Navigating CASA Tier 3 Security Assessment: Transitioning from Google Drive Sync to In-App Data

JotterPad -

In response to recent updates from Google, developers using Google Drive within their applications must now ensure compliance with the Critical Assessment and Security Amendment (CASA) requirements. The CASA framework consists of three tiers: Tier 1, Self-Assessment; Tier 2, Functional Assessment; and Tier 3, Comprehensive Assessment, which necessitates an annual fee of five figures for external testing.

JotterPad requires CASA Tier 3 compliance due to its access to user folders.

The cost associated with achieving and maintaining CASA Tier 3 compliance is substantial, and unfortunately, it far exceeds what our current business model can support. Therefore, we are compelled to discontinue Google Drive Sync support for our application.

What’s Next for Google Drive Users?

For those users who prefer to continue utilizing Google Drive, we are shifting from Google Drive Sync to Google Drive in-app data. This means that files will be stored in a separate app folder within your Google Drive. You will still be able to perform operations such as file creation and deletion. However, it's important to note that there will be no direct access to files in your primary Google Drive folder from within the app, and vice versa.

This adjustment is not unique to us—other writing apps, such as iA Writer, have completely withdrawn from the Android platform due to these stringent requirements.

Steps to set up Google Drive in-app data:

  1. Open JotterPad and go to the Cloud section.
  2. Select 'Google Drive (App data)' and log in to your Google Drive account.
  3. Done! Google Drive app data is now set up in JotterPad.

Our Path Forward

We understand that these changes might be inconvenient, and we sincerely request our users to remain patient and refrain from down rating the app in response to these necessary adjustments.

In light of these developments, we are committed to updating our app to meet stricter compliance standards and are also considering changes to our business model. While this transition is challenging, it is imperative to align with enhanced security protocols to ensure the continued security of your data.

We remain open to the possibility of reintroducing Google Drive Sync in the future if our revenue aligns with the requirements necessary to achieve CASA Tier 3 compliance again. Our aim is to strike a balance between providing robust functionality and maintaining stringent security standards.

Thank you for your understanding and continued support as we navigate these changes.