Before you connect your Google Workspace
Vigía reviews the security of your Google Workspace and gives you a report. To do that it needs to read your organisation's configuration — and only to read it. This page exists so that you know exactly what is going to happen on the next screen.
Google is going to show you a warning, and that is normal.
It will say something like 'Google hasn't verified this app'. It appears because Vigía's verification is under way: it is a Google process that takes weeks and consists, among other things, of a person reviewing the privacy policy and the permissions requested. While it lasts, the warning appears anyway.
That warning does not say the application is unsafe. It says that Google has not finished reviewing it yet. To continue you will have to click 'Advanced' and then the link to continue.
What Vigía cannot do, even if it asked
This is the important part, and you can check it yourself on Google's own screen, by reading the list of permissions before you accept:
- It cannot read your e-mails, or their subjects, or their attachments.
- It cannot open or download any Drive file.
- It cannot change a single setting in your organisation: there is no write path in the code.
- It cannot act on anybody's behalf or send e-mail from your accounts.
The permissions that are requested are read-only and none belongs to Google's 'restricted' category, which is precisely the one that would give access to content. If on the consent screen you see anything that mentions the content of Gmail or of Drive, do not continue, and write to me.
What is done with what is read
- Your report is worked out, and the score and the state of each check are stored.
- The e-mail addresses of your staff that appear as affected are deleted automatically after 24 hours.
- When you disconnect, everything is deleted and access is revoked at Google, there and then.
Before continuing you can read the privacy policy and the terms. If you have any question, or if you would like me to walk you through it over the phone, write to me at diego@diegofarina.com — I answer, not a form.