GO1

Publisher Attestation: The information on this page is based on a self-assessment report provided by the app developer on the security, compliance, and data handling practices followed by this app. Microsoft makes no guarantees regarding the accuracy of the information.

Last updated by the developer on: April 11, 2020

General information

Information provided by GO1 to Microsoft:

Information Response
App name GO1
ID c859de61-8a6b-42e6-ba88-f639df33bc72
Capabilities Bot, Tab, Messaging Extension
Office 365 clients supported Microsoft Teams
Partner company name GO1
Physical address 2904 Logan Road, Underwood QLD, Australia
URL of partner website https://www.go1.com/
URL of Privacy Policy https://www.go1.com/en-au/terms/privacy-policy
URL of Terms of Use https://www.go1.com/en-au/terms/user-terms
Main telephone number +61 7 3188 7528
Description of available licensing options, if any The GO1 for Teams integration is free use under the standard GO1 user terms - https://www.go1.com/en-au/terms/user-terms. GO1 sells learning content bundles based on industry/location that can be used with the application. These are sold both as a monthly user subscription as well as single course purchases. Users will have access to user the content while they have an active license.
Licensing contact support@go1.com
Licensing telephone number +61 7 3188 7528

Feedback

Questions or updates to any of the information you see here? Contact us!

How the app handles data

Information provided by GO1 on how this app collects and stores organizational data, and what control an organization has over this data.

Data access using Microsoft Graph

List any Microsoft Graph permissions this app requires, and for each, whether they are delegate or application permissions, the justification and purpose for this permission (what does the app use this information for?), and whether the app stores any of this information in its databases.

Permission Delegated/Application Justification/Purpose Is any of this data stored in app database(s)? Azure AD App ID
Files.ReadWrite.All Application allows users to upload and share files from onedrive app does not store files data c859de61-8a6b-42e6-ba88-f639df33bc72
Group.ReadWrite.All Application allows the app to dynamically setup Teams and channels to support structured learning in Teams environment Teams and channel name and unique id's stored to support the app managing learning environment c859de61-8a6b-42e6-ba88-f639df33bc72
User.Read.All Application allows uses to signing and support sharing learning resources between team members users name and email and UPN stored to provide direct personal learner experience c859de61-8a6b-42e6-ba88-f639df33bc72

Non-Microsoft Services Used

If the app transfers or shares organizational data with non-Microsoft service(s), list the non-Microsoft service(s) the app uses, what data is transferred, and include a justification for why the app needs to transfer this information.

Users first and last name may be shared with GO1's content providers when playing course content. This is only shared where the content provider requires that to provider a personalised learning experience.

Data access via bots

If this app contains a bot or a messaging extension, it can access the roster (first name, last name, display name, email address) of any team member in a team or chat it's added to. Does this app make use of this capability?

Access team/chat roster? Justification/Purpose Is any of this data stored in app database(s)?
No no data is stored

Telemetry data

Does any organizational information, including EUII (end-user identifiable information) and OII (organizational identifiable information), appears in this application's telemetry/logs? If yes, describe what data is present and what controls/processes an organization has in place to archive and/or delete it. If no, describe the controls/processes in place to prevent EUII and OII from appearing in telemetry/logs.

GO1 minimises the storage of any personal or organizational identifiable information. Details application logs that do store this data are deleted within 90days of creation.

Storing and securing organizational data

Describe where/how is this application's data is stored and how access to it is controlled. Is it encrypted? Who can access it? How do you ensure that only authorized systems/individuals can access it? Examples: 2FA for all admins, Privileged Access Management (PMA), partitioning service admin accounts from Azure AD/corporate user accounts, protected IP ranges between systems, etc.

Organisation administrators have access to learning records - they can export and delete these records. More detailed audit and deletion requests can be actions by GO1 Team.

Organizational controls for data stored by partner

Describe any capabilities an organization's administrators have to control their information residing in partner systems, e.g. deletion, retention, auditing, archiving, end-user policy, etc.

2FA is required for all staff systems. GO1 system access managed by role. Only roles requiring access to perform their jobs are given access to production systems. Internal policies require that data is always encrypted in transit and at rest.

Human review of organizational information

Are humans involved in reviewing or analyzing any organizational data that is collected or stored by this app?

Yes

Feedback

Questions or updates to any of the information you see here? Contact us!

Information from the Microsoft Cloud App Security catalog appears below.

Note

The information on this page is based on a self-attestation report provided by the app developer on the security, compliance and data handling practices followed by the app. Microsoft makes no guarantees regarding the accuracy of the information. Contact us if you believe information about an app is outdated.

View in a new tab

Feedback

Questions or updates to any of the information you see here? Contact us!