Avalara

This documentation for the Avalara integration describes the technical capabilities of this integration, including authorization, scopes/permissions, and utilized endpoints. For more information on how to integrate Avalara, visit our connection instructions.

Version

This integration utilizes the Avalara AvaTax API V2.

Base URL

The base URL used for all Avalara API endpoints:

https://rest.avatax.com/api/v2

---

Authentication & Authorization

The DataGrail Avalara integration connects using basic authentication which requires a Username and Password.

Sensitive Credentials

Publicly exposing your API credentials can allow unauthorized access to Avalara API endpoints by a third party. DataGrail stores your API credentials encrypted and protected.

Limits

Limits in Avalara are calculated using the leaky bucket algorithm. All requests that are made after rate limits have been exceeded are throttled and an HTTP 429 Too Many Requests error is returned. Requests succeed again after enough requests have emptied out of the bucket.

• DataGrail supports requests throttling to stay within 70-80% of specified service rate limits.
• DataGrail processes API responses with HTTP 429 status to interrupt requests, waiting and retrying (using an exponential backoff strategy).

---

Capabilities

Access

DataGrail's Avalara integration provides Synchronous Access capabilities for the following supported identifier category: Email.

Data Interactions

For Access requests, DataGrail will take the following actions:

1. List all companies and extract unique company ID and companyCode fields.
2. Fetch all customers with a non-empty emailAddress field for each detected company.
3. Fetch transactions for each collected customer over the last 2 years.

Endpoints Utilized

Method	Endpoint	Purpose	Docs
GET	/companies	Retrieve all companies
GET	/companies/company_Code/transactions	Retrieve all transactions
GET	/companies/company_Id/customers	List all customers for this company

---

Deletion

DataGrail's Avalara integration provides Synchronous Deletion capabilities for the following supported identifier category: Email.

Data Interactions

For Deletion requests, DataGrail will take the following actions:

1. Search for a related customerCode value and identify any certificates linked to this customer object.
2. If any certificate applies to the transaction, AvaTax will record the appropriate elements of the transaction as exempt and link it to the certificate.

Endpoints Utilized

Method	Endpoint	Purpose	Docs
DEL	/companies/company_Id/customers/customer_Code	Delete a customer record

System Detection

DataGrail provides continuous system detection, delivering a real-time inventory of your data assets.

Data Interactions

For data discovery requests, DataGrail retrieves all data sources across all companies to detect new systems added to your organization.

Endpoints Utilized

Method	Endpoint	Purpose	Docs
GET	/datasources	Retrieve all datasources

---