video1.0<iframe src="https://www.loom.com/embed/de0b8cc2c3ad47d7b5c2bd1a7525b3f1" frameborder="0" width="1280" height="960" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>9601280Loomhttps://www.loom.com9601280https://cdn.loom.com/sessions/thumbnails/de0b8cc2c3ad47d7b5c2bd1a7525b3f1-ecf975eab18a0dc1.gif488.273This Loom explains an approach to detect and manage Shadow AI in a Google Workspace by using an AI coworker that reviews connected apps and access levels. The author notes that employees often sign up for many third-party AI tools independently, so IT and SecOps need control without simply blocking everything. In a demo run, the coworker scans 27 third-party apps, identifies 6 AI apps, and flags 5 at risk, including Shortwave with full mailbox access that could enable email compromise if compromised. It also generates an executive HTML report with user level findings and recommends reviewing business need rather than removing access immediately, citing examples like Lisa using Read AI, Fathom, and Fireflies and Luke using Shortwave and Otter.