API Developer Partner Program and Security

Automate, Connect, Attribute

We’re making things simple and building an evolving set of APIs, giving you access to user info, data, customer journeys, reports, tools, and more! But first and foremost, it’s all about security.

What is the ActiveDEMAND Developer program?

The ActiveDEMAND Developer program gives developers access and rights to use a limited number of RESTful APIs. Developers will also have access to the documentation required for development.

Overview

1. Developer applies to program
   

   The developer should be directed to https://www2.activedemand.com/api-developer-program to fill out the application.  When this form is filled out the information should be given to Sean/Trish to review.

   Status: Applied
   
   

2.  ActiveDEMAND issues a test developer API token and a sandbox account
   

   Once the application has been approved to continue, ActiveDEMAND will issue a test-developer API token and a test account for the proposed integration

   Status: In Development
   
   

3. Developer completes the development
   

   The developer will build out their integration with the test account provided.  Documentation is available at https://developers.activedemand.com/ 

   Status: In Development
   
   

4. Developer performs a security scan of the completed application
   

   The developer will perform a security scan using FluidAttacks

   https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd

   Status: In Development
   
   

5. Developer submits the results of the security to ActiveDEMAND along with a video showing how the integration works and the user experience and functionality.
   

   Once the developer has completed the integration, they will let AD know and we will start the review process.  This may include: security review, testing of integration and/or a call with a walk through of the integration.  If AD finds any issues with the integration it will be moved back to In Development and the developer will be notified.
   

   Functionality Review

   • All actions are fully functional and there are no obvious bugs
   • The application provides new or extended functionality that doesn’t duplicate what is already available in ActiveDEMAND
   • All functionality complies with ActiveDEMAND’s terms of use

   Security Review

   • Perform a fluid attacks scan of your source code and provide the csv output from the scan (see https://help.fluidattacks.com/portal/en/kb/articles/run-scans-locally-or-in-your-ci-cd)

    

   Status: In Review
   
   

6. Developer signs the legal agreement
   

   After the integration has passed the security/functionality review, the legal agreement will be provided to the developer to sign.

   Status: In Review

   
   
   
7. ActiveDEMAND upgrades the developer token to a production token
   

   AD publishes the integration

   Once the legal agreement has been signed the integration will be published.

   Status: Published

Frequently Asked Questions

Who does this apply to?

Anyone who develops, maintains, or is currently using an application or integration developed using the ActiveDEMAND API. This does not apply to ActiveDEMAND-developed and maintained native integrations.

What is the list of ActiveDEMAND native integrations?

The list of ActiveDEMAND developed and maintained native integrations includes:

• Senior Living CRM integrations: Aline (Sherpa/Enquire), WelcomeHome, Yardi, Eldermark and Alis
• B2B CRM integrations: Pipedrive, Pipeline CRM, Salesforce, Microsoft Dynamics 365 CRM, Nimble, noCRM.io, Zoho CRM
• Collaboration integrations: GotoMeeting, GotoWebinar, Zoom, Microsoft Teams, Google Meet, Slack
• e-Commerce integrations: Magento, Shopify, WooCommerce, PrestaShop, Stripe
• AdRetargeting integrations: AdRoll, Facebook Ads, Google Ads, El Toro
• Calendar / Email integrations: Google Mail, Google Calendar, Microsoft Office 365
• Social Integrations: Facebook, Instagram, LinkedIn, X / Twitter, Pinterest
• Application integrations: Zapier, Roobrik

Do individual applications need to be certified or approved?

No, once a vendor or application developer becomes an approved ActiveDEMAND development partner, they will receive a unique API-approved vendor token that enables API access. The primary purpose of the ActiveDEMAND Partner Developer Program is to ensure the security of our clients' data. The certification process ensures programmatic access to ActiveDEMAND’s customer data is only provided to companies that share ActiveDEMAND’s security-first approach.

How does a vendor become approved and receive an API-approved vendor token?

The first step is to have a person who represents the vendor or application development team fill out the above form and apply for the ActiveDEMAND Partner Developer Program. The ActiveDEMAND team will guide you through the licensing and security requirements.