AI tools detected

132 users, the widest reach of any unsanctioned tool here. No DPA on file. It reads drafts as people type, including emails and documents that may carry customer data. Not high-risk on its own, but it needs a decision and a transparency notice. Suggest classifying Unknown pending a DPA review.

64 users across Product and Operations. Summarizes pages that often contain roadmap notes and customer names. No signed DPA, but it is a known vendor with a standard enterprise agreement available. Suggest Unknown, then move to Sanctioned once the workspace is on a business plan.

41 users. Otter.ai joins live calls and uploads full meeting audio to a third party with no DPA. Sales and HR are both using it, so call recordings likely include customer and personnel data. This is a recording tool with regulated content and no contract. Suggest High risk and notify the affected users.

22 users, new this week. Generates decks from pasted content, which has included pricing and customer logos. No DPA. Low volume so far, but it processes customer-facing material and needs an Article 50 transparency notice. Suggest Unknown and revisit if usage grows.

9 users, new this week. tl;dv records and transcribes meetings to a third party with no DPA, the same pattern as Otter. Small footprint today, but every recording is regulated content leaving the workspace uncontrolled. Suggest High risk before it spreads.

33 users, new this week. Loom AI summarizes screen recordings, which can capture whatever is on screen, including dashboards and customer records. Loom is an established vendor with an enterprise DPA available. Suggest Unknown, then Sanctioned once the DPA is signed.