Download the blank worksheet and complete it locally. AIPulseGuard does not collect your completed record. Use account aliases and evidence references, without copying passwords, tokens or private records into the template.
Download the editable worksheetPlain-text Markdown · Version 1 · October 9, 2026. Opens in a text editor; no account or subscription required.
Start with the task
Write the one task this connection should support. Then record the actual permission scope. A weekly summary and automatic file sharing need different boundaries. If a permission is unexplained, record it as unknown rather than assuming it is necessary.
What the worksheet records
| Section | Evidence to keep |
|---|---|
| Connection identity | App, account alias, connection type, purpose, owner and review date. |
| Access scope | Observed read, write, delete and sharing powers, permitted locations and evidence references. |
| Action boundaries | Human approvals, stop conditions, spending limits and inspectable logs. |
| Revocation check | The control used, links remaining, expected versus observed behavior and what the check cannot establish. |
| Previously shared data | Retention documentation, separate deletion requests and the provider's actual response. |
| Decision | Retain, reduce, remove, escalate or unknown, with an owner and next review trigger. |
Use evidence without exposing it
Keep sensitive screenshots and logs in your organization's approved storage. Put a reference to that evidence in the worksheet. Before sharing the worksheet itself, check whether its account aliases, data locations or permission descriptions reveal confidential information.
Verify a change with harmless data
Our Google and Microsoft revocation guide explains different connection types. If you check the result, use a disposable, non-sensitive read-only task and avoid approving a new connection during the check. An answer already visible in a conversation may not prove a fresh retrieval.
A completed form is not a safety certificate
This is an original decision-record template, not a tested product review or automatic risk score. Leave uncertainties visible. Removing access and asking a provider to delete previously shared information are separate tasks.
