Disconnect Sorvek

Pause or delete a data source, remove Sorvek's access at Microsoft or Google, and uninstall the extension.

On this page
  1. Recommended order
  2. Pause a source
  3. Delete a source
  4. Remove access at Microsoft
  5. Remove access at Google
  6. What happens to the data already collected
  7. Uninstall the extension

You can stop Sorvek at three levels: pause the source in Sorvek, remove Sorvek's access at Microsoft or Google, then have the data already collected erased. Removing access stops the reading, but erases nothing in Sorvek. To erase everything, you must ask the Sorvek team.

  1. Export what you want to keep.
  2. Pause the source in Sorvek.
  3. Remove the extension from devices, if you deployed it.
  4. Remove access at Microsoft or Google.
  5. Request the erasure of your organization.

Pause a source

  1. Open Settings > Data sources.
  2. On the active source, click Disable.
  3. Confirm.

The source shows Paused. Scans, the receipt of extension data and AI calls stop for that source. The data already collected stays visible, frozen. Re-enable restarts the collection.

Delete a source

  1. Open Settings > Data sources.
  2. Click the trash icon (Delete) for the source.
  3. Confirm.

Deletion removes the source, its connectors and its stored secret, and erases the inventory collected by that source: users and groups, applications, accounts, grants, events, scans. The AI prompt previews sent by the extension, which are linked to the source, go with it. The other extension data, including detected secrets, remains, as described in Data retained, retention periods and deletion.

You cannot delete the organization's only source: the button is disabled. To stop completely, pause it, remove access at your provider, then request erasure.

Remove access at Microsoft

  1. Open the Microsoft Entra admin center with an administrator account.
  2. Go to Enterprise applications.
  3. Search for "Sorvek" and open the application.
  4. Open Properties, then click Delete and confirm.

Microsoft then removes all the permissions granted to Sorvek in your tenant. If several Sorvek applications appear, handle all of them.

If you created your own app registration

In App registrations, open the application that you created for Sorvek. Delete its client secret (Certificates & secrets) or delete the registration itself.

Remove access at Google

Sorvek reads Google Workspace through a service account to which you granted domain-wide delegation.

  1. In the Google Admin console, open Domain-wide delegation (https://admin.google.com/ac/owl/domainwidedelegation).
  2. Delete the row for the numeric client_id of the service account used by Sorvek.
  3. In the Google Cloud console, delete the JSON key of this service account, or the service account itself.

Without delegation, the service account can no longer read your domain.

What happens to the data already collected

Action Data already in Sorvek
Pause the source Kept and visible, no longer updated
Remove access at Microsoft or Google Kept. The following scans fail: pause the source first
Delete a source Inventory of that source erased
Erasure of the organization Everything is erased, on request

To disconnect Microsoft from your organization or to delete the organization, write to contact@sorvek.com: in Settings > Organization, the Danger zone marks these two actions Unavailable. The steps to follow and what remains after erasure are described in Data retained, retention periods and deletion.

Uninstall the extension

  1. In Sorvek, open Settings > Browser extension.
  2. Set SaaS visibility and AI analysis to Disabled, then click Save. No more data is then captured for these two capabilities, whatever each employee has chosen.
  3. In your device management tool, remove the extension from the force-install list (ExtensionInstallForcelist policy). The IDs to remove are shown in the Sorvek console: Settings > Browser extension, Deployment section.
  4. If needed, revoke the installations that remain in the list on the Browser extension page (Revoke).

The details for each tool are in Deploy the extension with Microsoft Intune and Deploy the extension with the Google Admin console. An extension that an employee installed by hand is removed from their browser.

The data already sent by the extension remains for the periods described in What the extension sees and what it sends, and goes with the erasure of the organization.

Can’t find your answer?

Already a customer? The support bubble at the bottom of the app sends your question with its context. Otherwise, write to the Sorvek team.