CapitalGuard Observatory · Tool record

Gemini

Google · connected assistant

Gemini can work with prompts, uploads, live audio or screen context, and connected Google or third-party services depending on device, account, region, and settings.

Public-Control Score

Partial public control coverage

Measures publicly documented control coverage as of the review date. It is not a breach rate, penetration test, endorsement, or guarantee of safety.

Scored dimensions

The documented control surface.

This record is reviewed against the same five-dimension rubric used across every scored product.

Read Methodology

Access and scope transparency

15/20

Official material names concrete controls and meaningful boundaries for access and scope transparency.

Data and retention controls

16/20

Official material names concrete controls and meaningful boundaries for data and retention controls.

Connector and permission controls

14/20

Official material names concrete controls and meaningful boundaries for connector and permission controls.

Action, approval, and isolation controls

11/20

Official material documents user-facing controls, with some enforcement or audit detail still limited.

Audit and administrative evidence

12/20

Official material documents user-facing controls, with some enforcement or audit detail still limited.

Documented access points

prompts, files, images, audio, video, and shared screens

connected Google and third-party apps

device permissions and Gemini Apps Activity

Settings to verify now

Gemini Apps Activity and auto-delete

Connected apps and public links

Google app device permissions and Saved Info

Primary sources

Inspect the evidence directly.

Google Gemini Apps Privacy Hub Official description of collected content, connected apps, settings, review, and retention.Google Account permissions Official account surface for reviewing third-party access and connections.

Linked evidence

Ten practical Gemini checks.

All 100 Guides

Private file access

Gemini Private File Access: What to Check

Credential exposure

Gemini API Key Exposure: Check Before You Share

Client confidentiality

Gemini Client Data Safety for Freelancers

Prompt injection

Gemini Prompt Injection: A Practical Defense

Connector permissions

Gemini Connector Permissions: Review the Real Scope

Command execution

Gemini Command Execution: Keep Control

Unsafe generated code

Gemini Generated Code Risks: Review Before You Run

History and sharing

Gemini Chat History and Shared Links: Privacy Check

Accidental oversharing

Gemini Sensitive Data: What Not to Paste

Autonomous actions

Gemini Autonomous Actions: Approval Safety Guide