Type: Connector disposition
Subject: Google Drive
Decision requested: Approve the proposed disposition for Google Drive across its 9 assessed actions
Inherent / residual: High / Moderate
Control owner: Claude Owner / Primary Owner
Context: 9 assessed actions. Runtime settings proposed: Always Allow x6, Needs Approval x3. Class: Remote MCP server (first-party, vendor-hosted). Control point: Claude tool permission (Customize > Connectors; org-wide by Owner/Primary Owner). Control owner: Claude Owner / Primary Owner.
Risks: R-02 [High inherent / Moderate residual] Indirect prompt injection via document bodies and comment threads | R-04 [High inherent / High residual] Egress and vendor-side retention of regulated data | R-05 [Critical inherent / High residual] Chained exfiltration: Drive read to Calendar outbound write | R-06 [Moderate inherent / Moderate residual] Attribution gap between agent-performed and user-performed actions | R-07 [High inherent / Low residual] Over-shared content amplification | R-14 [Moderate inherent / Low residual] Writes landing outside DLP, labeling, and retention scope
Open verification: V-13 [High] Whether a Drive over-permission and external-sharing review has been completed, and what it found for regulated content.
Ruling:
Amendment or condition: