Yes. Every year, Filerev is security-tested by an independent lab under the Cloud Application Security Assessment (CASA), the program Google uses to vet apps that access Google Drive. Filerev is verified at Assurance Level 2 (AL2), the highest level Google’s CASA security program offers. Google only required the lower level, AL1, for Filerev. We chose AL2 because an app with access to your Google Drive should meet the highest standard available. Here is what that means in practice:
CASA Assurance Level 2 (AL2) Verified
The highest CASA level. Google required AL1; Filerev chose AL2.
At AL2, the lab does not rely on evidence the developer provides. Eydle, an App Defense Alliance authorized lab, evaluated every applicable requirement itself, directly against the live Filerev application, its hosting infrastructure, and the servers that store your data, including authentication, session management, access control, OAuth integration, encryption, input validation, handling of untrusted files, and secret storage. Filerev passed every requirement, with no exceptions or conditional findings.
Current Letter of Validation (issued October 2026, valid through October 2027) · Previous audits: Nov 2025, Nov 2024, Dec 2023
- Regular Security Audits – The audit is repeated every year and checks Filerev against the OWASP Application Security Verification Standard (ASVS), the industry benchmark CASA is built on. Google reviews the results, and we also run automated security audits before every update to the Filerev application.
- Minimal Data Access – Filerev accesses only essential file metadata, such as file names and sizes, and does not download and store your Google Drive file content. The file metadata is stored on secure servers with security practices such as encryption at rest, in-transit encryption, and user isolation, to name a few.
- Encrypted Access Tokens – The Google authorization tokens that let Filerev read your file metadata are individually encrypted with AES-256 before being stored, on top of full encryption at rest. Filerev never sees or stores your Google password, and you can revoke Filerev’s access at any time from your Google account settings.
- Data Removal – We automatically remove your file data after 30 days of inactivity and provide the ability to submit your account and data for deletion.
We also have written guarantees in our privacy policy and terms regarding how your data is handled. The following are a few main points taken from the privacy policy:
- We do not and will not sell your information. We don’t help companies advertise their products to you. (read more)
- We offer a free plan and hope you will upgrade to a paid subscription. Subscriptions are the only way we make money. (read more)
- We use a small number of trusted third parties (like Stripe for managing payments) to help provide our products. (read more)
Still want to know more? Read Filerev reviews from the Google Workspace Marketplace and Google Play Store, including the critical ones and our responses. Or read what Chrome Unboxed or ZDnet has said.
You can also learn more about the Filerev Founder/Creator by visiting Brett Batie’s LinkedIn Profile.