Pricing Plans for Education

Yes, if your domain exceeds 5,000 active users you can apply for a volume discount.

Discounts for Educational domains apply after 20,000 active users or sooner depending on the plan selected.

Please contact us at sales@generalaudittool.com to discuss your needs.

Payment can be done in 3 different methods:

1. Via credit card through the tool.
2. Through our partners.
3. Through a US$ or Euro cheque or by wire transfer.

Wire transfer? For wire transfer, we give you our payment details on receipt of the PO. Orders based on company P.O.s have a 30 day credit. POs via email are acceptable.

For domains that require supplier approval, we ask you to start the process right away.

Google Workspace Reseller? For domains that wish to purchase through their Google Workspace Reseller, we welcome that path and ask you to contact both ourselves and the reseller.

Resellers will first have to be approved by GAT Labs.

No, GAT has to be installed and deployed for all domain users. This is not only for billing purposes, but also technical necessity.

To conduct a proper audit of all aspects of the Google Workspace environment, we must audit every user to see how they interact with one another.

This is necessary for proper email auditing, collaboration measurement, and (depending on which version of Google Workspace you have) essential for proper Drive audits, particularly where visitor events are recorded.

Please email us at sales@generalaudittool.com for more information.

No, you only have to buy it once, but we automatically charge by domain name so please contact us at sales@generalaudittool.com to explain your circumstances and we'll take care of it from our end.

Yes, we have resellers all around the world.

Please contact us at sales@generalaudittool.com for further information.

No, our prices include the onboarding feature.

Please contact support@generalaudittool.com for more information on our training programs for customers.

Yes, you can purchase our products via a secure link.

Please contact sales@generalaudittool.com for more information.

Active Users’ are licensed accounts bought from Google.

Educational domains don’t pay for IDLE, inactive, service or suspended accounts.

Please contact sales@generalaudittool.com for more information.

Our prices include training.

Please contact support@generalaudittool.com for more information on our training programs for customers.

No unless you choose otherwise, our Renewals Team will contact you 6 weeks prior to the end of your yearly subscription to see if you wish to renew.

Please contact renewals@generalaudittool.com for more information.

Yes, Non-Profits and Charities can avail up to a 50% discount off list price. See Enterprise pricing here Please contact us at sales@generalaudittool.com to discuss your needs.

GAT+ requiresto be installed domain-wide. The main reason why GAT+ must cover every user is not just for billing, but also technical. To do a proper audit of all aspects of the Google Workspace environment, you must audit every user to see how they interact with other users. This is necessary for proper email auditing, proper collaboration measurement, and depending on the version of Google Workspace that you have, it is necessary for proper Drive audits, in particular where visitor events are recorded.  

No, GAT+ only has access to metadata. 

Yes, see our security policy statement: https://gatlabs.com/security-policy-statement/

Yes, dpo@generalaudittool.com

Yes

Yes. GAT only requires metadata. We build our exposure profile based purely on the metadata. GAT never retrieves file contents for auditing. We believe the risk in extracting file contents from the secure ‘shredded’ environment of Google’s servers to any third-party software is too great for companies serious about security, so we don’t do it. Some of the most security-sensitive government customers in the US and the UK use GAT precisely because we don’t extract file contents.

No customer data is ever stored on local equipment or media. Google is responsible for this.

GAT is the very first Google Workspace security tool provider to offer ‘lock and key’ access to Google Workspace files and emails. Ever aware that end-user security is paramount, this feature set goes much further than any of our competitors, not only does it allow for full file management, but it is the only tool to give silent views of all files and emails (Admins and Security Officers won’t appear as ‘Viewers’ of the files or emails), while at the same time, it executes in a secure way that deeply protects end user’s rights. We carefully designed the solution to require both a lock and key for access. Managers, C level executives, and security officers can also relax knowing you cannot download GAT and have unrestricted access to sensitive financial files or snoop on HR emails. Google Workspace Admin staff using GAT can report that they have the most functional security tool in the marketplace, yet with the highest security standards available.

The Tool itself runs using a 2048-bit modulus RSA key, SHA256 is used for hashing, and AES (256-bit) is used for encryption. It is Verified by Comodo. This ensures the site you connect to is who it says it is (generalaudittool.com), thus eliminating man-in-the-middle attacks. It also ensures that any data transferred is moved inside an HTTPS tunnel, from Google to the audit tool and from the audit tool to your browser.

In the event of a customer data breach, we have a declared policy of customer notification. The response to any specific incident will depend on the nature of the incident and is not defined in specific terms.

For business continuity of our cloud services, we are dependent on GCP business continuity.

Our privacy policy is stated as complete non-disclosure of customer data and automatically implemented ‘right to be forgotten’ of customer data after 30 days since last use. This policy predates GDPR. There is no access to customer data by any staff other than development engineers. Customer data is never removed from GCP.

We process and store metadata.

Customers’ metadata is stored in GCP (Google Cloud platform). 

Customers can choose between 3 Geographical Areas for their data to be stored, UK, US and EU (US by default)

• GCP in America, Council Bluffs, Iowa
• In Europe in the Frankfurt, Germany
• In the UK, London, England

Data at rest is encrypted with the AES-256 algorithm.

Data in transit is encrypted with TLS.

This metadata is accessed directly from Google Workspace via HTTPS, the same encryption standard that you use to access Google Workspace.

You can request or send the SLA to dpo@generalaudittool.com we will get back to you as soon as possible. Downtime is reported on our Status Page if it happens

6 months from the point of installation, max available from the API 180 days.
Drive event scan is related to all actions taken on files and folders (view/edits/download etc).

Drive events logs are kept indefinitely, once GAT+ is installed - as long as the tool is installed we keep Drive event logs.

When you install the tool, it indexes back the last 28 days' email. We do this to provide seed statistics for tables, etc., going forward it indexes all emails for all time until you remove the tool.

All the collected data will be deleted in 30 days.

It depends on the size of your domain, we calculate 30 minutes per 1 million records. You can check the scan status under:

GAT+ > Configuration > General > Tasks

At least once per day, and every time you access the tool in any given area a new scan will be scheduled to run in the background.

It has the same lifetime than the scan data, after 30 days of inactivity when the license 

As long as the tool is installed - Admin logs are kept, if the tool is removed after 30 days the data is removed automatically.