Books67 chapters15 h 48 min read
Workplace & Collaboration
Workplace software runs the same machinery as consumer chat and content, with the duties turned around. A team's Slack channel, a Zoom call, a Confluence page, a Jira issue, a Figma file and a law firm's matter folder all sit in a tenant the customer organization controls: its admins provision people from the directory and cut them off through SSO, decide who outside the company can see what, set retention, place legal holds, answer the subpoena, approve the apps and the AI, and can leave with their data. The vendor runs the service and follows the customer's instructions. Around that inversion sit the parts every vendor has to build: organizations and workspaces, managed accounts and SCIM, guests and shared channels, permissions and link sharing, seats priced by tier and counted by rules that differ by vendor, real-time messaging, meetings and co-editing, work items and workflows, enterprise search and assistants over company data, and the audit, eDiscovery, DLP and archiving that regulators and courts expect, under GDPR, works council rules, SEC and FINRA recordkeeping, the Commission's Teams decision and the ABA's rules for lawyers. This book surveys how the industry does each piece, benchmarked across Microsoft 365, Google Workspace, Zoho, Atlassian, Slack, Zoom, Webex, Notion, Figma, Miro, Asana, monday.com, Linear, Dropbox, Box, DocuSign, ServiceNow, Glean, Okta, Mattermost, Matrix, Clio and iManage, with no single company as the model, and how you'd build it, extending one core data model chapter by chapter.
It reads in eleven parts, plus a reference. The Business: the parties, the inverted duties, how the money works, the core data model, the landscape, business models and unit economics, plans, pricing and seats, and suites, bundling and antitrust. Tenancy and Identity: tenants and workspaces, SSO and managed accounts, provisioning and SCIM, guests and cross-org collaboration, permissions and sharing, admin consoles and policies, and data residency. Chat and Messaging: channels and threads, chat at scale, notifications and presence, email and calendar, and frontline workers. Meetings and Voice: meetings and video, recordings, transcripts and AI notes, async video, business phone and contact center, and rooms and the hybrid office. Docs, Wikis and Files: docs and wikis, real-time co-editing, files and sync, intranets, no-code databases, and e-signatures. Work Management: work items and fields, workflows, queries and dashboards, boards and sprints, portfolios and goals, automation rules, service management, and development collaboration. Design and Visual Collaboration: design tools, whiteboards, and design systems and handoff. Search, Integrations and AI: enterprise search, apps and marketplaces, APIs and rate limits, integration platforms, AI assistants over company data, and agents and MCP. Security and Compliance: audit logs, retention and legal hold, eDiscovery, DLP, customer-managed keys, certifications, regulated communications, employee monitoring, and threats and incidents. Law Firms and Professional Services: the matter-centric firm, intake and conflicts, trust accounting, time and e-billing, and legal documents and AI. Running the Platform: architecture, clients, reliability, billing and resellers, selling to enterprises, migrations and switching, accessibility, and metrics. Reference: a glossary of every term, grouped by part.
The Business
- 01The Workplace Software BusinessHow workplace software works: the parties, the inverted duties, how the money works, the life of a customer, and the core data model every chapter extends.22 min
- 02The Collaboration LandscapeThe categories of workplace software, suites against best-of-breed, market sizes from the filings, a dated timeline of deals and shutdowns, and self-hosting.13 min
- 03Business Models & Unit EconomicsPer-seat SaaS, freemium and product-led growth, land and expand, usage and AI credits, and the metrics vendors report, read from their filings.13 min
- 04Plans, Pricing & SeatsTier ladders and feature gates, the SSO tax, what counts as a seat at each vendor, terms, nonprofit and education plans, and how AI pricing moved into plans.14 min
- 05Suites, Bundling & AntitrustWhy suites win procurement, the EU Teams case from Slack's complaint to binding commitments, the UK's Microsoft SMS case, bundled AI, and licensing on clouds.13 min
Tenancy and Identity
- 06Tenants, Workspaces & OrganizationsWorkspace, org and tenant across Slack, Atlassian, Microsoft 365, Google, Notion and Figma; joining by domain; merging and splitting tenants; isolation.16 min
- 07SSO, Domains & Managed AccountsDomain verification, claiming personal accounts into managed ones, enforcing SAML and OIDC, MFA and session policy, break-glass admins, and the SSO tax.14 min
- 08Provisioning, SCIM & OffboardingSCIM 2.0, Entra, Okta and Google directory sync, HR-driven joiner-mover-leaver, deactivation versus deletion, and handing content over at offboarding.13 min
- 09Guests & Cross-Org CollaborationGuest accounts, federation and shared channels in Slack, Teams, Google and Atlassian; trust between two admins, who owns shared content, external-access abuse.12 min
