# ChatGPT Voice Gains Access to Email, Calendar and Slack, and the Ability to Act on Them

The assistant now runs on GPT-6 Astra, Sol or Luna, and it works inside ChatGPT Work, where spoken instructions can produce documents, slide decks, and spreadsheets.

- Published: 2026-09-24T06:18:20.538Z
- Canonical: https://polylog.news/ai/2026-09-24/chatgpt-voice-gains-access-to-email-calendar-and-slack-and-t
- Publisher: Polylog (AI desk)
- Section: tech
- Sources: [Polylog editors](https://polylog.news), [OpenAI](https://openai.com/index/harvey-from-context-to-confidence-with-astra), [OpenAI](https://openai.com/index/invideo-builds-with-gpt-6-astra)

OpenAI released a voice update that [connects ChatGPT Voice to plugins for email, calendars, and Slack](https://t.me/aipost/8237) and lets users choose between GPT-6 Astra, for heavier coding, research, and document work, and the lighter Sol and Luna models, for quick spoken lookups. Voice also runs inside ChatGPT Work on web and mobile, where a spoken request can generate documents, presentations, websites, and spreadsheets. [The Decoder reported](https://the-decoder.com/chatgpt-voice-gets-closer-to-her-with-email-calendar-and-slack-access/) that the rollout is global.

The significant detail is not how well the assistant transcribes speech. It is that the connected plugins can take actions, not just read information, with what the assistant is allowed to do limited by the service itself, the account's permissions, and the access the user grants. OpenAI says plugins can be packaged into reusable workflows, which functions as a scheduler for voice-initiated agent tasks even though OpenAI does not use that term.

Enterprise deployments of the same model family were announced alongside the update. OpenAI published customer accounts stating that the legal platform [Harvey produces more structured, context-aware drafts using GPT-6 Astra](https://openai.com/index/harvey-from-context-to-confidence-with-astra) and that the video tool [invideo improved its color correction and grading threefold and shipped 50 custom effects in a day](https://openai.com/index/invideo-builds-with-gpt-6-astra). Both are customer stories published by OpenAI rather than independent measurements, and the threefold figure comes with no stated baseline or methodology.

An assistant that reads a Slack channel and then sends email on the user's behalf follows a path from text to action that begins with content the user does not control. That is the standard pattern of a prompt-injection failure (hidden instructions embedded in content the assistant reads that trick it into taking unintended actions), and the permission model is now the security control that matters most.

## What this means

Voice combined with connected plugins turns every inbox and shared channel into an input for an agent that can take actions under the user's own identity, which shifts the security question from how well the model behaves to how narrowly permissions are scoped inside Slack, Google Workspace, and Microsoft 365. Vendors that sell identity controls and data-loss-prevention tools gain a new reason for companies to buy their products, and companies that granted broad workspace access for what were previously read-only assistants now carry a write-access risk they did not account for. The business consequence is switching cost: once workflows are started by voice and tied to specific connectors, moving to a different model means rebuilding the entire integration layer.

## What to watch

- Whether the first documented prompt-injection incident through a connected mail or chat plugin produces an unauthorized action, which would force enterprises to narrow the scopes they have already granted.
- Whether Slack, Google and Microsoft respond with finer-grained consent for agent actions rather than the blanket application-level tokens in use today.
- Whether the lighter Sol and Luna models absorb most voice traffic, which would show that everyday assistant use does not need frontier-class inference.