Trust Center
Security at Scribe
Security is built into the fabric of our products, team, infrastructure, and processes, so you can rest assured your data is safeguarded.
Privacy
For security and data privacy reasons we obviously do not pass your email through our servers to add signatures. Your emails are being sent with your email provider.
Signatures are being added through the Scribe app installed on your device.
Security
Here is the scopes we ask for when syncing your Scribe account with your Office 365 account:
1. Needed for co-workers to log in to Scribe with their Office 365 account. Read access to user profile (name and email)
https://graph.microsoft.com/openid (Delegated)
https://graph.microsoft.com/profile (Delegated)
https://graph.microsoft.com/email (Delegated)
2.Read administrative unit to create departments in Scribe
https://graph.microsoft.com/AdministrativeUnit.Read.All (Application)
3. Read domains to import them in Scribe
https://graph.microsoft.com/Domain.Read.All (Application)
4. Sign in and read user profile
https://graph.microsoft.com/User.Read (Delegated)
5. Read all users’ full profiles
https://graph.microsoft.com/User.Read.All (Application)
6. Read all groups
https://graph.microsoft.com/GroupMember.Read.All (Application)
7. Read all group memberships
https://graph.microsoft.com/Group.Read.All (Application)
8. Maintain access to data you have given it access to user profile
https://graph.microsoft.com/offline_access (Delegated)
Data are the following:
First name, Last name, Job position, Mobile phone, Work phone, Fax, Department, Office, Street address, City, State or province, Zip or postal code, country or region
Scribe only read data. We can not edit data in your O365 or read your emails.
Google Workspace Admin SDK
Scribe has read-only access to all user/department/domain data.
You can find what each scope gives access to on the following page: https://developers.google.com/admin-sdk/directory/v1/guides/authorizing
Scribe is using the following scopes:
1. Needed to sync your co-worker list:
admin.directory.user.readonly
2. Needed to sync your departments:
admin.directory.orgunit.readonly
3. Needed to sync you domains:
admin.directory.domain.readonly
4. Needed to sync user custom attributes created in Google Workspace:
admin.directory.userschema.readonly
Gmail API
You can find what each scope gives access to on the following page: https://developers.google.com/gmail/api/auth/scopes
1. Needed to update the signature:
gmail.settings.basic
2. Needed to update the aliases signature:
gmail.settings.sharing