API World + AI DevWorld

As the development world moves firmly to embrace an API based ecosystem, much work has been done to secure access to API’s. While this is important and necessary, equal attention should be paid to what data is being imported, exported, or transformed via those API’s.The current state of the art with regards to controlling the flow of data via API’s, and detecting breaches or other compliance failures is similar to the early days of web access management, with little or no centralized compliance to policy, and breaches taking months or even years to detect. Wesley will show how data access policies can be defined and enforced across a companies’ API ecosystem to ensure compliance with privacy regulations, data locality restrictions, and user consent directives, even in the face of programming errors or exploited vulnerabilities in services.