← Back to Knowledge Base

Google verification & CASA certification

PressCal connects to your Gmail to read and send your business email. Google doesn't hand out that access to just anyone: it requires the app to pass a formal verification process and an independent security assessment. PressCal has passed both.

What "Google Verified App" means

The app has been reviewed and approved by Google for the permissions it requests (sending and managing email, reading contacts). In practice:

  • When you connect your account, you see Google's official consent screen with PressCal's name and logo — no "unverified app" warning.
  • Google has reviewed the website, the privacy policy, and exactly how the app uses Gmail data.
  • Access is limited to what the job needs: your own business email, for quotes and replies to your customers.

CASA Tier 2 certification by TAC Security

For apps handling Gmail data, Google additionally requires an independent security assessment: CASA (Cloud Application Security Assessment) by the App Defense Alliance. PressCal's assessment was carried out by TAC Security, an authorized assessor in the program, and completed successfully at Tier 2 — that's the "ESOF Verified and Secured" badge you see on our site.

The assessment covered:

  • Static code analysis (SAST) — reviewing the source code for vulnerabilities.
  • Dynamic scanning (DAST) — attack testing against the running application, with zero high-severity findings.
  • Encrypted transport — TLS 1.3 with HSTS on every connection.

How your data is protected in practice

  • Access keys (OAuth tokens) are stored encrypted (AES-256-GCM) — they never exist anywhere in plain form.
  • Every business is isolated at the database level (row-level security): your data is not reachable from any other account.
  • Your data is never sold or shared with third parties. Gmail data usage follows Google's Limited Use policy: it is used only for the features you see inside the app.
  • You can permanently delete your account and all your data yourself, at any time, from Settings (GDPR compliance).

For full details, see the Privacy Policy at presscal.com/privacy.