Security
Least-privilege access to your Google Workspace, by design
You are trusting SigDeploy with access to your Workspace. We ask for the minimum, tell you exactly what it is, and make it easy to take back.
Last updated October 8, 2026
Two permissions, and nothing more
You grant SigDeploy access yourself, in your own Google Admin console, through domain-wide delegation. The grant is limited to two scopes.
admin.directory.user.readonly
Read-only access to your user directory, so signatures can carry names, titles, phones and org units.
gmail.settings.basic
Permission to update Gmail signature settings. SigDeploy does not read or send email.
Locked to your own domain
Every action is checked so it can only touch mailboxes inside your own domain. Each workspace is fully isolated from every other.
Encrypted credentials
Stored Google credentials are encrypted at rest with AES-256-GCM and are only decrypted at the moment they are used.
Passwordless admin sign-in
Admins sign in with one-time email codes, so there are no passwords to leak or reuse.
Revoke any time
Remove the delegation in your Google Admin console and SigDeploy's access ends immediately. You stay in control of the grant for as long as you use the product.
Security questions
Does SigDeploy read my employees' email?
No. SigDeploy asks for read-only access to your user directory and permission to update Gmail signature settings. It does not read or send email.
What exactly do I grant in the Admin console?
A client ID and two scopes: admin.directory.user.readonly and gmail.settings.basic. A guided setup shows every step, and SigDeploy verifies the connection for you.
How are credentials stored?
Stored credentials are encrypted at rest with AES-256-GCM and only decrypted at the moment of use.
How do I revoke access?
Remove the domain-wide delegation entry in your Google Admin console. SigDeploy's access ends immediately.
Keep reading
Stop chasing signatures.
Design it once. Deploy it to every inbox. See exactly who is updated.
$25 a month after the trial for up to 100 employees. Card required. Cancel any time.