Integration inventory

An integration inventory is the operating map of every outside system connected to a property-management account. It answers what is connected, why it exists, what it reads or changes, which properties it covers, who owns it, and how access will be removed. A marketplace badge or browser list does not provide that accountability.

For each connection, preserve the provider and product, environment, authentication method, scopes, data sent and received, write authority, webhook or scheduled jobs, system of record, support contact, last review, known failure path, and offboarding steps. Reference secrets by vault location rather than placing credentials in the inventory.

A duplex owner discovers that a former leasing add-on still receives applicant updates even though the subscription is no longer used. The inventory reveals the old webhook, its API key owner, and the deletion/export procedure. Without it, cancelling the invoice might leave data access or an active callback behind.

Review the register when adding a connection, changing scope, migrating systems, rotating credentials, or ending service. Ask whether the product can export a current connection list and whether disabling an integration also stops tokens, jobs, webhooks, and retained data. If ownership is “whoever set it up,” the control is fragile.