Outlook Mail Sanitized Data

The following table(s) contains detailed examples of the metadata fields available from the Outlook Mail API endpoints Worklytics leverages. In order to pseudonymize and sanitize PII and other potentially sensitive data, Worklytics provides access to a Data Loss Prevention (DLP) Proxy, which allows customers to pre-filter metadata, within customer infrastructure, before it is sent to Worklytics for processing.

These are the fields Worklytics recommends but the Worklytics DLP Proxy provides full field-level control and therefore any field may be removed or sanitized.

Field descriptions are taken from third party API documentation, these are maintained on a best effort basis and Worklytics can not guarantee their indefinite accuracy. Please refer to the source API site for the most up-to-date documentation.

How to read the "DLP Proxy" column in the table(s):

⭕ This field is transformed, usually partially redacted

🟡 This field is "pseudonymized" by the DLP Proxy: only a SHA256 hash of its value is sent to Worklytics; never the value itself

To see the full (unsanitized) version of this document, click here.

Worklytics requires access to the following API primary endpoints:

Model	Description	API docs
MailboxSettings	Used to retrieve mailbox settings for a user Endpoints: /v1.0/users/{id}/mailboxSettings	🔗↗️
Message	Used to retrieve messages for a user Endpoints: /v1.0/users/{id}/messages v1.0/users/{id}/mailFolders/SentItems/messages	🔗↗️

MailboxSettings

API docs: https://docs.microsoft.com/en-us/graph/api/resources/mailboxsettings?view=graph-rest-beta

DLP Proxy docs: Outlook Mail

DLP Proxy	Property Name	Type	Description
🟢 Allowed	archiveFolder	String
🟢 Allowed	automaticRepliesSetting	AutomaticRepliesSettings
🟢 Allowed	automaticRepliesSetting.scheduledEndDateTime	DateTimeTimeZone
🟢 Allowed	automaticRepliesSetting.scheduledEndDateTime.dateTime	Date
🟢 Allowed	automaticRepliesSetting.scheduledEndDateTime.timeZone	String
🟢 Allowed	automaticRepliesSetting.scheduledEndStartTime	DateTimeTimeZone
🟢 Allowed	automaticRepliesSetting.scheduledEndStartTime.dateTime	Date
🟢 Allowed	automaticRepliesSetting.scheduledEndStartTime.timeZone	String
🟢 Allowed	dateFormat	String
🟢 Allowed	language	LocaleInfo
🟢 Allowed	language.displayName	String
🟢 Allowed	language.locale	String
🟢 Allowed	timeFormat	String
🟢 Allowed	timeZone	String
🟢 Allowed	userPurpose	String
🟢 Allowed	workingHours	WorkingHours
🟢 Allowed	workingHours.daysOfWeek	Set of DayOfWeek
🟢 Allowed	workingHours.endTime	String
🟢 Allowed	workingHours.startTime	String
🟢 Allowed	workingHours.timeZone	TimeZoneBase
🟢 Allowed	workingHours.timeZone.name	String

Message

API docs: https://docs.microsoft.com/en-us/graph/api/resources/message?view=graph-rest-beta

DLP Proxy docs: Outlook Mail

DLP Proxy	Property Name	Type	Description
🟢 Allowed	attachments[]	List of Attachment
🟢 Allowed	attachments[].size	Integer
🟢 Allowed	bccRecipients[]	List of Recipient
🟢 Allowed	categories	List of String
🟢 Allowed	ccRecipients[]	List of Recipient
🟢 Allowed	changeKey	String
🟢 Allowed	conversationId	String
🟢 Allowed	conversationIndex	String
🟢 Allowed	createdDateTime	Date
🟢 Allowed	flag	FlagStatus
🟢 Allowed	flag.completedDateTime	DateTimeTimeZone
🟢 Allowed	flag.completedDateTime.dateTime	Date
🟢 Allowed	flag.completedDateTime.timeZone	String
🟢 Allowed	flag.dueDateTime	DateTimeTimeZone
🟢 Allowed	flag.dueDateTime.dateTime	Date
🟢 Allowed	flag.dueDateTime.timeZone	String
🟢 Allowed	flag.flagStatus	String
🟢 Allowed	flag.startDateTime	DateTimeTimeZone
🟢 Allowed	flag.startDateTime.dateTime	Date
🟢 Allowed	flag.startDateTime.timeZone	String
🟡 Pseudonymized	from	Recipient
🟡 Pseudonymized	from.emailAddress	EmailAddress
🟡 Pseudonymized	from.emailAddress.address	String	Raw example: [e-mail] Sanitized example: {"scope":"email","domain":"M365x214355.onmicrosoft.com","hash":"suStOGza62rXoyXuJ8WxGBD4x4qHE0lhOuCSi5j4CF8"}
🟢 Allowed	hasAttachments	Boolean
🟢 Allowed	id	String
🟢 Allowed	importance	String
🟢 Allowed	inferenceClassification	String
🟢 Allowed	internetMessageId	String
🟢 Allowed	isDeliveryReceiptRequested	Boolean
🟢 Allowed	isDraft	Boolean
🟢 Allowed	isRead	Boolean
🟢 Allowed	isReadReceiptRequested	Boolean
🟢 Allowed	lastModifiedDateTime	Date
🟢 Allowed	mentionsPreview	MentionsPreview
🟢 Allowed	mentionsPreview.isMentioned	Boolean
🟢 Allowed	odataEtag	String
🟢 Allowed	parentFolderId	String
🟢 Allowed	receivedDateTime	Date
🟢 Allowed	replyTo[]	List of Recipient
🟡 Pseudonymized	sender	Recipient
🟡 Pseudonymized	sender.emailAddress	EmailAddress
🟡 Pseudonymized	sender.emailAddress.address	String	Raw example: [e-mail] Sanitized example: {"scope":"email","domain":"M365x214355.onmicrosoft.com","hash":"suStOGza62rXoyXuJ8WxGBD4x4qHE0lhOuCSi5j4CF8"}
🟢 Allowed	sentDateTime	Date
🟢 Allowed	toRecipients[]	List of Recipient
🟢 Allowed	unsubscribeData	List of String
🟢 Allowed	unsubscribeEnabled	Boolean
🟢 Allowed	webLink	String