Abstract: A key protection framework for a platform includes a key protection engine for interfacing between an external key management system (KMS) and an external encryption service. A customer of the platform can select an existing external KMS and external encryption service to use with the framework. The key protection engine can onboard the external KMS with the platform by obtaining a configuration for the external KMS. Information extracted from the configuration can be used to establish a connection between the key protection engine and the external KMS, via which the key protection engine can interface with the external KMS to initiate rotation of a cryptographic key at the external KMS. Responsive to detection of a new version of a master key, the key protection engine can transmit a request to the external KMS to re-encrypt the cryptographic key with the new version of the master key.

Abstract: Embodiments integrate with an authorization service (e.g., OAUTH) to implement document protection. In response to a document scheduling request, a protection engine reads a protection policy including a sensitivity label, from the authorization service. The protection engine encrypts content of the document, and stores the document including the encrypted content and a header, in a non-transitory computer readable storage medium (e.g., a database). At a conclusion of the document scheduling phase, the protection engine may send a status (e.g., successful; failed) of the document scheduling. Next, in response to receiving a subsequent document view request, the protection engine references the header to communicate with the authorization service. The protection engine decrypts the content based upon information received from the authorization service, and provides the document including decrypted content for viewing.

Abstract: Embodiments integrate with an authorization service (e.g., OAUTH) to implement document protection. In response to a document scheduling request, a protection engine reads a protection policy including a sensitivity label, from the authorization service. The protection engine encrypts content of the document, and stores the document including the encrypted content and a header, in a non-transitory computer readable storage medium (e.g., a database). At a conclusion of the document scheduling phase, the protection engine may send a status (e.g., successful; failed) of the document scheduling. Next, in response to receiving a subsequent document view request, the protection engine references the header to communicate with the authorization service. The protection engine decrypts the content based upon information received from the authorization service, and provides the document including decrypted content for viewing.

Abstract: Systems, methods, and computer media for visualizing data are provided herein. The described examples allow multiple data visualizations generated using multiple visualization tools to be displayed in response to a single data visualization request generated using a single visualization tool. A data visualization request can specify data for inclusion in a data visualization and properties for the visualization. Features can be extracted from the request and converted to corresponding features for other visualization tools. Both the visualization tool through which the request was generated and the other visualization tools can generate data visualizations for display.

Abstract: Systems, methods, and computer media for visualizing data are provided herein. The described examples allow multiple data visualizations generated using multiple visualization tools to be displayed in response to a single data visualization request generated using a single visualization tool. A data visualization request can specify data for inclusion in a data visualization and properties for the visualization. Features can be extracted from the request and converted to corresponding features for other visualization tools. Both the visualization tool through which the request was generated and the other visualization tools can generate data visualizations for display.