- 10Permissions & SharingRole ladders, container inheritance, restrictions and link sharing; Zanzibar, OpenFGA and SpiceDB; Figma's policy DSL; permission checks in search and AI.13 min
- 11Admin Consoles & PoliciesAdmin role ladders and scoped admins, just-in-time elevation, policy inheritance, conditional access, device and app controls, admin APIs and change history.14 min
- 12Data Residency & SovereigntyWhat residency covers and leaves out, the EU Data Boundary and Multi-Geo, moving regions, Schrems II, the Data Privacy Framework and the CLOUD Act.14 min
Chat and Messaging
- 13Channels, Threads & Direct MessagesHow workplace chat organizes talk: channels, threads and topics, DMs and group chats, canvases and huddles, and admin rules for edits, deletes and archiving.17 min
- 14Chat at ScaleHow workplace chat runs: Slack's channel servers, cells and Unified Grid, Teams' chat service and mailbox copies, federation, unread state and search.16 min
- 15Notifications, Presence & AttentionWho gets interrupted and when: mentions, keywords, presence, do-not-disturb, badges across devices, digests, push relays and right-to-disconnect laws.14 min
- 16Email & CalendarExchange and Gmail as the backbone: sending limits, iCalendar and iTIP, CalDAV, free/busy, recurrence and time zones, room booking and calendar APIs.15 min
- 17Frontline & Deskless WorkersCollaboration without desks: frontline seats, shared devices, shift schedules, push-to-talk, task publishing and the wage-hour risk of after-hours messages.15 min
Meetings and Voice
- 18Meetings & VideoHow Zoom, Teams, Meet and Webex run meetings: signaling and media, SFUs, simulcast, codecs, E2EE and the FTC Zoom case, large events, interop, lobbies.18 min
- 19Recordings, Transcripts & AI NotesMeeting recordings, transcripts and AI summaries: who owns them, compliance recording, notetaker bots and the Otter case, consent law, voiceprints and expiry.16 min
- 20Async Video & Screen RecordingAsync video at work: Loom, video as files in Microsoft 365, and Zoom Clips; recording and processing, storage cost, governance, and viewer analytics.10 min
- 21Business Phone & Contact CenterUCaaS and CCaaS: Teams Phone, Zoom Phone, RingCentral and Google Voice; PSTN connectivity, porting, dynamic 911 location, recording, contact centers.13 min
- 22Rooms, Devices & the Hybrid OfficeTeams Rooms and Zoom Rooms, certified devices, cross-vendor join, room and desk booking with auto-release, work location, visitors, and badge data limits.14 min
Docs, Wikis and Files
- 23Docs & WikisHow workplace docs and wikis model content: Notion blocks, Confluence ADF, Google Docs, Loop and Coda; page trees, versions, publishing and ownership.16 min
- 24Real-Time Co-EditingCo-editing: operational transformation in Google Docs, CRDTs (Yjs, Automerge, Peritext), Figma server authority, Fluid, presence, undo, offline merges.15 min
- 25Files, Sync & StorageDropbox block sync and Magic Pocket, Box, OneDrive and SharePoint, Google Drive: conflicts, versions, ransomware, ownership, pooled quotas and scanning.15 min
- 26Intranets & Knowledge BasesIntranets and knowledge bases: SharePoint home sites, Google Sites, Confluence, Guru, Staffbase, Simpplr; targeting, translation and verification.12 min
- 27No-Code Databases & Internal ToolsAirtable, Notion databases, Lists and Power Apps, AppSheet, Retool and Coda: user-owned schemas, formulas, limits, connector policies, shadow apps.11 min
- 28E-Signatures & AgreementsE-signature as workplace software: envelopes and certificates, ESIGN exceptions, eIDAS levels and QTSPs, PDF signatures, CLM and remote notarization.13 min
Work Management
- 29Work Items, Hierarchies & FieldsIssues and tasks across Jira, Linear, GitHub, Azure Boards, Asana and monday.com: types, hierarchies, custom fields and their cost, links and dependencies.14 min
- 30Workflows & Status MachinesStatuses, transitions, conditions, validators and post functions, resolutions, state categories, shared schemes vs team-owned workflows, and workflows as data.12 min
- 31Queries, Views & DashboardsJQL and WIQL grammars, Linear and GitHub filters, saved filters and their sharing, list, board and timeline views, dashboards, and permission-trimmed queries.13 min
- 32Boards, Sprints & CyclesScrum and Kanban as data: boards and column mapping, WIP limits, sprints and Linear cycles, estimates and velocity, burndown, cumulative flow and flow metrics.14 min
- 33Portfolios, Roadmaps & GoalsJira Plans, Atlassian Goals and Focus, Asana and monday portfolios, Linear initiatives, Azure delivery plans, OKRs, dependencies, capacity and status updates.11 min
- 34Automation RulesJira Automation, Asana, monday.com, ClickUp, GitHub Actions and Linear: triggers, conditions and actions, usage quotas by plan, loops, actors and run audit.11 min
- 35IT & Service ManagementITIL practices, request portals, incidents, problems and changes, SLA clocks, the CMDB and HR service in ServiceNow, Jira Service Management and Freshservice.12 min
