&Secure holds administrative capability in your Google Workspace. We treat that access as the most sensitive asset in our company.
You start in monitoring-only mode. Remediation scopes are granted separately, and every action requires your explicit approval or a policy you've signed off on.
Every OAuth scope we request is documented in plain language during onboarding. We never read employee email bodies.
Customer data is isolated per organization, encrypted in transit and at rest, and credentials are stored in a dedicated secrets vault.
Analyst access to your environment is time-limited, visible to you inside the product, fully logged, and revocable at any moment.
Every read, action, and support-access grant produces an immutable audit event you can review and export.
You control retention windows. Disconnecting or deleting your organization removes synchronized data on a published schedule.
Documented incident-response runbooks, customer notification commitments, and a responsible-disclosure program at security@andsecure.com.
SOC 2 Type II in progress. Our current subprocessor list and privacy documentation are available on request.