SKY API Security

Adriana Bitoun

Hello,

Our institution is exploring the utilization of the SKY Api to migrate prospect data from a third party vendor. Our IT director is hesitant to use the API, our question is:

Does this API exposes CRM data to the web?

What security protocols did you put in place?

Are there any pros or cons for using the API?

Thanks for any help!

Bryce Howard

@Adriana Bitoun
The SKY API does not expose CRM data to the web indiscriminately. All API requests require secure access tokens (generated via OAuth 2.0) and subscription keys in the headers for authentication, guaranteeing that only authorized requests are processed.

One of the biggest advantages of using the API is the potential for automation. A skilled developer can significantly reduce, though not entirely eliminate, the need for data entry staff by automating tasks and workflows. However, a notable downside is the reliance on said developer.

Alex Wong

@Adriana Bitoun
If your IT director is concerned, you can guide him to developer.blackbaud.com as that would be the level of knowledge s/he will need to approve or deny usage of SKY API, he shouldn't just take your word for it based on a community post you got response for.

As stated by Bryce, SKY API has level of protection to customer data, however, it is HOW you use API and whatever it is that you “call” the API with that can circumvent data security too. SKY API alone won't do anything for you automatically.

big pro: anything BB SKY API has endpoint to do (i.e. create constituent, create gift, etc), you can potentially automate it.

big con: while BB has glorified low/no code and simplicity, it does have learning curve. while there are many template to use, it does require logically sound mind.

Erik Leaver

@Adriana Bitoun Your IT department might appreciate this session from bbdevdays: Cybersecurity for Low Coders: