Otter.ai

1. 0190 MB uploaded to Otter.ai in 30 days from 4 people. Check what data is leaving with Defender's file and session policies.
2. 02Otter.ai is corroborated by an Entra consent grant. Review both findings together; the consent finding shows what data the app can read.
3. 03Meeting bots capture every participant, including external parties. Confirm consent and recording policy allow it.

• ●Medium37Otter.aiAudit log1 person
• ▲Critical85Otter.aiEntra consent3 people
• ◆High50Otter.aiEmail1 person
• ●Medium29Otter.aiOkta (demo)4 people
• ◆High55Otter.aiGoogle Workspace (demo)3 people

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. network_discovery · Sep 14, 2026
   Seen on the network via Defender for Endpoint: 4 users, 512 transactions, 90 MB uploaded in 30 days
   Detail

   {
     "domains": [
       "otter.ai"
     ],
     "category": "productivity",
     "mdcaAppId": "25017",
     "riskScore": 6,
     "ipAddresses": 4,
     "downloadBytes": 12582912
   }

2. corroboration
   Also holds an Entra consent grant (consent:aaaa0001-0000-4000-8000-000000000001)
   Detail

   {
     "findingKey": "consent:aaaa0001-0000-4000-8000-000000000001"
   }