Device Trust Passport
Technical controls on assessed Macs, with dates and device coverage.
Swiss. Independent. Privacy first.
Know who has access.
Know what changed.
See Google Workspace accounts, sign-ins, app access and admin changes alongside security alerts from your Macs.
Ask your assistant what happened and keep a dated record of the findings.
Google Workspace
Visibility is free.
Sealed account evidence is paid.
A more complete picture.
MacDevice observations
WorkspaceAccount activity
Connected by the person
Read the account event beside the Mac alert.
Ask. Investigate. Keep the record.
Conceptual data flow. No accounts or devices are connected to this page.
Work happens
beyond the device.
Your Mac may be protected while a work account still grants an old app access.
Connecting Workspace lets you review account activity alongside device alerts and investigate both in your assistant.
Share alerts through your chosen channel: Slack, Teams or SMS. Review the context in your assistant.
See how alerts reach the teamWhat cybee sees
in Workspace.
Open a topic to see which events and settings are covered.
Accounts and accessWorkspace members and their account security settings.
Review work accounts and available information about multi factor authentication: the extra checks used when signing in.
Workspace accounts. Personal Google accounts and Apple IDs remain outside this scope.
Sign-insWhen an account was used to sign in.
Review sign-in activity alongside alerts from the same person’s Mac. Investigate unusual activity before drawing conclusions.
Ask what happened, when it happened and which account was involved.
Third party app accessThe permissions another service has been granted.
See which other apps have been given access through a Workspace account.
Reviewing access does not block app actions.
Drive download activityFile downloads, without reading file contents.
See which account downloaded files and when. Check surrounding activity to understand whether a download needs attention.
Download events are recorded. Document contents are not read.
Admin changesThe changes that affect how the Workspace is managed.
Review dated admin changes alongside account activity.
An observed change and an approved next action are different steps.
When someone leaves,
close the access.
Remove a leaver’s Workspace access in one confirmed step. Keep the evidence of the action.
- 1
Review the account
Identify the person and the Workspace account to disconnect.
- 2
Confirm the step
Review the proposed removal of access before confirming it.
- 3
Keep the evidence
The paid plan records the action and its observed result.
Illustrative workflow. This page cannot change account access. Workspace offboarding does not establish that access to other services has ended.
Two sources.
Clear boundaries.
See what was checked on the Mac and in Workspace.
The Trust Passport records assessed Macs. The accounts record covers the connected Workspace organisation.
Other cloud services, company policies and people still need separate evidence.
Both records show what was checked and when. Neither certifies the company.
Read the device record’s scopeConnected accounts record
Observations from Google Workspace, with a sealed accounts record and offboarding evidence in the paid plan.
See the activity.
Choose the record.
Free
Connect Google Workspace and see the account activity.
Paid
See plans and pricingKeep a sealed accounts record and offboarding evidence.
Before you
connect it.
The accounts involved, the data observed and the limits that remain.
Is Google Workspace available now?
Yes. Connect Google Workspace for account visibility. Sealed account records and offboarding evidence are included in the paid plan.
What about Microsoft 365?
Microsoft 365 monitoring is in development. It is separate from the Google Workspace connection available today. See the roadmap
Does cybee read emails or documents?
No. Workspace monitoring concerns account and security events, including Drive download events. It does not read email or document contents.
Does this include my personal Google account?
No. The scope is the connected Google Workspace organisation. Personal Google accounts, Apple IDs and accounts with other services are outside it.
Does the device Passport now cover all our cloud accounts?
No. Account evidence covers the connected Google Workspace organisation. The device Passport covers the Macs it assessed.
How do we connect our Workspace?
Start with your cybee assistant and review the requested connection permissions before approving access. For help with your setup, contact [email protected]. Connect only the organisation you intend to monitor.
Bring the accounts
into the conversation.
Start with Google Workspace visibility. Add the sealed record when you need account evidence.