See who has access
People and seats across your connected AI tools in one view, so you know who can use what.
Secure
Your AI access. Under control.
See who has access to your AI and which apps are connected to company accounts, catch risky keys early and close access properly when people leave.
Get started freeFree. No card. No call.
People and access
58 people Google Workspace connected
- Company accounts58
- 2-step verification enrolled51 of 58
- Apps with company access23
7 accounts without 2-step verificationGoogle Workspace · measured
Unfamiliar app with Drive accessAuthorised by 3 people · review
Org-wide OpenAI keyNot scoped to a project · review
✓ Sam’s Copilot seat removedChecked in Vaze
Catch risky API keys
See each key’s scope, age and last use where the provider shares them. Keys open to your whole organisation, or unused for 90 days or more, are flagged.
See apps connected to company accounts
Apps people have authorised with their Google Workspace or Microsoft account, with the permissions each was granted, so you can review unfamiliar ones.
Check two-step verification
For Google Workspace, see who has 2-step verification turned on and where it is enforced, shown as two separate checks.
Close access when people leave
Group a leaver’s access across your connected tools into one request.
Review, act and confirm
Approve changes, complete the removal in the vendor console, then check supported outcomes in Vaze.
In the console
Review app access and sign-in checks, then decide.
Protection brings two kinds of company-account evidence into one place, so the person looking after AI can decide what stays.
See which apps can reach company data
For Google Workspace, Vaze lists apps from the last six months of authorisation events, with the permissions each requested. For Microsoft Entra, it lists apps with directory permission grants, and marks consent given for the whole organisation or to the app itself rather than a person.
Each permission is explained in plain words, so you can spot an unfamiliar app that asks for Drive, mail or file access. For Microsoft, Vaze shows the permission name and its usual meaning; confirm which API it applies to in Entra.
Check Google 2-step verification, account by account
For connected Google Workspace, Vaze reads each account’s 2-step verification enrolment, whether it is enforced, and whether the account is suspended, as separate facts. Accounts where either check is off are counted so you can review them.
These are Google directory settings. They are not a record of every sign-in, and Microsoft sign-in settings are reviewed in Entra.
From evidence to a decision
- Connect Google Workspace or Microsoft Entra with an administrator’s read-only permission.
- Open Protection, then Identity & app access, and review the apps, permissions and sign-in checks.
- Record the app’s owner and business purpose in your tool register.
- If access should change, make the change in Google Admin or Microsoft Entra. Vaze links you there.
- Record your decision in the tool register, then Refresh evidence to see the latest read.
Straight answers
About AI security in Vaze.
Where does the access and key information come from?
From the admin APIs of the AI accounts you connect. Vaze shows people, seats and API keys, including scope and last use, wherever the provider shares them.
Does Vaze read prompts and conversations?
No. Vaze reads admin, billing and usage information from the accounts you connect. Prompts, conversations, documents, email and source code stay out of it.
Does Vaze make changes on its own?
No. A person on your team approves every change first. Where Vaze can’t make a change directly, it takes you to the right page in the provider’s console.
How does Vaze check MFA and company rules?
For connected Google Workspace accounts, Vaze reads each person’s 2-step verification enrolment and whether it is enforced. A short list of AI essentials, such as a named owner, company sign-in and an AI rulebook, records what your team confirms, kept separate from what Vaze measures.
Which connected apps does Vaze show?
For Google Workspace, apps from the last six months of authorisation events with company accounts. For Microsoft Entra, apps with directory permission grants, including consent for the whole organisation and application permissions. Vaze reads these with an administrator’s permission and doesn’t change them. Personal accounts and browsing aren’t part of this view.
Does Vaze remove access for me?
No. Vaze shows the evidence and links to Google Admin or Microsoft Entra, where your administrator makes any change. Record the decision in Vaze and refresh to see the latest read.
See who has access to your AI.
Sign in with Google or Microsoft, name your organisation and connect an AI account when you’re ready. Free, with no card.
Get started free