B2B Schema with GDPR Compliance and Enterprise SSO

EVENT TRACKING SCHEMA

NAMING CONVENTION: object_action (snake_case, past tense)

Examples:

• document_viewed (not ViewDocument, view_document)
• permission_changed (not PermissionUpdated, change_permission)

EVENT TAXONOMY

CATEGORY: ACCOUNT & AUTHENTICATION

CATEGORY: WORKSPACE

CATEGORY: DOCUMENT

CATEGORY: PERMISSIONS

CATEGORY: VERSION CONTROL

PROPERTY STANDARDS

Required on ALL events (Amplitude auto-captures):

• timestamp (automatic)
• user_id (hashed for GDPR)
• session_id (automatic)

Naming conventions:

• IDs: {object}_id (workspace_id, document_id)
• Counts: {thing}_count (member_count, recipient_count)
• Durations: {metric}_{unit} (view_duration_seconds)
• Booleans: has_{thing} or is_{state} (is_from_template)
• From/To: {thing}_from / {thing}_to (permission_level_from)

GDPR-Specific Properties:

• ip_location_country (NOT full IP address)
• Use hashed user_id for all events
• Never send: email addresses, full names, IP addresses

AMPLITUDE IMPLEMENTATION

// analytics/amplitude-config.ts
import * as amplitude from '@amplitude/analytics-browser';
import { createHash } from 'crypto';

amplitude.init('YOUR_API_KEY', {
  serverUrl: 'https://analytics.eu.amplitude.com', // EU data residency
  trackingOptions: {
    ipAddress: false, // GDPR
    city: false,
    region: false,
  },
});

export function hashUserId(userId: string): string {
  return createHash('sha256').update(userId).digest('hex').substring(0, 16);
}

// analytics/events.ts
export const EVENTS = {
  // Key metrics
  DOCUMENT_VIEWED: 'document_viewed',
  DOCUMENT_SHARED: 'document_shared',
  PERMISSION_CHANGED: 'permission_changed',
  VERSION_CREATED: 'version_created',
  
  // Auth/SSO
  USER_LOGGED_IN: 'user_logged_in',
  SSO_AUTHENTICATION_COMPLETED: 'sso_authentication_completed',
  SSO_AUTHENTICATION_FAILED: 'sso_authentication_failed',
  
  // Workspace
  WORKSPACE_CREATED: 'workspace_created',
  WORKSPACE_MEMBER_ADDED: 'workspace_member_added',
} as const;

// analytics/tracker.ts
import { hashUserId } from './amplitude-config';

export class AnalyticsTracker {
  static trackDocumentViewed(params: {
    document_id: string;
    workspace_id: string;
    user_role: string;
    view_duration_seconds?: number;
  }) {
    amplitude.track('document_viewed', params);
  }

  // Permission changed - includes audit trail
  static trackPermissionChanged(params: {
    document_id: string;
    permission_level_from: string;
    permission_level_to: string;
    target_user_id: string;
    changed_by_user_id: string;
  }) {
    amplitude.track('permission_changed', {
      ...params,
      target_user_id: hashUserId(params.target_user_id),
      changed_by_user_id: hashUserId(params.changed_by_user_id),
    });
  }
}

GDPR COMPLIANCE CHECKLIST

Data Minimization:
[x] Hash all user_id values before sending
[x] Store IP as country code only
[x] Never send email addresses in properties
[ ] Implement data export endpoint
[ ] Implement data deletion workflow

Technical Safeguards:
[x] Use EU Amplitude endpoint
[ ] Set up data retention policy (25 months)
[ ] Configure user data deletion on request

ENTERPRISE SSO LOGGING

Audit Events:

1. sso_authentication_completed - Every successful SSO login

   • Includes: sso_provider, authentication_duration_ms
   • Retention: 90 days minimum

2. sso_authentication_failed - Failed SSO attempts

   • Includes: sso_provider, error_type
   • Use for security monitoring

3. permission_changed - All permission modifications

   • Includes: full audit trail with changed_by_user_id

GOVERNANCE PROCESS (B2B Team)

Event Approval Workflow:

1. Developer creates feature requiring events
2. Product Manager reviews event names
3. Security/Compliance reviews GDPR compliance
4. Analytics Lead approves implementation
5. Merge after all approvals

New Event Checklist:
[ ] Follows object_action naming
[ ] No PII in properties (emails, IPs, names)
[ ] User IDs are hashed
[ ] Includes audit fields if security-related

PRIORITIZED ROLLOUT

Phase 1 - Core Analytics (Week 1):

1. document_viewed
2. document_created
3. document_shared
4. workspace_created
5. user_logged_in

Phase 2 - Collaboration (Week 2):
6. version_created
7. permission_changed
8. document_edited

Phase 3 - Security/Compliance (Week 3):
9. sso_authentication_completed
10. sso_authentication_failed
11. permission_granted
12. permission_revoked

Phase 4 - Monetization (Week 4):
13. plan_upgraded
14. trial_started
15. workspace_member_added