Abstract: Systems, apparatuses, methods, and computer program products are provided for managing geographically distributed data storage in a group-based communication system and for servicing deletion requests related thereto. In some embodiments, an apparatus physically located in a first geographic area defined by a first geographic boundary is provided. In embodiments, upon determining that an entity identifier associated with a message is associated with a geographic data storage policy, the apparatus is configured to transmit a geographic data residency message package comprising message data of the message to a geographic data residency server physically located within a second geographic area defined by a second geographic boundary. The second geographic area is associated with the geographic data storage policy. In some embodiments, the apparatus is configured to update the message data of the message with residency token data received from the geographic data residency server.

Abstract: Media, method, and system for providing encryption key management for international data residency. Organizations using a group-based communication system can designate a particular geopolitical area where that organization's data can be stored and another geopolitical area (which may be the same or different) where encryption keys used to encrypt and decrypt that data should be stored. Users of that organization can post message or access messages previously posted on the group-based communication system from any geopolitical area, causing the system to automatically store and retrieve messages and encryption keys from the appropriate regions to allow the users to transparently access the group-based communication system while maintaining security and data residency requirements.

Abstract: A system, method, and computer-readable media for providing inline data loss prevention (DLP) within a group-based communication system. A DLP engine is included to apply an organization-specific DLP policy to a user input to determine whether the user input should be displayed in a group-based communication channel of the group-based communication system. Multiple organizations sharing a channel may each have their own respective organization-specific DLP policies applied to incoming and outgoing messages for that organization.

Abstract: Various embodiments of the present invention are directed to an improved group-based communication apparatus that is configured to render one or more workflow interface objects to a group-based communication apparatus in association with an operational sequence set returned by a query. The group-based communication apparatus is configured to detect a workflow trigger event associated with a workflow identifier, retrieve an operational sequence set based upon at least the workflow identifier from a group-based communication workflow repository, initiate the operational sequence set, and cause rendering of one or more workflow interface objects to the group-based communication interface. In some embodiments, the operational sequence sets are associated with a group-defined template.

Abstract: Agnostic domain communication via a user interface of a communication platform is described. A user interface associated with the communication platform can be presented via a client, wherein an instance of a first workspace of the communication platform that is associated with a first domain is presented via the user interface. A request to access a second workspace of the communication platform that is associated with a second domain that is different from the first domain can be received. Based at least partly on a determination that the request is associated with an attribute that satisfies a criteria, an instance of the second workspace can be presented via the user interface.

Abstract: Media, method, and system for providing encryption key management for international data residency. Organizations using a group-based communication system can designate a particular geopolitical area where that organization's data can be stored and another geopolitical area (which may be the same or different) where encryption keys used to encrypt and decrypt that data should be stored. Users of that organization can post message or access messages previously posted on the group-based communication system from any geopolitical area, causing the system to automatically store and retrieve messages and encryption keys from the appropriate regions to allow the users to transparently access the group-based communication system while maintaining security and data residency requirements.

Abstract: Agnostic domain communication via a user interface of a communication platform is described. A user interface associated with the communication platform can be presented via a client, wherein an instance of a first workspace of the communication platform that is associated with a first domain is presented via the user interface. A request to access a second workspace of the communication platform that is associated with a second domain that is different from the first domain can be received. Based at least partly on a determination that the request is associated with an attribute that satisfies a criteria, an instance of the second workspace can be presented via the user interface.

Abstract: Various embodiments of the present invention are directed to an improved group-based communication apparatus that is configured to render one or more workflow interface objects to a group-based communication apparatus in association with an operational sequence set returned by a query. The group-based communication apparatus is configured to detect a workflow trigger event associated with a workflow identifier, retrieve an operational sequence set based upon at least the workflow identifier from a group-based communication workflow repository, initiate the operational sequence set, and cause rendering of one or more workflow interface objects to the group-based communication interface. In some embodiments, the operational sequence sets are associated with a group-defined template.

Abstract: Media, method, and system for providing encryption key management for international data residency. Organizations using a group-based communication system can designate a particular geopolitical area where that organization's data can be stored and another geopolitical area (which may be the same or different) where encryption keys used to encrypt and decrypt that data should be stored. Users of that organization can post message or access messages previously posted on the group-based communication system from any geopolitical area, causing the system to automatically store and retrieve messages and encryption keys from the appropriate regions to allow the users to transparently access the group-based communication system while maintaining security and data residency requirements.

Abstract: A system, method, and computer-readable media for providing inline data loss prevention (DLP) within a group-based communication system. A DLP engine is included to apply an organization-specific DLP policy to a user input to determine whether the user input should be displayed in a group-based communication channel of the group-based communication system. Multiple organizations sharing a channel may each have their own respective organization-specific DLP policies applied to incoming and outgoing messages for that organization.

