Geeplo Try the demo Book a 30-min call

Control external sharing. Move tenants cleanly.

Find every Google Workspace file shared outside your company, clean up outside access on a schedule, and move users' drives, mail and calendars between tenants.

Two tenants becoming one? Move each user's mail, drive and calendar, plus your groups and Shared Drives; interrupted tasks resume without re-copying finished files, and you close with a report.

Groups, shared drives and service accounts generate steady admin work. Dynamic group rules draft membership changes, and they wait in the Approval Gate until you approve them.

What brings you here?

Jump to the Transfer Tool ↓

Jump to group admin ↓

Partner / MSP

Try the demo Book a 30-min call Book a 30-min call Watch the 90-second video
Geeplo (illustration)
  • Trusted domains stay open
  • Shared Drives: copy or move
  • Calendar, Contacts, Groups too
  • 12migration types in one Transfer wizard
  • 11modules in one console
  • Resumableinterrupted tasks resume without re-copying finished files

Both tools, in under 90 seconds.

A narrated run through external sharing and the Transfer Tool. Captions are on by default.

Read the tour as text
  1. Geeplo. Control external sharing, and move tenants cleanly.
  2. First, external sharing, with ShareGuard.
  3. ShareGuard inventories every My Drive and Shared Drive, and records who can open each file.
  4. Each outside domain is trusted or not. Your own domains and the partners you add never count as risk; everything else is outside access.
  5. Pick an outside domain, and see every file it can open, and who owns it.
  6. Set a cleanup schedule: weekly, with a seven-day deadline.
  7. File owners remove or extend each share. Anything still open after the deadline waits for your approval.
  8. Next, the Transfer Tool.
  9. Pick what moves: My Drives, Gmail, Calendar, Contacts, Keep, Groups, and Shared Drives.
  10. Users are mapped to the new domain automatically, and anyone missing is flagged before you start.
  11. Copy a Shared Drive and the source stays intact, or move it outright.
  12. Review, create the migration, and every part runs as its own task, in one batch.
  13. Sharing is not rewritten to the new domain, so plan to re-share at the destination.
  14. Geeplo, for Google Workspace.
  15. Book a 30-min call to see both tools in action.

ShareGuard

Find every file people outside your company can open.

ShareGuard inventories every share in your Workspace: it shows what an outside company can open, and who owns each file.

Read the full ShareGuard guide

When a Shared Drive has to cross tenants: move vs copy

Transfer Tool

Tenant-to-tenant migration for Google Workspace.

When companies merge or split, the Transfer Tool copies or moves Shared Drives and My Drives, and moves each user's Gmail, Calendar, Contacts and Keep Notes, plus Groups, into the new Google Workspace tenant.

Read the full Transfer Tool guide

Follow the tenant-to-tenant migration checklist

Shared Drive: move vs copy

Changes wait for your approval.

Geeplo drafts group membership changes from your rules. Nothing changes in Google until an admin approves.

  • Approval Gate

    Rule-based group changes go to the Approval Gate first, not straight to Google.

  • Mass-removal safety stop

    A sync that would remove more than half of a group's rule-added members stops before touching Google.

  • Owners clean up first

    ShareGuard cleanups give file owners a deadline; what's left waits in the Approval Gate.

  • Dynamic rules with a preview

    Build rules from 12 directory fields with AND, OR and NOT, and see who matches before you save.

Group Management, Shared Drive Management, Service Accounts and the Approval Gate in one console.

Everything else, behind the same login.

ShareGuard and the Transfer Tool, plus nine more modules in the same console. Sharing removals, Shared Drive changes and migrations are written to a tamper-evident audit log.

People and groups

Drives, accounts and data

Oversight and approval

  • Approval Gate

    Dynamic-group adds and removes, and overdue ShareGuard removals, are proposed here first, not applied straight to Google.

  • Assets Revalidation

    Inactive groups and drives email their owners to keep, hand off or retire them.

  • ConfigShield

    Scans your tenant configuration (2-step verification, DNS, roles, groups, inactive accounts), gives it a 0-100 score, and lists each gap as a finding, with evidence packs.

Built for the admin who signs off.

What Geeplo can reach in your Workspace, and what happens before anything moves.

  • Access you can remove

    Geeplo connects through a Google service account that you authorize in your Admin console under Security > API controls > Domain-wide delegation. It is granted a fixed set of scopes, listed on the scopes page. Remove the client there to revoke access; Google applies the change shortly after.

  • Checked before anything moves

    Every migration runs a preflight, then the transfer, then cleanup. Tasks that keep failing are marked “Dead Letter”. Fix the cause, then press Retry Failed: finished items are skipped.

  • Nothing closes without a person

    ShareGuard cleanups and dynamic-group changes are proposed, not applied: they wait in the Approval Gate until an admin approves.

See every scope Geeplo uses

Security details

Questions admins ask first.

Anything else, ask on a 30-min call or at [email protected].

What access does Geeplo need to our Google Workspace?

Geeplo connects through a Google service account that you authorize in your Admin console under Security > API controls > Domain-wide delegation. It is granted a fixed set of scopes, listed on the scopes page. Remove the client there to revoke access; Google applies the change shortly after. The Transfer Tool also works through domain-wide delegation on the tenants it connects, and won't start a migration until the source tenant's delegation has been verified in the last 7 days.

Does copying a Shared Drive change the source?

No. Shared Drive Copy and My Drive Copy leave the source intact, and a re-run copies only what changed, or overwrites if you choose. Shared Drive Move and My Drive Bridge are marked destructive in the wizard: the files leave the source.

What carries over with the data?

Copies rebuild the folder structure at the destination. File sharing is not carried across tenants today: Geeplo does not rewrite old-domain addresses to the new domain, and public links are never recreated. Plan to re-share at the destination. Gmail keeps each message's original date, and labels are recreated by name.

Do users need accounts in the new tenant first?

Yes, today. Users are auto-mapped to the new domain and validated, and any account that doesn't exist yet in the new tenant is flagged before you start. Create those accounts first.

What if a migration fails halfway?

Interrupted tasks resume without re-copying finished files. Tasks that keep failing are marked “Dead Letter”. Fix the cause, then press Retry Failed: finished items are skipped.

Which data can the Transfer Tool move?

My Drives (copy, or move through a bridge drive), Shared Drives (copy or move), Gmail, Calendar, Contacts, Keep Notes, Google Groups, Google Chat spaces, and calendar resources such as buildings and rooms. Gemini Gems can only be handed over between users in the same domain, not to a new tenant.

Is Geeplo SOC 2 or ISO certified?

Not today. We make no certification claims until an audit actually exists. Until then, the access Geeplo holds is listed scope by scope on the scopes page, and you can remove it in Domain-wide delegation at any time.

See it on a Workspace like yours.

A 30-min call on the live console, with your sharing and migration questions answered. We reply within one business day.

In 30 minutes you’ll see

  • Where external sharing stands, and a cleanup schedule that owners act on first
  • A tenant migration, through all five wizard steps
  • Answers on scopes, delegation and rollout for your Workspace

Prefer email? [email protected]