Where can we find details or documentation of Adobe I/O for information and security review.

[mohan.lankisetti@bms.com]

We are using PDF Embed API and Adobe PDF Services API with in AEM. First one for rendering PDF preview of Assets in ACS Asset detail page. Second generating PDF for HTML based content. Now there is another team , using Connector for PDF operation on a SharePoint site.

[mohan.lankisetti@bms.com]

In our organization the infosec review is conducted when we user 3rd party services and during this process the security team has asked below question for which I am trying find answers and supporting document for Adobe. Can anyone please guide me with below initial questions:

1. What information does Adobe retain after generating PDF?
2. What functionalities will be available to administrator on the Adobe platform?
3. Please share the API documentation
4. If API calls are asynchronous (aka two separate APIs for submitting the document and retrieving the documents), we need IP restricted or digital certificate based authentication on this API.
5. How would the administrative account maintained? We need IT-TMP-100 describing the process for managing administrative accounts and periodic UAR.

[Ben Vanderberg · Accepted solution]

Information about security and compliance can be seen here: 

https://www.adobe.com/content/dam/cc/en/trust-center/ungated/whitepapers/doc-cloud/adobe-document-se...