Abstract: Various embodiments of the present invention are directed to an improved group-based communication apparatus that is configured to render one or more workflow interface objects to a group-based communication apparatus in association with an operational sequence set returned by a query. The group-based communication apparatus is configured to detect a workflow trigger event associated with a workflow identifier, retrieve an operational sequence set based upon at least the workflow identifier from a group-based communication workflow repository, initiate the operational sequence set, and cause rendering of one or more workflow interface objects to the group-based communication interface. In some embodiments, the operational sequence sets are associated with a group-defined template.

Abstract: Various embodiments of the present invention are directed to an improved group-based communication apparatus that is configured to render one or more workflow interface objects to a group-based communication apparatus in association with an operational sequence set returned by a query. The group-based communication apparatus is configured to detect a workflow trigger event associated with a workflow identifier, retrieve an operational sequence set based upon at least the workflow identifier from a group-based communication workflow repository, initiate the operational sequence set, and cause rendering of one or more workflow interface objects to the group-based communication interface. In some embodiments, the operational sequence sets are associated with a group-defined template.

Abstract: Various embodiments of the present invention are directed to an improved group-based communication apparatus that is configured to render one or more workflow interface objects to a group-based communication apparatus in association with an operational sequence set returned by a query. The group-based communication apparatus is configured to detect a workflow trigger event associated with a workflow identifier, retrieve an operational sequence set based upon at least the workflow identifier from a group-based communication workflow repository, initiate the operational sequence set, and cause rendering of one or more workflow interface objects to the group-based communication interface. In some embodiments, the operational sequence sets are associated with a group-defined template.

Abstract: Various embodiments of the present invention are directed to an improved group-based communication apparatus that is configured to render one or more workflow interface objects to a group-based communication apparatus in association with an operational sequence set returned by a query. The group-based communication apparatus is configured to detect a workflow trigger event associated with a workflow identifier, retrieve an operational sequence set based upon at least the workflow identifier from a group-based communication workflow repository, initiate the operational sequence set, and cause rendering of one or more workflow interface objects to the group-based communication interface. In some embodiments, the operational sequence sets are associated with a group-defined template.

Abstract: In a computer-implemented method for automated monitoring certificate expiration, automatically periodically accessing a plurality of computing nodes in a computing system for certificate expiration of a certificate of the plurality of computing nodes. The automatically periodically accessing is provided by a central management tool of the computing system. Automatically determining the certificate of the plurality of computing nodes has an impending certificate expiration by the central management tool of said computing system. In response to the determining, automatically generating an alert, by the central management tool, that indicates the impending certificate expiration of the certificate.

Abstract: In a computer-implemented method for automated provisioning a certificate in a computing system a certificate signing request is accessed from a computing node by a centralized management tool of the computing system. The certificate signing request is provided to a certificate authority by the centralized management tool. A signed certificate is accessed from the certificate authority for the computing node. The signed certificate is provided to the computing node, by the centralized management tool, such that there is automated provisioning of the signed certificate at the computing node to establish trust of the computing node in the computing system.

Abstract: In a computer-implemented method for automated provisioning a certificate in a computing system a certificate signing request is accessed from a computing node by a centralized management tool of the computing system. The certificate signing request is provided to a certificate authority by the centralized management tool. A signed certificate is accessed from the certificate authority for the computing node. The signed certificate is provided to the computing node, by the centralized management tool, such that there is automated provisioning of the signed certificate at the computing node to establish trust of the computing node in the computing system.

Abstract: In a computer-implemented method for automated provisioning a certificate in a computing system a certificate signing request is accessed from a computing node by a centralized management tool of the computing system. The certificate signing request is provided to a certificate authority by the centralized management tool. A signed certificate is accessed from the certificate authority for the computing node. The signed certificate is provided to the computing node, by the centralized management tool, such that there is automated provisioning of the signed certificate at the computing node to establish trust of the computing node in the computing system.

Abstract: In a computer-implemented method for automated monitoring certificate expiration, automatically periodically accessing a plurality of computing nodes in a computing system for certificate expiration of a certificate of the plurality of computing nodes. The automatically periodically accessing is provided by a central management tool of the computing system. Automatically determining the certificate of the plurality of computing nodes has an impending certificate expiration by the central management tool of said computing system. In response to the determining, automatically generating an alert, by the central management tool, that indicates the impending certificate expiration of the certificate.

Abstract: In a computer-implemented method for automated provisioning a certificate in a computing system a certificate signing request is accessed from a computing node by a centralized management tool of the computing system. The certificate signing request is provided to a certificate authority by the centralized management tool. A signed certificate is accessed from the certificate authority for the computing node. The signed certificate is provided to the computing node, by the centralized management tool, such that there is automated provisioning of the signed certificate at the computing node to establish trust of the computing node in the computing system.