontent.com"
   }

3. oauth_grant · Aug 5, 2026
   [email protected] authorized Read AI: openid, userinfo.email, calendar, gmail.readonly, drive
   Detail

   {
     "clientId": "5566778899-readai.apps.googleusercontent.com"
   }

4. corroboration
   Also found by another lane (ual:teams:9c1e8a77-readai-4d2b-8f31-000000000042)
   Detail

   {
     "findingKey": "ual:teams:9c1e8a77-readai-4d2b-8f31-000000000042"
   }