Help centre / Account, security & billing / See and control which apps can access your data
See and control which apps can access your data
Open Admin & settings, then Connected apps. You'll see every third-party app you've authorised, what each can read, and a log of every read. Apps only ever get read-only access, never safeguarding or personal records, and you can disconnect any app at any time.
What can a connected app see?
A connected app is a third-party tool an admin at your charity has authorised. Connected apps can only ever read data. They can never change anything. And they can only read the areas you approved when you connected them, from a fixed list: meetings and decisions, policies, the risk register, assurance and controls, donation amounts and Gift Aid status, the funds register, and impact numbers.
Some things are never available to any app, whatever was approved: safeguarding records, personal details of supporters and people on your registers, user accounts, contracts, the conflicts register and your audit history. Donation data never includes a supporter's identity.
How do I check what an app has read?
- Open Admin & settings, then Connected apps. You need to be an admin to open this page.
- Each app's card shows who authorised it, when, what it can read, and when it last read your data.
- Select Recent activity on a card to see a log of each read. If an app hasn't read anything yet, the card says so.
Every read is also recorded in your audit history, so you can always answer "who has seen our data?" with evidence rather than guesswork.
How do I disconnect an app?
- On the app's card, select Disconnect.
- Confirm. The app loses all access immediately and its tokens stop working.
Disconnecting is safe to do at any time and is recorded in your audit history. If you change your mind, the app has to be authorised again from scratch. It never gets its old access back on its own.