Google Drive Permissions Audit — Who Can Access Your Files
Most teams can't answer that. NeatDrive can. The audit is free and read-only, and nothing in your Drive changes.
Free, read-only, no credit card.
What the audit finds
Public links you forgot about — files set to "anyone with the link," with owner, path and last-modified date. External access nobody's tracking — who outside your organization has access, grouped by domain and ranked by reach. Sensitive-looking files, cross-referenced — files whose names suggest tax documents, payroll, bank statements, contracts or ID, checked against sharing status so you fix the worst thing first.
The audit runs on the narrowest access that can answer the question
The scan reads file metadata only — names, sizes, dates, owners and sharing settings. It cannot read what is inside your files. Two optional features — content-aware naming and a content-based duplicate check — read file contents, and only on files you choose to run them on, after you grant write access. Content-aware naming reads a short snippet; the duplicate check reads the whole file to compute a checksum in memory and keeps only the hash. NeatDrive also cannot send mail as you, and it does not run while you are away. Write access is a separate request, made at the moment you approve a specific action, and switched off again from Settings. Every Drive tool publishes its permission list. Ours is worth comparing.
Fixing it is the part everyone gets wrong
A tool that can revoke a thousand permissions can also break a thousand workflows. Every change is shown to you row by row, spelling out exactly what it does, before anything is applied, and nothing changes unless you approve it. Files move to a NeatDrive Archive folder inside your own Drive rather than being deleted. On paid plans, a revoked share can be undone from Recent Changes; other actions recover differently. Some actions NeatDrive can't undo at all: removing your own access to someone else's file, transferring ownership once Google has reassigned it, emptying Trash from the Declutter page, and deleting your NeatDrive Archive folder. The preview is where you catch it. Every action is written to a full activity log you can export, tamper-evident and with a verifiable integrity chain — so when a client asks what you did about it, you have an answer with a chain of custody.
Built for the person who owns the problem but not the admin console
Operations leads. Partners at professional firms. Agency owners. Practice managers. Anyone responsible for client confidentiality who can't file an IT ticket and wait three weeks. Accounting, law, architecture, insurance, wealth management, and agencies with retainer clients — anywhere a file reaching the wrong person is a professional problem and not just an IT one.