Evidence supplied under agreement
The customer produces a controlled export or file package. A transfer channel and deletion plan must be agreed before real data moves.
Source mapping · Integration readiness
Named systems describe research scope and proposed retrieval paths, not generally available connectors. Each source needs an identifier map, an approved access path and evidence of what was searched.
Read the status before the logo
Every status describes the current evidence and proposed retrieval path. It does not promise general availability, instant setup or production readiness.
The customer produces a controlled export or file package. A transfer channel and deletion plan must be agreed before real data moves.
Identifiers, fields, access and queries still need scoped validation. This is not a one-click integration.
Trace is evaluating data relevance, API constraints and demand. No implementation date is promised.
Interview, technical and security evidence are required before the status changes.
Current truth: Trace has not released automated system access. The directory below records proposed paths and current limits; it is not an integration marketplace.
Source directory
Open a source to see expected data, access approach, likely request relevance and the limitation that must travel with the result.
Profiles and authentication metadata that may support identity matching and source discovery.
Proposed scoped Management API access.
Identity support and access evidence.
Not currently offered as an automated connector.
Proposed scoped backend API access.
Identity support and access evidence.
Not currently offered as an automated connector.
Customer, subscription, invoice and payment metadata with retention questions kept visible.
Restricted API key or a controlled export.
Access and portability evidence; deletion depends on lawful retention decisions.
Trace would flag retention questions for authorised review.
Open the source-specific workflow →Contacts, tickets and conversations that often sit outside the primary product database.
Customer-produced export through an agreed channel.
Access and correction evidence.
No direct or automated retrieval is claimed.
Customer-produced export through an agreed channel.
Access, correction and deletion evidence where applicable.
Portal-specific source selection remains customer-owned.
No accepted retrieval path is currently claimed.
Access and correction evidence may be relevant.
Interview and technical evidence are required before this status changes.
Application records and stored objects identified through the customer’s schema and request scope.
Customer-approved, least-privilege access or a controlled export.
Access, portability and deletion evidence where applicable.
No one-click connector is claimed. Any retrieval path is scoped and tested with the customer.
Open the source-specific workflow →Scoped service access or customer-generated export.
Access, portability and deletion evidence where applicable.
Collection structure and security rules must be mapped with the customer.
Open the source-specific workflow →Read-only database role, replica, query runner or export.
Depends on schema and controller instructions.
Custom queries require customer validation.
Scoped manifest or customer-produced package.
Access and portability evidence.
Broad bucket access is not a default.
Controlled evidence paths for systems without a named integration approach.
Agreed secure transfer channel.
Depends on request type and the evidence the customer can validly supply.
Controlled exports are a proposed starting point, subject to an agreed data-handling boundary.
Least-privilege credentials with revocation controls.
Defined during scoping.
Subject to technical and security review.
Access strategy
It is “What is the smallest, revocable path that can produce useful evidence under the agreed scope?”
For a first case, an export may reduce standing access and speed up validation. File transfer, integrity checks, storage and deletion still need an agreed method.
Where repeated retrieval is justified, the design should restrict systems, tables, objects, endpoints and operations. “Read-only” still requires security review.
A reviewed query, manifest or API export can keep credentials and execution inside the customer environment while preserving a documented evidence path.
Unmapped tools, inconsistent identifiers and access failures become case warnings. Trace should not infer completeness from the sources it happened to reach.
Readiness source map
The source map is the operational contract between the request and the evidence. It should be understandable without knowing the customer’s entire architecture.
Who can approve access, validate a query and explain the source.
Which stable identifiers link the person across systems—and where matching may fail.
The in-scope records, attachments and metadata, plus known exclusions.
How evidence can be retrieved, who grants access and how it is removed.
Where deletion requests may conflict with documented legal or operational retention.
What proves the source was checked and which gaps must be disclosed to the reviewer.
Founding design partners
The proposed Readiness Sprint maps up to three systems and rehearses one synthetic request. No production integration is implied.