Product Technical FAQ's
Why does GAT+ require a domain-wide install for all OUs?
Does GAT have access to our file contents?
Do you have written information security, data protection and confidentiality policies that outline your overall policy framework?
Do you have a data protection officer (DPO) in place?
Do you maintain a record of your data processing activities in line with the requirements of the General Data Protection Regulation including DPO details; Processing purpose; Data types; Sharing details; International transfers; and Retention periods?
Will you need to/ be required to access personal data/ confidential information belonging to our organization? e.g. staff; customer data; confidential business information?
Do you have a policy and process for secure disposal of both IT equipment and media?
Will our organization be able to manage who has access to the service (our organization's staff)?
Do you have an encryption policy that covers data encryption in transit and at rest?
Do you have a Security/ Breach Incident Management Policy and Procedure in place?
Do you have a Business Continuity Policy in place?
Do you have a Privacy policy? As an EU-based company, this would comply with GDPR requirements.
You are based in Ireland, and run services on the North American GCP. Could you please confirm your view as to whether this means that data transfers outside of the EU?
What data do we work with?
Where is my metadata stored?
Customers’ metadata is stored in GCP (Google Cloud platform).
Customers can choose between 3 Geographical Areas for their data to be stored, UK, US and EU (US by default)
1. GCP in America, Council Bluffs, Iowa
2. In Europe in the Frankfurt, Germany
3.In the UK, London, England
How is my metadata kept secured?
Is my metadata secure during transit?
Who has access to my metadata?
How is metadata accessed via Google API?
Do you have an SLA and how will downtime be reported?
How far back does the “Drive event scan” can go back?
6 months from the point of installation, max available from the API 180 days.
Drive event scan is related to all actions taken on files and folders (view/edits/download etc).
Drive events logs are kept indefinitely, once GAT+ is installed – as long as the tool is installed we keep Drive event logs.
How far does Event activity go back on files?
How far do email scans index? Historically
How long do you keep our data once our license expires?
How long does the first scan take?
It depends on the size of your domain, we calculate 30 minutes per 1 million records. You can check the scan status under
GAT+ > Configuration > General > Tasks
How often do GAT+ scans run?
How long is the GAT+ admin log retained for? Indefinitely?
Meet the powerful GAT Suite
The most powerful toolset yet developed for Google Workspace.