Discovery API for eDiscovery and DLP
When the Discovery API is the answer: permitted security and compliance uses only, approved eDiscovery partners that archive read-only versus DLP partners that quarantine or remove, edits and deletions preserved by retention and legal holds, and the content types it exports.
Recommend when to use the Discovery API for data-loss prevention, compliance archiving or eDiscovery.
~7 min read · 6 practice questions ·
What the exam expects
- Recommend the Discovery API, through an approved partner app, when an Enterprise org must collect, archive or police message and file content for security or compliance.
- Choose between an eDiscovery partner (read-only capture into an external archive) and a DLP partner (read and write, quarantine or remove in Slack).
- Refuse uses outside the permitted cases, such as analytics or sentiment dashboards, and point to the right API instead.
- Explain what the Discovery API exports, including edits and deletions preserved by retention policies or legal holds.
- Reject look-alike answers: the Audit Logs API, standard exports and bot-token scripts.
Key terms: Discovery API (Slack's API for exporting or acting on an Enterprise org's messages and files through approved third-party apps); eDiscovery (collecting and preserving communications for legal cases or compliance records); DLP (data loss prevention: scanning content against policies and enforcing them); legal hold (preserves a custodian's data regardless of deletion); partner app (an approved third-party eDiscovery or DLP product).
Key facts
- Detail
- Security and compliance only: eDiscovery, archiving, DLP
- Detail
- Primary Org Owner or an Org Owner requests; then all Org Owners can use it
- Detail
- Enterprise plans
- Detail
- Through approved third-party eDiscovery or DLP apps
- Detail
- Typically read-only; cannot quarantine, remove or tag in Slack
- Detail
- Read and write; quarantined content can be reviewed or removed
- Detail
- From the start of the org, plus edits and deletions preserved by retention or legal holds
- Detail
- Messages, files, canvases, lists, emoji reactions, Slackbot conversations; JSON by default
- Detail
- Preserve custodians' data but give no access to the content
- Detail
- No Discovery API unless you are in the partner program
- Why can't a product team use the Discovery API for an engagement dashboard?
- When is a DLP partner the right choice over an eDiscovery partner?
- When can the Discovery API return a deleted message?
- Which content types does the Discovery API export?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Slack Developer pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 38 lessons of the Slack Developer guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (6 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams