A critical error to address is the issue with data loss prevention and logging.
When a user downloads a document there appears to be no logging of that event in PandaDoc. I could be mistaken or using a tier that does not include these features, but I'm not seeing these types of events in the logs. Allowing a download via an external tool, while there is no clear logging of these events is a security concern.
This is a cool feature though, so perhaps only adding logging events is the most cost effective and posture minded approach.
A critical error to address is the issue with data loss prevention and logging.
When a user downloads a document there appears to be no logging of that event in PandaDoc. I could be mistaken or using a tier that does not include these features, but I'm not seeing these types of events in the logs. Allowing a download via an external tool, while there is no clear logging of these events is a security concern.
This is a cool feature though, so perhaps only adding logging events is the most cost effective and posture minded approach.