DOCUMENT OPS
Block external Google Drive shares until a redaction review passes
Detects when a Drive file's sharing changes to external or anyone-with-link, scans it for sensitive data, and reverts the share plus opens a review if it fails the gate.
How it runs
The automated pipeline, trigger to output.
- TriggerDrive file shared externally or set to anyone-with-linkGoogle Drive
- ActionRead file content as textGoogle Drive
- ActionScan for PII and secretsOpenAI
- LogicPass or fail against sharing policy
- ActionRevoke external permission on failGoogle Drive
- OutputOpen redaction review task in LinearLinear
What it does
Monitors Google Drive permission changes and intercepts files that get shared externally or set to "anyone with the link." Each newly externalized file is scanned for PII and secrets; if it fails, the workflow revokes the external grant and routes it for human redaction review.
When to use it
Use it when contractors or employees can self-serve external sharing and you need a safety net that catches an over-shared spreadsheet or contract before a recipient ever opens it. Best for orgs enforcing data-handling policy on a shared Drive.
How it works
- 1A Drive file-permission change to external/public fires the trigger.
- 2The file content is read and reduced to text.
- 3An OpenAI scan returns sensitive-data findings by category and location.
- 4A logic branch decides pass or fail against policy.
- 5On fail, the external permission is removed so the link goes dead immediately.
- 6A review task is created in Linear with the file link, the findings, and the user who shared it, so an owner can redact and re-approve.
Set it up
What you configure once, before turning it on.
- 1Connect Google DriveDocs, sheets, slides, files.
- 2Connect OpenAIModels, embeddings, files.
- 3Connect LinearIssues, projects, cycles, triage.
- 4Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 5Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 6Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More Document Ops workflows
Narrate new Dropbox PDFs into MP3 audio versions
When a PDF lands in a watched Dropbox folder, extract its text and generate an ElevenLabs voice narration.
On-demand PDF narration via webhook with emailed audio link
Accepts a PDF URL through a webhook, generates an ElevenLabs narration with the requested voice, stores the MP3, and emails the requester a download link.
Triage emailed contract redlines and route by risk
When a counterparty emails a redlined contract, extracts the attachment, diffs clauses against approved templates.
Batch-narrate a Google Drive PDF folder in multiple languages
On a schedule, finds PDFs in a Google Drive folder that lack audio, then generates ElevenLabs narrations in each configured language and files them into per-language subfolders…
Executed Contract Exhibit & Initials Completeness Gate
When a signed contract lands in a Dropbox intake folder, verify every required exhibit, schedule, and initialed page is present.
Draft a negotiation brief from contract clause deviations
An agent reviews a contract against approved templates, researches each deviation.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.