> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/faqs/generic-faqs.md). # Generic FAQs Frequently asked questions to get you up and running with DoControl
Q. How does DoControl work? A. DoControl is an agentless automated solution that operates behind the scenes. After integrating your SaaS applications (in a few clicks), DoControl continuously collects snapshots of asset data and monitors near-real-time user activity events. DoControl uses machine learning to classify assets by sensitivity, maps exposure levels, and automatically remediate risks through predefined workflows.
Q. Do I need to install anything to use DoControl? A. No, DoControl is completely agentless and requires no installation by administrators or end users. The onboarding process is simple and quick, and involves just connecting your SaaS applications.
Q. What credentials do I need to integrate SaaS apps with DoControl? A. You need admin credentials for each SaaS application you want to integrate. The integration uses a simple and secure OAuth 2.0 flow that displays all required permission scopes. For each successfully integrated app, you'll receive an email confirmation, and a green checkmark will appear in the DoControl interface.
Q. How long does it take for DoControl to collect data after integration? A. DoControl instantly builds an inventory of SaaS application assets, users, and third-party OAuth apps. Data collection is completed within hours. Once integrated, DoControl receives near-real-time activity events directly from connected SaaS applications.
Q. How do I connect to DoControl through a VPN? A. When connecting to DoControl through a VPN, a split tunnel is needed. If you don't have a split VPN tunnel, you'll get a blank page. To solve this, send DoControl your WAN IP range and we'll enable your connection.
Q. What types of alerts does DoControl generate? A. DoControl automatically detects suspicious user activities such as sharing numerous assets to personal accounts, public sharing of sensitive files, sharing large quantities of assets, extensive downloads, external sharing to private emails, and sharing with 4th parties. You can customize alert settings including severity levels and exclude specific actors or targets.
Q. What are DoControl workflows? A. Workflows are automated, conditional logic sequences that enable consistent enforcement and risk remediation across integrated SaaS applications. They monitor user activities and automatically perform actions when specified conditions are met (Notify, Approve, Remove collaborators, Remove sharing links, Change owner, and more). Workflows are customizable with no coding required and can be created from scratch or from pre-built playbooks.
Q. Can DoControl help with insider risk management? A. Yes, DoControl specifically addresses insider threats by integrating with HRIS systems (HiBob, Workday, Deel, BambooHR, SAP SuccessFactors) to track departing or terminated employees. DoControl can automatically monitor high-risk users, prevent data exfiltration, and trigger workflows to block file sharing when employment status changes. DoControl enriches events with business context from IdP, HRIS, and EDR to distinguish between normal activity and actual threats.
Q. What is DoControl's approach to Data Loss Prevention (DLP)? A. DoControl uses natural language processing (NLP) for real-time scanning and classification of sensitive data types including PII, PCI, and PHI. Unlike traditional DLP solutions, DoControl minimizes false positives by collecting security and business context about each user, distinguishing between actual risk and standard business practices. DoControl can automatically quarantine or remove sensitive data based on your policies.
Q. How does DoControl handle third-party OAuth applications? A. DoControl's Shadow App module discovers all third-party OAuth applications connected to your SaaS environments, including shadow apps, abandoned apps, and malicious apps. DoControl assesses risk levels based on permissions, usage, and geolocation data, then enables you to suspend, remove, or ban suspicious applications either manually or through automated workflows.
Q. Is DoControl secure and compliant? A. Yes, DoControl is committed to security best practices and holds ISO 27001 and SOC2 Type II compliance certifications. DoControl enriches incoming event metadata without accessing raw content. We provide publicly available self-assessments, penetration testing, and a data processing addendum. To learn more, see our [Security, Privacy & Compliance program](https://www.docontrol.io/security).
Q. Does DoControl use AI or large language models (LLMs), and how does this affect my data security? A. Yes, DoControl uses large language models (LLMs) to enhance features like global search, alerts, and the Dot AI assistant (private beta), allowing you to interact with the platform using natural language questions. However, your data security is DoControl's top priority. All LLM processing happens exclusively within DoControl's internal environment, and all searches are performed only within DoControl's internal systems. Importantly, your customer data is never used to train third-party models, and your data and search queries are never sent to, stored by, or used to train any external LLM or AI service. DoControl's use of LLMs is designed to increase productivity and provide intelligent insights while keeping your data completely safe and secure.
Q. I hear there’s a new feature coming out. Can I try it? A. If you’re interested in participating in a beta program for a new feature, contact Customer Success. Keep in mind that as much as we try to perfect our code before opening it to you, a feature in beta means you might experience some bugs. Let us know of any bugs you come across, so we can stabilize the feature and ultimately deliver a more robust product.
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.docontrol.io/docontrol-user-guide/faqs/generic-faqs.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.