Create V10 Software and Installation FAQs - Application Programming Interface (“API”) and Backups

What is an API used for?

Create is a ClickOnce add-in installed in Office. Once this add-in is installed, it will call an API to synchronise templates stored in the cloud.

What data is being passed back/forward on the API?

The uploading/downloading of data includes revised versions of the templates (Excel, PPT and Word), approved company media (photography, line art and other graphics) and XML files (for Create settings, e.g. chart and table formatting).

We do not see any user-created content or confidential information, where Create has been used to produce a document, presentation, or workbook.

All uploads and downloads are made through a synchronisation API (REST API) and authenticated through Active Directory Authentication. 

Create also calls another API to register and validate licences (SOAP interface), which captures the following personal information for licence validation and support purposes (first/last name, email address, IP address, username, machine name). We do not use this data for any purpose other than licence validation and invoicing.

Once the Create Cloud consent has been given, can PS access our environment?

No, PS does not have access to the client environment. Create V10 uses Microsoft’s own authentication platform to authenticate users against your organisation’s Active Directory is to allow the client access to the PS cloud/Create templates. The Create application contains no login information for the SQL databases or file storage. 

To be clear, PS cannot see or access any document or presentation, or workbook or other content generated with Create, by the user.

What GDPR measures have been put in place?

We have GDPR processes in place at PS, including the process to desensitise all data once a licence has been deactivated. This process is run periodically to capture all licence removals from the portal.

Backups

How often are backups taken?

We implement a daily backup of asset files stored in the cloud.