Glossary
Company Invite
How a company grants access. The investor sends a signed link to the company contact; whoever holds the keys there (often the CEO, CFO or an admin) opens it. The link presents the Data Processing Agreement; accepting it is logged as a consent event. The company contact then connects QuickBooks, one CRM (HubSpot or Salesforce), GitHub, Jira and Slack in their own session. Zoe only reads, though the permission a provider grants can be broader than what Zoe reads. The investor never sees a credential.
Why it matters
Who connects is the first thing the company's counsel asks. On a Zoe diagnostic the investor never touches a credential and never sits in the company's OAuth flow. The company's own leadership accepts the Data Processing Agreement, sees the scopes, and grants access in their own session. That is what makes the read defensible on both sides of the table.
How Zoe reads it
The investor requests the connections from inside the diagnostic. Someone at the company, often the CEO or CFO, opens a signed link, is shown the DPA, and accepts it; the acceptance is logged as a consent event. They then connect QuickBooks, one CRM (HubSpot or Salesforce), GitHub, Jira and Slack. Zoe only reads. Disconnecting a source stops future reads, and Zoe also asks the provider to revoke its access. Connection status updates in the diagnostic.
Related terms
From term to finding
Ask to see the language inside a Deal Package.
A finished example shows how operating signals become scored findings for the IC.