Security and Compliance Integrations

Overview

Workplace takes Security and Compliance requirements seriously and has features that our customers around the world can use to comply with their legal, policy, risk, and threat-monitoring requirements.

At a technical level, there are two main Workplace capabilities that support these requirements, each of which are described below in more detail:

1. Graph API - gives you read access to all user content in your Workplace instance
2. Webhooks - event-driven notifications that Workplace sends you upon user content changes and user / admin events

Graph API

The Graph API lets you programmatically read all contents out of your Workplace instance. You can use this approach to batch extracts of your Users, Groups, Posts, Comments, Files, Photos, Videos, and Chat Conversations.

The Graph API enables comprehensive retrieval of Workplace content.

This API supports a variety of use cases on an ad hoc or periodic frequency:

• Archiving / Backing up of your Workplace data
• Feeding an eDiscovery system upon the start of a legal matter
• Searching for past usage of keywords

Webhooks

Webhooks notify you when there are content or user actions within your instance.

Webhooks send near-realtime notifications in response to content changes and user actions.

This API supports a variety of use cases that require continual real-time monitoring:

• Track Workplace audit events like logins and password resets
• Monitor keyword usage in near-realtime
• Alert an administrator if a sensitive file has been uploaded
• Schedule content retention / deletion based on your policy

To build a Webhook Security and Compliance integration, you should register your Custom Integration app to receive Group Topic or Security Topic events.

Partners