Slack Technologies, Inc.

Vmware, Inc.

Salesforce, Inc.

Ratnadeep Bhattacharjee

Mukund Gunti

Michael Brevoort

James Scheinblum

Angela Kirchhof

Raissa Largman

Suresh Sundriyal

Richard Crowley

Stephen Michael Hamrick

Leslie Newell

Anu Engineer

Swapnil Sham Daingade

Tushar Thole

Sridhar T Reddy

Kalyan Ram Chintalapati

Matthew Nolan Caudill

Helen Kupp

Raquel Velez

Patrick William Penzias Dirks

Sarah Henkens

Samuel Attard

Audrei Drummond

Ohjoong Kwon

Natalie Qabazard

Jeremy Apthorp Rose

Eden Ghirmai

Nikhil Mohan

Karen Nguyen

Pooja Mehta

Lydia Gorham

Keith McKinley Adams

Leah Jones

Andrew John MacDonald

Milo Watanabe

Max Baez

Andrew MacDonald

Calvin Cheng

Caroline Shen

Henry Robinson

Agnostic domain communication via a user interface of a communication platform is described. A user interface associated with the communication platform can be presented via a client, wherein an instance of a first workspace of the communication platform that is associated with a first domain is presented via the user interface. A request to access a second workspace of the communication platform that is associated with a second domain that is different from the first domain can be received. Based at least partly on a determination that the request is associated with an attribute that satisfies a criteria, an instance of the second workspace can be presented via the user interface.

Agnostic domain communication via a user interface of a communication platform

Systems, apparatuses, methods, and computer program products are provided for managing geographically distributed data storage in a group-based communication system and for servicing deletion requests related thereto. In some embodiments, an apparatus physically located in a first geographic area defined by a first geographic boundary is provided. In embodiments, upon determining that an entity identifier associated with a message is associated with a geographic data storage policy, the apparatus is configured to transmit a geographic data residency message package comprising message data of the message to a geographic data residency server physically located within a second geographic area defined by a second geographic boundary. The second geographic area is associated with the geographic data storage policy. In some embodiments, the apparatus is configured to update the message data of the message with residency token data received from the geographic data residency server.

Methods, apparatuses, and computer program products for management of data deletion requests based on geographically distributed data

Media, method, and system for providing encryption key management for international data residency. Organizations using a group-based communication system can designate a particular geopolitical area where that organization's data can be stored and another geopolitical area (which may be the same or different) where encryption keys used to encrypt and decrypt that data should be stored. Users of that organization can post message or access messages previously posted on the group-based communication system from any geopolitical area, causing the system to automatically store and retrieve messages and encryption keys from the appropriate regions to allow the users to transparently access the group-based communication system while maintaining security and data residency requirements.

Encryption key management for international data residency

A system, method, and computer-readable media for providing inline data loss prevention (DLP) within a group-based communication system. A DLP engine is included to apply an organization-specific DLP policy to a user input to determine whether the user input should be displayed in a group-based communication channel of the group-based communication system. Multiple organizations sharing a channel may each have their own respective organization-specific DLP policies applied to incoming and outgoing messages for that organization.

Inline data loss prevention for a group-based communication system

Various embodiments of the present invention are directed to an improved group-based communication apparatus that is configured to render one or more workflow interface objects to a group-based communication apparatus in association with an operational sequence set returned by a query. The group-based communication apparatus is configured to detect a workflow trigger event associated with a workflow identifier, retrieve an operational sequence set based upon at least the workflow identifier from a group-based communication workflow repository, initiate the operational sequence set, and cause rendering of one or more workflow interface objects to the group-based communication interface. In some embodiments, the operational sequence sets are associated with a group-defined template.

Group-based communication apparatus configured to implement operational sequence sets and render workflow interface objects within a group-based communication system

In a computer-implemented method for automated monitoring certificate expiration, automatically periodically accessing a plurality of computing nodes in a computing system for certificate expiration of a certificate of the plurality of computing nodes. The automatically periodically accessing is provided by a central management tool of the computing system. Automatically determining the certificate of the plurality of computing nodes has an impending certificate expiration by the central management tool of said computing system. In response to the determining, automatically generating an alert, by the central management tool, that indicates the impending certificate expiration of the certificate.

Automated monitoring and managing of certificates

In a computer-implemented method for automated provisioning a certificate in a computing system a certificate signing request is accessed from a computing node by a centralized management tool of the computing system. The certificate signing request is provided to a certificate authority by the centralized management tool. A signed certificate is accessed from the certificate authority for the computing node. The signed certificate is provided to the computing node, by the centralized management tool, such that there is automated provisioning of the signed certificate at the computing node to establish trust of the computing node in the computing system.

Automated provisioning of certificates

Growing community of inventors

Palo Alto, CA, United States of America

Ratnadeep Bhattacharjee