GMail OAuth Verification Process

Overview

In October of 2018, Google announced that it would start being more stringent with software vendors that integrate with the GMail API. As part of this initiative, applications that use "restricted" or "sensitive" GMail API scopes will be subject to a re-verification process intended to ensure compliance with Google's terms and conditions.

ChurnZero integrates with the GMail API to provide users the ability to synchronize email that is sent to/from users within the ChurnZero system. As such, we require the use of the restricted GMail API scope, gmail.readonly so we can read email on our users behalf and store GMail content on our servers.

As of the writing of this document, we have gone through and passed the review process with Google, however there is an additional Security review process that is required if the application is intended for consumer GMail accounts (email accounts ending with @gmail.com). The ChurnZero integration is intended and allowed for use with only G-Suite accounts and is therefore exempt from the security review process.

Why do I see an "Unverified App" message when I try to authorize my GMail Account?

As stated above, ChurnZero has gone through the Google verification process, however, due to ChurnZero targeting only G-Suite accounts, an additional step is required by your G-Suite system administrator to allowlist the ChurnZero Application for use within your organization. Details on this process can be found here: Allowlist the ChurnZero Gmail Application within G-Suite.

Additional Resources

• Configuring the Gmail Integration
• ChurnZero Email Integration - Security
• ChurnZero Security Whitepaper
• ChurnZero Privacy Policy