As of June 10, 2026, "AI office search" is a practical question, not just a feature label. Small teams want one place to ask, "Where is the latest proposal template?", "What did we decide for this client?", or "Which policy should support use?" OpenAI's Company knowledge help page says ChatGPT Business, Enterprise and Edu users can use connected apps to search company context and return answers with citations and links back to sources.

That can save time. It can also make a messy shared drive look more reliable than it is.

Before connecting Google Drive, SharePoint or another work app broadly, treat office search as a scoped pilot. The useful question is not "can ChatGPT search our files?" The useful question is "which files should be searchable, by whom, for which recurring decisions?"

Pick one office search job

Start with a real job. Do not begin by connecting every available file source and then asking people to experiment. Pick one area where search failure already costs time:

  • onboarding answers;
  • current sales collateral;
  • support policy lookup;
  • meeting notes for one active account;
  • internal how-to documents for one operational workflow.

For each area, write five questions a person already asks today. Good pilot questions are specific enough that the expected source can be named. "What is our current refund wording for annual customers?" is better than "Tell me about refunds." "Which Q2 handoff doc has the updated launch checklist?" is better than "Find launch docs."

Company knowledge is strongest when a person can verify where the answer came from. OpenAI's help page says answers include citations and source links. Make that part of the acceptance test, not a nice extra.

Scope the file source before the chat prompt

OpenAI's Google Drive app with sync setup page says Business and Enterprise workspace admins can configure Google Drive sync, with self-service setup for users or an admin-managed setup using a service account. The same page describes shared drive choices, including including all shared drives, excluding specific shared drives, or including only specific shared drives.

That is the decision to make before rollout.

For a small team, "all files" is rarely the right first test. It may include drafts, duplicate templates, old pricing sheets, private notes, archived client folders and half-written policies. A broad connection may technically respect permissions while still producing confusing answers from stale or low-quality sources.

Use a smaller starting scope:

  • one shared drive;
  • one folder tree;
  • one department's current handbook;
  • one client workspace with known boundaries;
  • one set of approved templates.

Then document what is out of scope. If draft proposals, finance folders, HR files or archive folders should not guide answers, write that down and exclude them where the admin controls allow it.

Decide self-service or admin-managed setup

The setup choice affects maintenance. Self-service OAuth is simpler when a team has fewer users and wants fast testing. It also means each person connects their own account. That can be fine for a pilot where users already have clear file permissions and the goal is to test whether ChatGPT can answer with useful citations.

Admin-managed setup is heavier, but it gives the workspace a more deliberate rollout path. OpenAI's Google Drive setup page describes a service-account route with read-only access and permission sync for enabled users. That can be better when the team wants a centrally managed connection, predictable user onboarding and tighter control over shared drives.

Use self-service when:

  • the pilot is under ten users;
  • the source folders are already tidy;
  • each tester can connect their own account;
  • the owner is mostly testing answer quality.

Use admin-managed setup when:

  • new users will need the connection automatically;
  • shared drives need inclusion or exclusion rules;
  • file access should be governed by the workspace rather than individual setup habits;
  • admins need a repeatable process for support.

Do not treat either option as a security shortcut. OpenAI's Company knowledge page says it respects existing permissions, but the team still has to decide whether those existing permissions are clean enough for AI-assisted search.

Test citations, not confidence

The first pilot should be boring and evidence-heavy. Ask the same five to ten office questions repeatedly and check whether the answer links to the expected document. If it cites an outdated source, a draft folder or a document that only one person recognizes, the search layer is telling you something important about the file system.

Track four outcomes:

  • correct answer with the right citation;
  • plausible answer with weak or old citation;
  • answer that should have said "I do not know";
  • answer that reveals a permission or scope problem.

The second outcome is the most dangerous. A confident answer from an old sales deck or abandoned policy can be worse than no answer because it looks operational. Fix the source set before asking the team to rely on it.

Separate search from actions

OpenAI's Company knowledge help page describes Company knowledge as optimized for information retrieval, and notes that write actions from an app are not available when that app is called via Company knowledge. That boundary is useful. Keep the first rollout read-only in spirit, even if connected apps elsewhere can do more.

For example, using ChatGPT to find the current onboarding checklist is a different risk from asking it to update a candidate tracker, send a customer email or create calendar events from the same context. Search pilots should prove source quality, citation quality and permission behavior first.

Once people start trusting office search, they will naturally ask for workflow automation. That is the time to run a second review, not the time to quietly expand the pilot.

A small-team launch checklist

Before enabling AI office search beyond the pilot group, answer these questions:

  • What exact work question is this meant to answer?
  • Which app, shared drive or folder is included?
  • Which folders, file types or shared drives are excluded?
  • Who owns the source quality?
  • Which five pilot questions passed with source citations?
  • Which stale files were found and removed or marked obsolete?
  • Who can disconnect, pause or narrow the connection?
  • How will new users get access?
  • What should users type when they do not want internal files searched?

The last question matters because OpenAI's Company knowledge documentation notes that apps may still be used automatically outside the explicit Company knowledge mode as part of the default experience. Users should know how to keep a conversation away from internal search when they are brainstorming, drafting sensitive notes or testing a hypothetical.

The good first rollout

A good first AI office search rollout is narrow, named and reversible. It searches a known set of files for a known group of users, answers a known class of questions, and shows source links that people actually check.

If the pilot uncovers stale documents or permission confusion, do not call that a failed AI test. It is useful operational evidence. The shared drive was already messy; AI search only made the problem visible.

Connect the files after you know the scope. Trust the answers only after the citations point to the right sources. That is the difference between useful office search and a faster way to find the wrong document.