Continuous Compliance Documentation
Continuous Compliance Documentation
Breadcrumbs

Integrations

CyRAACS’ Compliance Management Services (CMS) includes automated evidence collection through our AI-powered Platform. The Platform's Integration Engine extends this intelligence directly into the client's technology ecosystem. Using a Provide-Your-Own-Keys (PYOK) vault architecture, clients securely input their system credentials in a fully encrypted environment. When a client uses Google Workspace as their collaboration suite, we set up the process of automatic evidence collection. Towards this, the platform will need to be provisioned with read-only permissions to connect to the client’s Google Workspace.

Terminology

Term

Definition

Service Provider

The service manager Admin responsible for onboarding, configuration, validation, and support activities.

“We” / “Our”/ “us”

Refers to the service provider throughout this document.

Client(s)/Client Team

Authorized personnel from the client organization involved in access provisioning and coordination.

Integration Engine

The engine that service provider uses to automate evidence collection from client technology environments.

OAuth Integration

OAuth integration refers to using the OAuth (Open Authorization) protocol to let users securely log in to one application using another trusted service—without sharing their passwords.

PYOK

Provide your Own Keys

Purpose

These pages provide a brief on the permissions we request while connecting to the client’s Google Workspace/Microsoft 365 environment, why we request these permissions, and steps to enable/revoke OAUTH connection with the client’s Google Workspace or Microsoft environment.

The goal is to help clients understand three things:

  1. What each permission allows us to see.

  2. What we use that information for.

  3. Why the information matters for security, compliance, and operational visibility.

What these permissions do NOT do

These permissions are intended for reading and reporting.

They do not allow us to:

  • Create or delete users

  • Change passwords

  • Modify groups or memberships

  • Change admin roles

  • Change security policies

  • Wipe or reset devices

  • Delete emails or files

  • Modify content

  • Change labels, retention settings, or information protection policies

Related Topics