Google Chat Data Inventory Sanitized Data

The following table(s) contains detailed examples of the metadata fields available from the Google Chat API endpoints Worklytics leverages. In order to pseudonymize and sanitize PII and other potentially sensitive data, Worklytics provides access to a Data Loss Prevention (DLP) Proxy, which allows customers to pre-filter metadata, within customer infrastructure, before it is sent to Worklytics for processing.

These are the fields Worklytics recommends but the Worklytics DLP Proxy provides full field-level control and therefore any field may be removed or sanitized.

Field descriptions are taken from third party API documentation, these are maintained on a best effort basis and Worklytics can not guarantee their indefinite accuracy. Please refer to the source API site for the most up-to-date documentation.

How to read the "DLP Proxy" column in the table(s):

⭕ This field is transformed, usually partially redacted

🟡 This field is "pseudonymized" by the DLP Proxy: only a SHA256 hash of its value is sent to Worklytics; never the value itself

To see the full (unsanitized) version of this document, click here.

Worklytics requires access to the following API primary endpoints:

Model	Description	API docs
GChatActivity	Used to retrieve a collection Google Chat activities via Audit Logs Endpoints: /admin/reports/v1/activity/users/all/applications/chat	🔗↗️

GChatActivity

API docs: https://developers.google.com/admin-sdk/reports/reference/rest/v1/activities/list

DLP Proxy docs: Google Chat

DLP Proxy	Property Name	Type	Description
🟡 Pseudonymized	actor	Actor
🟢 Allowed	actor.callerType	String
🟡 Pseudonymized	actor.email	String	Email address of the actor Raw example: [e-mail] Sanitized example: { "scope":"email", "domain":"acme.com", "hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI" }
🟢 Allowed	actor.key	String
🟢 Allowed	actor.profileId	String
🟢 Allowed	etag	String
🟡 Pseudonymized	events[]	List of Event
🟢 Allowed	events[].name	String
🟡 Pseudonymized	events[].parameters[]	List of Parameter
🟢 Allowed	events[].parameters[].intValue	Long
🟢 Allowed	events[].parameters[].name	String
⭕ Sanitized	events[].parameters[].value	String	Value of the parameter: redacted; except for the value corresponding to 'actor' (which is pseudonymized)
🟢 Allowed	events[].type	String
🟢 Allowed	id	Id
🟢 Allowed	id.applicationName	String
🟢 Allowed	id.customerId	String
🟢 Allowed	id.time	DateTime
🟢 Allowed	id.uniqueQualifier	Long
🟡 Pseudonymized	ipAddress	String
🟢 Allowed	ownerDomain	String