# Arcora

> Arcora is a Google Drive security and Gmail inbox cleanup tool for individuals and Google Workspace teams.

Arcora connects to your Google account and shows you exactly who has access to your files, which files are overshared or risky, and whose emails are clogging your inbox — then gives you the tools to fix it.

## What Arcora Does

### For Individuals (Personal Google Accounts)
- **Drive Security Audit**: Scan your entire Google Drive. Every file gets a 7-factor risk score (0–100) based on sharing permissions, external access, public links, inactivity, orphaned ownership, and more.
- **Gmail Inbox Cleanup**: Analyze your inbox by sender. See email volume per sender, find newsletters, extract unsubscribe links, and bulk delete all emails from any sender in one action.
- **Sender Verification**: Identify senders with failed SPF/DKIM checks — a signal of potentially untrustworthy or spoofed senders.
- **Activity Log**: A persistent log of every scan and cleanup action you take.
- **Free to start**: No credit card required.

### For Google Workspace Teams (Business)
- **Workspace-Wide Drive Audit**: Scan and audit every file across the entire Google Workspace organization. Identify external sharing, orphaned files (owned by departed employees), and access policy violations.
- **Risk Scoring at Scale**: 7-factor risk scoring applied to every file across every user in the workspace.
- **Compliance Reporting**: Auto-generated monthly governance reports with month-over-month comparisons. Maps to GDPR, HIPAA, SOC 2, ISO 27001, DPDPA, and CCPA.
- **Governance Workflows**: Create batch governance actions (make files private, transfer ownership) with multi-step approval chains and a full, immutable audit trail.
- **Department Analytics**: Break down risk scores by department and individual user. Identify top risk contributors across the organization.
- **Currently in early access**: Contact hello@arcora.in to get started.

## Honest Limitations
- Drive scan time depends on file count and Google API rate limits — large drives may take longer.
- Workspace governance (making files private, transferring ownership) via Drive API is on the roadmap — current batch actions create governance workflows pending execution.
- Currently supports Google Workspace only (Google Drive + Gmail). Microsoft 365 and Zoho Workplace are on the roadmap.
- PDF/CSV compliance report export is on the roadmap.

## Privacy & Security
- Arcora uses Google OAuth 2.0 for personal accounts and Google Service Accounts for workspace-wide access.
- All credentials are encrypted with AES-256 at rest.
- Read-only access by default — Arcora never modifies your files or emails without an explicit user action.
- Arcora does NOT sell, share, or monetize user data.
- Arcora does NOT store the content of emails — only sender metadata (name, email, volume, dates).
- Users can disconnect their Google account and permanently delete all their data at any time.

## Pricing
- **Free (Individual)**: Full Drive security audit and Gmail inbox cleanup. Manual scans. No credit card.
- **Paid Individual**: Skip queue, weekly auto-scans, larger scan limits. $29/month.
- **Business**: Workspace-wide governance, daily auto-scans, compliance reports, approval workflows. Contact us for pricing.

## Technology
- Frontend: React 19, TypeScript, TailwindCSS
- Backend: Hono.js (Node.js), PostgreSQL, Drizzle ORM
- Auth: JWT tokens, Google OAuth 2.0, Service Account for workspace
- Integrations: Google Drive API, Gmail API, Google Admin SDK

## Key URLs
- Homepage: https://arcora.in
- Sign up (free): https://arcora.in/signup
- Sign in: https://arcora.in/signin
- Contact / Workspace enquiries: hello@arcora.in