Google Drive Integration
Connect your Google Drive to Allios to securely import, export and store files, meeting recordings, attachments and backups. Only request the permissions you explicitly need — users stay in control.
What Allios can do with Drive
- Import files & attachments to Projects, Clients, Clinics, and SACCO records.
- Save meeting recordings and session notes to a designated Drive folder.
- Export generated reports and backups to Drive on demand.
- Allow per-user Drive selection and per-tenant storage policy controls.
Allios requests the minimum Google Drive scopes required for a feature. For file upload/download the recommended scope is https://www.googleapis.com/auth/drive.file (app can access files created or opened by the app). For read-only import use https://www.googleapis.com/auth/drive.readonly.
OAuth Scopes we may request
Depending on features enabled by you or your tenant admin, Allios may request one or more of the following Drive scopes (we only request what we need):
https://www.googleapis.com/auth/drive.file— create and access files created or opened by Allios (recommended when writing files).https://www.googleapis.com/auth/drive.readonly— read user Drive files (recommended for imports only).https://www.googleapis.com/auth/drive.metadata.readonly— read list and metadata without file contents (useful for listing/searching).https://www.googleapis.com/auth/drive— full Drive access (only requested if absolutely required and after clear justification).
Typical connect flow
- User clicks Connect Google Drive in Allios and is redirected to Google's OAuth consent screen.
- User reviews requested scopes and consents to share selected Drive data with Allios.
- Allios receives an access token (and optional refresh token) and stores it encrypted for use by the user’s session and backend services.
- Allios performs the requested action (upload, import, list files) only within the scope allowed by the token.
Security & Data handling
- Access tokens and refresh tokens are encrypted at rest and only accessible to back-end systems performing Drive operations.
- All data in transit uses TLS; stored backups can be encrypted per-tenant.
- We keep imported files or copies only as long as needed for the feature (retention policy configurable per tenant).
- Users may request deletion or export of any files Allios stores; we will also provide procedures for telco/data portability requests when applicable.
User controls & revocation
Users control access from Google Account settings. To revoke Allios access:
- Open Google Account > Security > Third-party apps with account access.
- Select Allios and click Remove Access.
- Optionally notify Allios support to permanently delete any Drive data previously stored by Allios.
Suggested OAuth consent wording
Application name: Allios
Short description (consent screen): Allow Allios to view and manage files you create with Allios in Google Drive to enable file import, backups and meeting recording storage.
Why we request these scopes: We need drive.file to create and manage files the app creates and drive.readonly to import files you choose. We do not access files outside of what you explicitly share or create via Allios.