Business management · APIs and Security

Who accesses company data, what is switched on and which rules apply to the team

Three screens for whoever answers for the company's security. The API Hub brings together all external access to data, from partner systems to AI apps, with usage and health. Active Services draws the map of what the company has contracted, switched on and connected. Rules and Security sets the password policy, lockout, mandatory two-step verification and the periodic review of who has access.

The problem and the fix

The problems APIs and Security solves every day

If any of these situations sounds familiar, it is because they happen in almost every graduation company, until the right system comes in.

The problem

Nobody knows how many external systems hold a key to query company data.

With Partiu Formatura

The API Hub lists every credential, customer-service integration, connected AI app and automatic-notification address, with the last use of each.

The problem

A partner complains that the integration stopped and nobody can tell whether the problem is on their side or ours.

With Partiu Formatura

Each API shows success rate, average latency, failures and availability over the last 30 days, and the "Test all" button checks on the spot.

The problem

The company does not remember what it contracted, what is switched on and what is half configured.

With Partiu Formatura

Active Services draws the map of modules, services and integrations, and marks in yellow what needs attention, such as a certificate about to expire.

The problem

Each team member uses whatever password they want, and the account of someone who left stays active.

With Partiu Formatura

Rules and Security defines the password standard, expiry, lockout after failed attempts and automatic deactivation of idle accounts.

The problem

Nobody reviews who has access and with which profile since the person joined.

With Partiu Formatura

The access review lists each active account to decide: keep, require a password change or deactivate, on a periodic schedule with a warning when it is due.

In practice

Real examples of APIs and Security working for you

Everyday situations at graduation companies, from the problem to the result, using the modules on this page.

01

Old integration safely switched off

The scenario

The company switched BI vendors, but the old system’s credential was still active.

With the system

In the API Hub, the last use showed it had been idle for months, and the credential was paused and then revoked.

The result

An access door to the data was closed without affecting any integration in use.

02

Tax certificate renewed before expiring

The scenario

The certificate used to issue invoices was close to expiring and nobody had noticed.

With the system

Active Services marked invoice issuing in yellow, with the expiry warning under 30 days and the path to its settings.

The result

The replacement was made with time to spare, without a single day of stalled invoicing.

03

Two-step verification for the whole team

The scenario

After a suspicious access attempt, the board wanted to tighten the panel login.

With the system

In Rules and Security, the company applied the recommended rules and made two-step verification mandatory for everyone. Account status showed who had not yet turned it on.

The result

Each person was taken to turn it on at their next login, and the change was recorded with who made it and what changed.

How it works

How information flows through APIs and Security

Every step is a real module, and what comes out of one goes into the next without anyone typing it again.

  1. 1Map reviewedActive Services shows what is switched on and what needs attention in the company.
  2. 2Access grantedEach partner system or AI app receives its own credential, with defined permission and limits.
  3. 3Usage monitoredThe API Hub shows usage, failures and availability for each access.
  4. 4Team protectedPassword, lockout and two-step verification rules apply at login to the panel and the apps.
  5. 5Access reviewedAt the defined frequency, each active account is reviewed and the decision is recorded.

Module by module

Everything included in APIs and Security

8 modules and 50 features on this page, all running on the same class, graduate and event records.

API Hub

All external access to the company's data on a single screen.

  • Credentials for partner systems: ERP, BI, accounting and websites
  • Keys for customer-service platforms and chatbots, such as ZapResponder, Blip, Chatwoot and n8n
  • AI apps, such as Claude and ChatGPT, connected with a user’s login
  • Automatic notifications the platform sends to partner systems
  • Permission for each access: read only or allowed to write, always audited
  • Allowed IPs and calls-per-minute limit

Usage and health

How much each access is used and whether the service is responding.

  • Call volume across all APIs over the last 24 hours, 7 or 30 days
  • Success rate, average latency and rejected or failed calls
  • Day-by-day availability over the last 30 days
  • Last use and last 24 hours usage per credential
  • "Test all" button to check the services on the spot
  • Recent activity and audit of the writes made by each access

Access management

Create, pause, rotate the key and revoke without asking IT.

  • New credential or integration with name, permissions and limits
  • Secret shown only once, with ready-to-copy examples
  • Pause an access, which starts being refused within 30 seconds
  • Generate a new key and revoke tokens already issued
  • Allow or remove write access for an AI app and revoke its access
  • Automatic notifications paused, and suspended on their own after repeated failures

Active Services

The map of everything the company has contracted, switched on and connected.

  • Active modules, the platform services that serve each one and external integrations
  • Integrations grouped into payments, banks, communication, tax, files and photos, AI and credentials
  • Click an item to see what it uses, what depends on it and where it is configured
  • Items needing attention highlighted, such as an expiring certificate or an unverified e-mail domain
  • Warning when invoice issuing is still in the test environment
  • Option to also show what is switched off
  • Read only, without exposing any configuration secret

Password rules

The password standard for the team that signs in to the panel and the company apps.

  • Minimum and maximum length, uppercase, lowercase, number and special character
  • Block common passwords and the person’s name, username or e-mail inside the password
  • Password expiry with a warning before it expires
  • History to avoid reusing recent passwords and a minimum interval between changes
  • Mandatory change on first access and after an administrator reset
  • Test a password against the rules before saving
  • Recommended rules filled in with one click

Access and lockout

Failed attempts, idle accounts and two-step verification.

  • Lockout after a number of failed attempts, for the defined time
  • Automatic deactivation of accounts without access, with a 15-day minimum so people on vacation are not locked out
  • Two-step verification mandatory for administrators or for everyone
  • Anyone who has not turned it on yet is taken to do so right after login
  • Changes take effect within one minute, at the next login or password change

Account status and access review

The team’s risk snapshot and the periodic check of who has access.

  • Accounts without two-step verification, with an expired password or no access for 90 days or more
  • Accounts locked right now, administrators and people who never signed in
  • Require a password change for several accounts at once, ending open sessions in the apps
  • Unlock an account before the lockout ends
  • Access review with a decision per account: keep, require a password change or deactivate
  • Review done gradually, with a set frequency and a warning when it is due
  • The company is never left without an active administrator
  • Past reviews kept and exportable

Rules audit

Every security change with who made it, when and what changed.

  • Before and after for each changed rule
  • Reviews started, decided, completed and cancelled
  • Deactivated accounts, required password changes and unlocks
  • Without a record, nothing is changed
  • Confirmation before changes that could lock people out

Find the right plan for APIs and Security

Compare the modules and choose the setup that fits your operation.