Method, apparatus, and computer program product for digital content auditing and retention in a group based communication repository
Embodiments of the present disclosure provide methods, systems, apparatuses, and computer program products for digital content auditing in a group based communication repository, where the group based communication repository comprises a plurality of enterprise-based digital content objects organized among a plurality of group-based communication channels. In one embodiment, a computing entity or apparatus is configured to receive an enterprise audit request, where the enterprise audit request comprises an audit credential and digital content object retrieval parameters. The apparatus is further configured to determine if the audit credential satisfies an enterprise authentication protocol. In circumstances where the audit credential satisfies the enterprise authentication protocol, the apparatus is configured to retrieve and output digital content objects based on the digital content object retrieval parameters, receive a violating digital content object identifier, and replace a violating digital content object with a temporary digital content object based on the violating digital content object identifier.
1. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by a processor, perform a method for auditing digital content in a group-based communication system, wherein at least one compliance rule is associated with one or more compliance policies, the method comprising:
receiving a request for auditing the digital content in a group-based communication repository associated with a group-based communication server, the group-based communication repository having a plurality of objects organized among a plurality of group-based communication channels, the request for auditing the digital content comprising:
an authentication token; and
one or more group-based communication system object compliance parameters;
in response to determining that the authentication token corresponds to a user of the group-based communication system who is authorized to audit the digital content contained in the group-based communication system, and
in response to determining that at least one non-compliant object of the plurality of objects organized among the plurality of group-based communication channels violates the compliance rule,
remediating the non-compliant object by replacing the non-compliant object with a temporary object in the plurality of group-based communication channels; and
monitoring the group-based communication repository for further non-compliant objects that match the group-based communication system object compliance parameters.
2. The computer-readable medium of claim 1 , wherein the method further comprises:
replacing the temporary object with a permanent replacement object, in response to receiving a non-compliance confirmation that the replaced non-compliant object should be permanently replaced;
deleting at least one non-compliant data structure associated with the replaced non-compliant object; and
transmitting an associated deletion notification to a violating object author.
3. The computer-readable medium of claim 1 , wherein the method further comprises:
removing the temporary object from the group-based communication repository, in response to receiving a non-violation determination; and
restoring the replaced object to the group-based communication repository.
4. The computer-readable medium of claim 1 , wherein the system object compliance parameters comprise a group-based communication channel identifier.
5. The computer-readable medium of claim 1 , wherein the compliance rule requires that the digital content satisfies confidentiality criteria.
6. The computer-readable medium of claim 1 , wherein the compliance rule requires that a digital content object meets regulatory compliance standards criteria.
7. The computer-readable medium of claim 1 , wherein a group-based communication channel comprises a virtual communications feed configured to display information posted by channel members that is viewable only to the channel members.
8. A computer-implemented method comprising:
configuring at least one compliance rule by associated with one or more compliance policies;
receiving a request for auditing digital content in a group-based communication repository associated with a group-based communication server, the group-based communication repository having a plurality of objects organized among a plurality of group-based communication channels, the request for auditing the digital content comprising:
an audit authentication credential; and
one or more group-based communication system object retrieval criteria;
in response to determining that the audit authentication credential corresponds to a user of the group-based communication system who is authorized to audit the digital content contained within the group-based communication system, and
in response to determining that one or more non-compliant objects in the plurality of objects organized among the plurality of group-based communication channels violates the compliance rule,
identifying, within the group-based communication repository, a non-compliant object associated with the group-based communication system object retrieval criteria based on the compliance rule;
flagging the non-compliant object as being potentially non-compliant; and
monitoring the group-based communication repository for further non-compliant objects that match the group-based communication system object retrieval criteria.
9. The method of claim 8 , wherein the method further comprises:
replacing the flagged object with a permanent replacement object, in response to receiving a non-compliance confirmation that the replaced non-compliant object should be permanently replaced;
deleting at least one non-compliant data structure associated with the flagged object; and
transmitting an associated deletion notification to a violating object author.
10. The method of claim 8 , wherein the method further comprises:
removing a flag associated with the flagged object in the group-based communication repository, in response to receiving a non-violation determination.
11. The method of claim 8 , wherein the group-based communication system object retrieval criteria comprise a group-based communication channel identifier.
12. The method of claim 10 , wherein the compliance rule requires that the digital content satisfies confidentiality criteria.
13. The method of claim 10 , wherein the compliance rule requires that a digital content object meets regulatory compliance standards criteria.
14. The method of claim 10 , wherein a group-based communication channel comprises a virtual communications feed configured to display information posted by channel members that is viewable only to the channel members.
15. A system comprising at least one processor and at least one non-transitory memory storing computer executable instructions that, when executed by the processor, cause the system to carry out actions comprising:
receiving a request for auditing digital content in a group-based communication repository associated with a group-based communication system, the group-based communication repository having a plurality of objects organized among a plurality of group-based communication channels, the request for auditing the digital content comprising:
an authentication token; and
one or more group-based communication system object compliance parameters;
in response to determining that the authentication token corresponds to a user of the group-based communication system who is authorized to audit the digital content contained in the group-based communication system, and
in response to determining that at least one non-compliant object of the plurality of objects organized among the plurality of group-based communication channels violates a compliance rule,
remediating the non-compliant object by replacing the non-compliant object with a temporary object in the plurality of group-based communication channels; and
monitoring the group-based communication repository for further non-compliant objects that match the group-based communication system object compliance parameters.
16. The system of claim 15 , wherein the actions further comprise:
replacing the remediated non-compliant object with a permanent replacement object, in response to receiving a non-compliance confirmation that the replaced non-compliant object should be permanently replaced;
deleting at least one non-compliant data structure associated with the remediated non-compliant object; and
transmitting an associated deletion notification to a violating object author.
17. The system of claim 15 , wherein the actions further comprise:
removing a flag associated with the remediated non-compliant object in the group-based communication repository, in response to receiving a non-violation determination.
18. The system of claim 15 , wherein the compliance rule comprises a group-based communication channel identifier.
19. The system of claim 15 , wherein the compliance rule requires that the digital content satisfies confidentiality criteria.
20. The system of claim 15 , wherein the compliance rule requires that a digital content object meets regulatory compliance standards criteria.