Integrations

Most people who land on this page are not the person who will use Hetk. They are the IT admin or security reviewer who got an approval request from one employee and want to know what they are about to wave through before they click approve. So the three pages below are written for you, not for the end user.

Each one covers a single provider — Google Workspace, Microsoft 365, and Apple iCloud — and answers the same questions in the same order: how Hetk authenticates, which OAuth scopes or credentials it asks for, what event fields it reads and writes, what it deliberately leaves alone, and where the data lives. The Google and Microsoft pages also walk through tenant-level admin consent, since that is usually the decision in front of you. The iCloud page is different: there is no Apple admin console, so it covers the app-specific-password model instead.

If you are reviewing a request right now, start with the provider your user named. If you need a signed DPA or have a question the page does not answer, email [email protected].