SendGrid
Authentication & Authorization
Credentials
-
SendGrid authenticates via token authentication.
-
API Key can be generated from the SendGrid account (see the DataGrail help docs).
-
Publicly exposing your API credentials can allow unauthorized access to the SendGrid API endpoints, and your SendGrid data by a third party. DataGrail stores your API credentials encrypted and protected.
Permissions and Scopes
API Keys may be assigned certain permissions, or scopes, that limit which API endpoints they can access. SendGrid API Key for DataGrail should be configured to allow certain API calls:
-
Email Activity > Read Access
-
Category Management > Full Access
-
Mail Send > Full Access (for Transaction Mailer mode only).
Endpoints Utilized
DataGrail uses the following endpoint to validate that the required scopes are assigned to the configured API Key:
Version
DataGrail currently supports SendGrid API version 3 (v3).
Limits
-
DataGrail supports requests throttling to stay within 70-80% of specified service rate limits.
-
DataGrail processes API responses with HTTP 429 status to interrupt requests, waiting and retrying (using an exponential backoff strategy).
Access
For an access request, DataGrail will take the following actions:
-
Search contacts by the Data Subject email (search as in primary as in alternate emails).
-
If contact found:
-
Fetch lists and segment IDs from the contact details.
-
Fetch all lists related to the contact by IDs.
-
Fetch all segments related to the contact by IDs.
-
-
Filter all messages to search email activity by the Data Subject email.
-
For all objects found, DataGrail will return all available fields. You can edit which objects and fields you want to provide to the Data Subject via our Portal Requests.
Endpoints Utilized
-
GET https://api.sendgrid.com/v3/marketing/lists/\{list\_id\}
-
GET https://api.sendgrid.com/v3/marketing/segments/\{segment\_id\}
Deletion
For a deletion request, DataGrail will take the following actions:
-
Search contacts by the Data Subject email (search in the primary emails only).
-
Delete contact by ID (SendGrid deletion jobs are processed asynchronously).
-
Continuously repeat search contacts by the Data Subject email to verify the deletion.
Endpoints Utilized
Transaction Mailer
SendGrid integration can be also configured as a DataGrail Transaction Mailer. In this mode, DataGrail uses SendGrid integration to send emails over SendGrid’s Web API.
Endpoints Utilized
Disclaimer: The information contained in this message does not constitute as legal advice. We would advise seeking professional counsel before acting on or interpreting any material.