What changed
Klipy is now CASA Tier 2 compliant. CASA, the Cloud Application Security Assessment, is Google's security review for apps that access user data, and passing Tier 2 means Klipy cleared its checks on data handling, authentication, and privacy. With that in place, Klipy supports full OAuth with both Google and Microsoft.
Who it's for
Owner-sellers who are handing Klipy their business email and want to know it is held to a real standard. If security review is part of how you pick tools, this is the certification behind Klipy's Gmail and Outlook connections.
What it means
- Gmail and Google Workspace connect over a secure OAuth flow, with no app passwords or workarounds.
- Outlook and Microsoft 365 connect through the same direct OAuth flow.
- Your credentials are never stored. Authentication runs through Google's and Microsoft's own systems, not ours.
What's next
Security is the foundation under everything we build. If you are trusting Klipy with your business communications, we treat protecting them as our job.
