AW-019

Type: Connector disposition

Subject: Google Calendar (Slack app)

Decision requested: Approve the proposed disposition for Google Calendar (Slack app) across its 3 assessed actions

Inherent / residual: High / Moderate

Control owner: Slack Workspace Admin + Google Workspace Admin

Context: 3 assessed actions. No Claude runtime control on this path. Administrative actions proposed: Permit with restrictions x2, Permit x1. Class: Slack workspace application (third-party data path - no Claude involvement). Control point: Slack app approval (Slack admin) + source system configuration + vendor contract. Control owner: Slack Workspace Admin + Google Workspace Admin.

Risks: R-27 [Critical inherent / High residual] Aggregate outbound surface across the estate | R-28 [Critical inherent / High residual] Slack functions as a laundering layer around Claude tool permissions | R-31 [Critical inherent / High residual] Slack is the aggregation point for the enterprise data estate | R-35 [High inherent / Low residual] Duplicate ungoverned paths for data already assessed as Claude connectors

No verification items specific to this connector.

Ruling:

Amendment or condition: