Security

Discovery uses read-only Google Workspace Admin SDK scopes. We ask for permission to list users, read the Workspace domain, and list the third-party apps people authorized with company sign-in (admin.directory.user.readonly, admin.directory.domain.readonly, and admin.directory.user.security). We do not change those grants on your behalf.

Google Calendar is a separate, optional connection. It requests calendar.events so AppControler can add all-day renewal events to the primary calendar of the account you connect. It is not part of the Workspace scan, and it is not used to read your other meetings.

Microsoft 365 directory scans and Outlook calendar sync are not available yet.

We do not read Gmail message bodies or Drive file contents as part of discovering connected AI tools. Contract uploads are separate: only files an admin chooses to upload are stored for notice-date tracking.

OAuth tokens are stored server-side and used to refresh workspace data on the schedule you enable. Tokens are not embedded in the browser for sync jobs.

Disconnecting a workspace from AppControler stops further sync. Tokens for that connection are revoked or discarded according to the provider’s disconnect flow.

Access to production data is limited to people who operate the service. We use encrypted transport (HTTPS) for the web app and API.

We have not completed a third-party audit certification. Do not treat this page as an attestation of SOC 2, ISO, or similar. If that status changes, we will say so plainly here.

Report suspected security issues to [email protected].