We are excited to announce that Chad has completed Cloud Application Security Assessment (CASA) Tier 2 certification, verified by TAC Security — one of Google's approved CASA assessors. This makes Chad one of the elite few AI agent platforms to be officially authorized by Google to directly integrate with Google applications and manage sensitive customer data.
Enterprise-grade security at democratic prices
CASA Tier 2 certification joins a growing list of security and compliance measures we maintain — not because we're an enterprise vendor charging enterprise prices, but because your customer data deserves enterprise-grade protection regardless of what you pay.
Chad deploys AI agents that handle real customer conversations, process lead information, and now integrate with your most sensitive tools like Gmail. We believe that if you're trusting an AI agent with your customer relationships, the platform behind it should be independently verified, not just self-certified.
Every store on Chad — from a single-location Shopify shop to a multi-brand ecommerce operation — gets the same security posture. No "enterprise tier" gate. No security upcharge.
What is CASA, and why does it matter?
Anybody can claim to be privacy-forward, but few take the step to have their software independently audited. CASA — Cloud Application Security Assessment — is administered by the App Defense Alliance and enforced during Google's OAuth verification process.
By achieving CASA Tier 2 certification, Chad is deemed to be trusted and secure enough to access, handle, and manage sensitive user data through Google APIs. All our customers will now be able to safely allow Chad AI agents to reply to their Gmail inbox, update their Google sheets, and draft Google Docs on their behalf.
CASA 1 vs 2 vs 3: how the tiers compare
Google assigns a CASA tier based on the sensitivity of the data your app accesses and the size of your user base. Here's how to think about each level:
CASA Tier 1 — Self-Assessment
Tier 1 is the baseline. The developer completes a self-assessment questionnaire covering fundamental security practices — things like HTTPS enforcement, secure credential storage, and basic access controls. There is no external auditor involvement. This doesn't actually prove that the codebase is secure, only that the developer claims it is.
CASA Tier 2 — Independent Lab Assessment
Tier 2 requires a hands-on security assessment by an authorized third-party lab. For Chad, this was TAC Security, a globally recognized cybersecurity firm and approved CASA assessor. The assessment includes application scanning, vulnerability testing, and verification that security controls meet Google's requirements for apps handling sensitive data — like reading email via the Gmail API or writing to Google Sheets and Google Docs.
This is the tier required for most apps integrating with Google Workspace APIs at the sensitive scope level.
CASA Tier 3 — Full Security Audit
Tier 3 involves a comprehensive security audit with deeper code review, penetration testing, and infrastructure analysis, conducted by an approved lab. Successful completion of a CASA Tier 3 audit confers an "Independent Security Verification" badge for Google Workspace Marketplace listings.
Where Chad sits: Chad continuously works to provide top notch security for all our customers. We've completed CASA Tier 2 with TAC Security, which covers the sensitive Google API scopes our integrations use — including the Gmail API, Google Sheets, and Google Docs. Our next milestone is to achieve SOC-2 certification.
What this unlocks for Chad users
CASA Tier 2 certification clears the path for Chad's AI agents to integrate directly with your Google Workspace tools. Here's what that means in practice:
Gmail API integration
Imagine waking up to an empty inbox instead of a backlog. Chad's AI agents now connect directly to Gmail — reading incoming emails, analyzing the conversation, and drafting personalized responses for you to review and send. Your customers get lightning-fast replies. You just sign off and hit send.
Not comfortable with fully automated responses? No problem. Chad drafts so you stay in control — every reply is ready for your approval before it goes out.
And this isn't just for ecommerce support tickets. Wellness centers can handle massage booking confirmations and rescheduling requests. Restaurants can manage table reservation updates. Fitness studios can field class booking changes. Landscaping businesses can respond to sales inquiries and quote requests. Whatever hits your inbox, Chad reads it, understands it, and prepares your response — across every industry, not just retail.
Google Sheets and Google Docs
Stop copy-pasting lead details into spreadsheets. Chad now reads from and writes to Google Sheets and Google Docs directly — so when a new inquiry comes in, the lead data lands in your shared spreadsheet automatically. Your sales team sees it instantly without anyone doing manual data entry.
Need your AI agent to know your pricing, inventory, or service menu? Keep it in a Google Sheet and Chad pulls from it in real time — always accurate, always up to date, no retraining required. Update a cell, and your agent's answers update with it.
If your team already runs on Google Workspace, Chad now lives where you do.
Ditch the Zapier tax
Are your Zapier zaps costing you more than you realized? Zapier charges per zap, per task, every month — and those Gmail-to-Sheets and Sheets-to-CRM connections add up fast. Worse, you still have to manually build and maintain each automation yourself. One broken zap and your leads silently stop syncing until you notice.
With Chad's direct Google Workspace integrations, you can replace entire Zapier workflows. Gmail, Google Sheets, Google Docs — all connected natively, no per-zap fees, no fragile multi-step automations to babysit.
And the best part? You don't configure anything. You talk to a human — us — tell us what you need, and we set it up for you. No drag-and-drop automation builder. No YouTube tutorials. Just tell us "sync my leads to this spreadsheet and draft replies to new inquiries," and it's done.
What's next
We're rolling out Gmail, Google Sheets, and Google Docs integrations to all Chad stores over the coming weeks — but we build any integration your business needs. CRM systems, ERPs, messaging platforms, custom APIs — if it helps your AI agents serve your customers better, reach out to us and we'll get it done. That's not a tagline. It's how we got CASA Tier 2 certified in two weeks because a customer asked.
