Publishing a privacy policy covering the producer and consumers of an API, as well as end-users of applications, adding to the legal resources that are available to 3rd party developers when putting APIs to work.
Privacy Policy
Rules
APIs.json Apis Properties Privacy Policy Info
This property provides a link to the privacy policy for an API, giving the legal details of how privacy is approached for each API
Strategies
APIs Are Legally Covered
The legal side of APIs is one of those things nobody wants to deal with until it bites them. Terms of service, privacy policies, licensing, regulatory compliance--you need all of this sorted out be...
API Data Is Classified and Protected
Not all data is created equal, and if you are treating PII the same as public reference data, you have a problem. Every piece of data flowing through your APIs needs to be classified by sensitivity...
APIs Meet Regulatory and Compliance Requirements
GDPR, SOC2, PCI-DSS, HIPAA--the regulatory landscape around APIs is getting more complex, not less. Every API needs to be mapped to the applicable requirements so that designs, data handling, and o...
APIs Earn and Maintain Consumer Trust
Trust is earned across every interaction in the API landscape--transparent SLAs, consistent deprecation policies, reliable performance, solid security, clear legal terms. If you want people to buil...
Experiences
Reliability
Reliability is where the rubber meets the road in the API landscape. If your APIs aren't up when consumers need them, and if new versions don't land smoothly, none of the other building blocks matter.
Quality
I see the quality of APIs eroding across the landscape. Teams ship fast and never look back, but consumers feel every rough edge, every missing example, every inconsistent response. Quality is what...
Access
I keep seeing teams struggle with getting consumers proper access to their APIs. The sign-up, authentication, and authorization process is where you lose people before they ever make their first AP...
Legal
The legal side of APIs is something most teams ignore until it bites them. Terms of service, privacy policies, licensing -- these building blocks matter, and the politics around API usage are only ...