Overview
For many firms, Google Workspace is where the work is: the proposal in Drive, the client thread in Gmail, the deadline in Calendar. Kroy connects to Workspace once, then gives each authorised AI exactly the slice a task needs.
Permissions
Each Workspace action is a Kroy capability. Kroy decides every request against the person, the agent, the delegation between them and the organisation’s policies.
A Skill such as Prepare Proposal might be allowed to read a client folder and the previous proposals, and to create a new document — but not to read the rest of the drive, and not to email the client.
Drafts, not sends
A common policy is that AI may prepare external communication but a person sends it. Kroy enforces this at the action level: gmail.draft.create can be permitted while gmail.mail.send requires approval. The same applies to sharing: gdrive.files.share with anyone outside the organisation requires approval by default.
Industries
Consultancies, law firms and accountancy practices running on Google Workspace can use the same per-client boundaries described for Microsoft 365: an AI acting for a person sees the clients and matters that person works on, and nothing else.
Security
Kroy holds the Google connection. AI clients receive results, never tokens. Revoking an AI’s Kroy access removes its Workspace access immediately. Every read, draft, send and refusal is recorded.