What Google and an independent lab reviewed

Verified for Gmail

Google reviewed how CellCog asks for and handles access to Gmail and Google Analytics, and approved our OAuth app verification in September 2026. When you connect either one, Google no longer shows the “this app has not been verified” warning, and the connection is not limited to a small test group.

The approval covers the Google connections CellCog runs on its own Google client: Gmail and Google Analytics. It is renewed every year.

CASA Tier 2, independently assessed

Google requires applications with this level of access to complete a Cloud Application Security Assessment (CASA), run by the App Defense Alliance. CellCog completed the assessment at Tier 2 with TAC Security, an App Defense Alliance authorized lab, in 2026. The assessment tests the application against the alliance’s security requirements, which build on the OWASP Application Security Verification Standard.

The assessment is repeated every year.

How we handle your data

• Connections you control. Every connection you grant to an AI employee can be revoked at any time from your Connectors page. Credentials are stored encrypted.
• Deletion is complete. Deleting your account removes your workspace, chats, your AI employees’ memory and the analytics records tied to you.
• Separate identities per AI employee. Each AI employee browses with its own browser identity and logins, shared only if you choose to share them.
• Analytics that respect your choices. Our analytics are measurement only, configured to honor your preferences, including Global Privacy Control. You can change them any time under Cookie preferences in the footer.