Google Workspace and Microsoft Entra
See every AI app that can read your company's email and files
A read-only scan of Google Workspace or Microsoft Entra that lists OAuth and AI apps, then gives each one a plain-English verdict.
How it works
Three steps from a read-only connection to a verdict on each app.
Step 1
Connect with read-only access
Connect Google Workspace or Microsoft Entra. The scopes are read-only: we can look, and we cannot change your directory.
Step 2
We scan OAuth and AI apps
The scan lists third-party OAuth apps and the access they requested, and calls out AI apps the catalog recognizes.
Step 3
Plain-English verdicts
Each app is marked Remove, Check with user, or Keep. A verdict is a suggestion. It does not remove access.
What a verdict looks like
Each app gets one line in plain English, and one of three statuses. The rows below are example data, not a scan of a real company.
Example data. Not from a real company.
- Remove
ChatGPT can read and send Gmail for 9 people.
Google Workspace
- Check with user
Otter can read calendar events for 4 people.
Google Workspace
- Keep
Company SSO can only sign people in.
Microsoft Entra
What the connection can do
Read-only scopes, no email content stored, and you can revoke any time. Read the security summary.
Read-only scopes
The connection can see names, email addresses, the apps people or an admin have allowed, and the access each app requested. It cannot read the mail or files themselves, and it cannot change or remove anything in your directory.
No email content stored
We store that list of people, apps, and requested access, plus findings and when the scan ran. We do not store email content or file contents. The connection used to scan again is encrypted. We never store your password.
Revoke any time
Disconnect deletes our copy of the connection and stops new scans. On Google, we also revoke our access. Findings already saved stay in StockadeAI. Nothing in your directory is changed.
FAQ
What does the scan look at?
OAuth apps connected through Google Workspace or Microsoft Entra, including AI apps the catalog recognizes. It reads who allowed each app and which access that app requested, such as mail or files. It does not open email or files.
What access does the connection need?
Read-only admin access to the directory and to OAuth grants. It cannot change settings, delete people, or remove apps in Google Workspace or Microsoft Entra.
Do you store email or files?
No. We store names, email addresses, the apps that were allowed, the access they requested, and the findings from each scan. We do not store email content or file contents. The connection used to scan again is encrypted, and we never store your password.
How do I disconnect?
Disconnect any time in the product, or remove access in Google Admin or Microsoft Entra. Disconnect deletes our copy of the connection and stops new scans. On Google, we also revoke our access so the app drops off that admin account. On Microsoft, disconnect removes the connection stored here; remove the enterprise app in Entra if you want it gone there too. Findings already saved stay. Nothing in your directory is changed.