Integrations

Google Workspace

Drive, Calendar, and Meet wired into the Orvine capture pipeline.

Capabilities

Drive ingest — index selected shared drives or folders. Orvine honors the underlying Drive ACL: a user only sees content they have Drive permission on.
Calendar scheduling — create interview sessions directly on the interviewee's calendar with a Orvine Meet link.
Meet transcripts — opt-in ingestion of Meet recordings and transcripts produced by Workspace Enterprise.
Identity — Workspace domains can be used as a SSO source via OIDC; see the SSO guide.

Scopes

OAuth scopes

drive.readonly                    Index Drive content the user can already see
calendar.events                   Create and update interview events
meetings.space.readonly           Resolve Meet metadata
admin.directory.user.readonly     Resolve members for ACL evaluation

Domain-wide delegation is supported but not required. Without DWD, Orvine sees only content explicitly shared with the integration service account.

Drive ACL is the source of truth

Orvine never elevates beyond a user's Drive permissions. If a user loses access in Drive, citations to that file return as redactions on their next query. There is no shadow copy.