Cowork handles your docs and files. Civic decides which ones it can touch.
Claude Cowork takes on multi-step knowledge work: organizing files, synthesizing research, building spreadsheets. Civic makes sure it stays in the folders you scoped.
Cowork organized your Google Drive. Including the HR folder.
Just imagine, one day…
You ask Cowork to clean up your team’s Google Drive: sort documents by project, archive anything older than 6 months, and build a summary spreadsheet. It connects to the shared drive and starts working through folders.
It does exactly what you asked. It also processes the HR folder nested inside the shared drive. Performance reviews, salary spreadsheets, and termination letters get moved into the new project folders, renamed, and summarized in a Google Sheet shared with the entire team. Someone opens the spreadsheet and sees their manager’s review notes about them.
The agent organized everything it could see. The problem is what it could see.
Without guardrails, Cowork reads every file you can see.
It does things you did not intend
You asked it to organize project files. It processed the HR folder too, because it was in the same shared drive. Salary data ended up in a spreadsheet visible to the whole team.
You cannot prove what happened
Which files were moved? Which folders were read? What ended up in the summary spreadsheet? Without an audit trail, you're manually checking every folder.
You cannot stop it fast enough
Cowork runs multi-step tasks autonomously. By the time you check back, the spreadsheet is already shared. Removing access doesn't undo what people already saw.
It gets confused and you never know
A document named “Q3 Project Plan.docx” sitting in the HR folder. Cowork moves it into the project summary because the filename matches. The contents are a compensation review.
Cowork calls Civic. Civic scopes every file operation.
Connect Claude Cowork through Civic in three steps
Add Google Drive, Sheets, and Gmail.
Scope Drive to /Shared/Projects only.
Make /Shared/HR and /Shared/Finance invisible.
Done. 3 tools connected:
✓ Google Drive — /Shared/Projects only
✓ Google Sheets — write to /Shared/Projects
✓ Gmail — read-only
Your MCP URL is ready to copy.
The same scenario. Different outcomes.
Without Civic, Cowork reads every folder on the shared drive. With Civic, it only sees the folders you scoped.
Cowork handles your files. Civic helps you scope which ones.
You trust Cowork to organize your drive. Spend 10 minutes scoping which folders it can see so HR data stays private.