Google Workspace email checkup
Many IT providers know Microsoft 365 well and treat Google Workspace as an afterthought. We support both properly. If your firm runs on Gmail and Drive, you get a review written by people who know the Admin console.
How we get in, and out
You create a named account with a custom read-only admin role for the length of the review, covering reports, security settings and the audit and investigation views. Where a setting can only be seen with a broader role, we'll tell you exactly which one and why, and you decide. When the walkthrough is done, you remove the account.
What we review in Google Workspace
-
2-Step Verification
Enrolment versus enforcement, by organizational unit, and which methods are allowed. Security keys and passkeys for admins.
-
Super admins
Who holds super admin, whether they use separate accounts, and whether recovery options for those accounts are secure.
-
Less secure and legacy access
IMAP, POP and app passwords that sidestep 2-Step Verification, and which users still rely on them.
-
Automatic forwarding
Whether users can forward mail outside the domain, and who already does.
-
Filters and delegation
Gmail filters that forward, archive or delete, and mailbox delegation nobody remembers granting.
-
Audit and investigation
Login, Gmail, Drive and admin audit logs: what is available on your edition and how far back it goes.
-
Drive sharing
External sharing settings, "anyone with the link" files, shared drives with outside members, and files owned by former staff.
-
Mobile management
Basic or advanced mobile management, device approvals, and remote account wipe for lost or departing devices.
-
Email protection
Gmail safety settings for spoofing, attachments and links, and how external mail is flagged.
-
Vault and retention
Whether Vault retention rules and holds exist on your edition, and what happens to a mailbox when someone leaves.
-
Third-party app access
Apps with access to Gmail and Drive data, and whether users can connect new ones without review.
-
Context-aware access
Access rules by device or location, reviewed only where your edition includes them.
Also on the list
-
Licensing
Business Starter, Standard and Plus and Enterprise editions against what the firm uses. Suspended users still holding licences. Archived user licences.
-
Backup
Whether Gmail and Drive data is backed up outside Google, where it is stored, and how long it is kept. Vault is for retention and legal holds, not restores.
-
Domain
SPF, DKIM (which Google leaves off until someone turns it on), DMARC and secondary or alias domains.
The Google gap
Google Workspace is a strong platform, and its security settings are just as consequential as Microsoft's. They're organized differently, and some important ones (DKIM, forwarding, less secure access) depend on choices made years ago.
We run our own business on Google Workspace and support client firms on it every day. The checkup reads like it.
On the other platform?
Firms on Microsoft 365 get the same depth of review. See the Microsoft 365 checkup.
Both platforms get the same five-part checkup, the same report and the same walkthrough.
Book a Google Workspace checkup
A one-minute form with your firm name, staff count and platform. We reply within two business days. Prefer email? checkup@emailcheckup.ca