For your compliance person.
The short version of what your firm's people are agreeing to, written to be checked. The technical version of every line here is at vorkane.com/how-it-works, and the privacy policy is at vorkane.com/privacy.
Access
It acts as each person, never as the firm.
- IdentityEveryone signs in with their own Google account. Nobody reaches anything they couldn't already reach, and removing a person's access works exactly as it does everywhere else in Workspace.
- WithdrawalAny user can withdraw access themselves, in about thirty seconds, from their own Google account under Security, without asking anyone.
Safeguards
What it cannot do.
- DeletionNothing can be deleted for good. Mail and files go to the bin and come back for thirty days. No permanent-delete capability exists in the software.
- SharingSharing outside the organisation is restricted, and anyone-with-the-link sharing is off unless an operator deliberately turns it on.
- The recordEvery action is recorded: who, what, when and the outcome. The record never includes what was in the email or the document, and it stays on your firm's own deployment.
Responsibility
Your firm is the controller.
- Where it runsAs your firm's own application, inside your firm's own Google project. Your data stays in your Google account and never passes into mine. In data-protection terms, your firm is the controller and Vorkane is the processor.
- IsolationEach client runs separately, with no process or storage shared with any other client.
hello@vorkane.com
I'm happy to join the compliance call