we passed CASA Tier 2

A few weeks back I mentioned signups were paused so I could grind through Google’s CASA Tier 2 review. Update: we’re through.

TAC Security, one of Google’s authorised assessment labs, ran the full review on Liv4All: static analysis (SAST), dynamic analysis (DAST), and a manual architecture walkthrough. The output is a Letter of Validation, which is what Google requires before any app can keep handling restricted Gmail scopes in production.

Why should you care?

Liv reads and drafts your email on your behalf. Google classifies that as a restricted scope, and rightly so. CASA Tier 2 is how they keep operators like us honest about what actually happens to your data after you tap “allow” on the consent screen.

An outside party, not Liv’s founders, verified how we store your Google tokens, how we isolate your data from other users’, and how we expose the app to the internet. They confirmed it meets the published bar, and we get to re-prove it every 12 months for as long as we want to keep that scope.

The Letter of Validation is available on request, and our trust page walks through exactly what was covered and what wasn’t.

One more thing: signups are open again. Head to app.liv4all.com to start a 14-day trial.