Google Workspace (Gmail) — Integration

Overview

Ingest emails and threads into Chronicle timelines with smart stitching, redaction, and deep links back to Gmail. Show headers, participants, labels, and excerpts with policy-based body storage.

Capabilities

• OAuth-based connection per mailbox or delegated domain-wide install

• Thread-level grouping with participants, subject, labels

• Optional body ingestion with PII redaction & link-only mode

• Smart stitching to Contacts/Accounts via Identity Graph

• Deep link back to original Gmail thread

• Admin controls for retention, redaction, and legal hold

1. 1

   Step 1

   In Chronicle → Settings → Integrations, click **Connect Gmail**.

   Back to top
2. 2

   Step 2

   Choose **User Mailbox** (per-user OAuth) or **Domain-wide** (admin consent).

   Back to top
3. 3

   Step 3

   Approve requested scopes (read-only by default).

   Back to top
4. 4

   Step 4

   Select ingestion mode: metadata-only, excerpts, or full body with redaction.

   Back to top
5. 5

   Step 5

   Map labels to tags (optional), then start a backfill.

   Back to top
6. 6

   Step 6

   Open any Contact/Account timeline to see recent emails.

   Back to top

Limitations

• Free Google accounts may not support domain-wide delegation.

• Large attachments are referenced via SecureStore links only.

• API quotas apply; heavy backfills are queued and rate-limit aware.

FAQs

Pricing