- 36Development CollaborationCode hosts as collaboration tools: pull requests and review rules, CODEOWNERS, merge queues, linking work items to commits and deploys, and inner source.11 min
Design and Visual Collaboration
- 37Design ToolsFigma's browser engine and multiplayer, files and branches, seats, the 2025 IPO and the Adobe deal that failed, and how Sketch, Penpot and Canva differ.15 min
- 38Whiteboards & DiagramsMiro, FigJam, Mural, Microsoft Whiteboard, Excalidraw and tldraw: infinite canvases, object models, sync, facilitation, admin controls and diagram-as-code.15 min
- 39Design Systems & HandoffComponents, variables and W3C design tokens, library publishing and versions, Dev Mode, Code Connect and MCP, and accessibility annotations from design to code.15 min
Search, Integrations and AI
- 40Enterprise SearchPermission-trimmed search across company tools: connectors, indexing versus federation, ACL sync and its lag, identity mapping, oversharing and ranking.17 min
- 41Apps & MarketplacesHow workplace apps are reviewed, approved and paid for: marketplace review, admin consent, Forge and the Connect retirement, OAuth verification, revenue share.15 min
- 42APIs, Events & Rate LimitsHow Slack, Microsoft Graph, Google Workspace and Atlassian expose data to apps: request APIs, event delivery, subscriptions, rate limits and data-use terms.16 min
- 43Integration Platforms & Workflow BuildersZapier, Make, Workato, Power Automate, Slack Workflow Builder, n8n and unified APIs: triggers, billing units, failures, credential custody and governance.14 min
- 44AI Assistants Over Company DataCopilot, Gemini, Slack AI, Rovo, Notion AI and Glean: permission-aware grounding, oversharing fixes, data-use commitments, admin controls, records and pricing.14 min
- 45AI Agents, Connectors & MCPAgents acting in workspaces, vendor MCP servers, MCP authorization, agent identity in Entra, consent and scopes, prompt injection via shared content, and audit.15 min
Security and Compliance
- 46Audit LogsSlack's Audit Logs API, Purview Audit after Storm-0558, Google Workspace, Atlassian and Notion logs, retention windows, SIEM export and the event shape.14 min
- 47Retention & Legal HoldRetention policies in Slack, Purview, Vault, Box and Notion, how holds override deletion, FRCP 37(e), and the Google Chat and Signal spoliation cases.19 min
- 48eDiscovery & ExportEDRM, Slack exports and the Discovery API, Purview and Vault eDiscovery, chat review with RSMF, form of production, privilege, and cross-border discovery.15 min
- 49DLP & Information ProtectionSensitivity labels, DLP across chat, files and email in Purview, Google Workspace, Slack and Atlassian Guard, CASBs, insider risk, and false positives.14 min
- 50Encryption & Customer-Managed KeysSlack EKM, Atlassian CMK, Microsoft Customer Key and Double Key Encryption, Google client-side encryption, Zoom E2EE and Box KeySafe, and what each gives up.13 min
- 51Certifications & Procurement AssuranceSOC 2, the ISO family, FedRAMP and government clouds, CJIS, HIPAA BAAs, IRAP and C5, and the trust centers and questionnaires a workplace vendor answers.16 min
- 52Regulated Communications & ArchivingSEC 17a-4, FINRA 4511 and 3110, the off-channel fines, CFTC and MiFID II recording, and how archivers capture and supervise chat and meetings.14 min
- 53Employee Monitoring & PrivacyWhat admins can see in workplace tools, US notice laws, ECPA and the NLRB, GDPR, German works councils, CNIL fines on monitoring, and bossware's limits.14 min
- 54Threats & IncidentsAttacks on workplace tools from public reports: Teams help-desk phishing, device code and consent phishing, token theft, vendor breaches, Confluence CVEs.16 min
Law Firms and Professional Services
- 55Law Firms & Professional ServicesThe matter-centric model of clients, matters, timekeepers and rates, the practice management vendors, and the ABA Model Rules that shape law firm software.12 min
- 56Matters, Intake & ConflictsIntake and prospective clients, conflict rules 1.7, 1.9 and 1.10, conflict search over parties, ethical walls, engagement letters and closing a matter.17 min
- 57Trust Accounting & IOLTAClient trust accounts under Rule 1.15, IOLTA programs, earned and unearned fees, three-way reconciliation, card payments into trust, and bar audits.17 min
- 58Time, Billing & E-BillingTime entry, rates and fee arrangements, pre-bills, LEDES 1998B and XML, UTBMS codes, e-billing audits, rejections and appeals, and realization metrics.16 min
- 59Legal Documents, DMS & AIMatter-centric document management, email filing, confidentiality in the cloud under Opinion 477, generative AI under Opinion 512, fake citations and privilege.15 min
Running the Platform
- 60Building It YourselfThe services and data layout of a collaboration product: tenant sharding as Slack, Figma and Notion did it, cells, the permission service, indexes and events.14 min
- 61Desktop & Mobile ClientsElectron and WebView2 desktop clients, update cadence and version floors, enterprise packaging (MSIX, MDM), app protection on phones, and push under OS limits.12 min
- 62Reliability, Outages & SLAsHow collaboration vendors fail and report it: incident reviews, user-minute SLAs and credits, status feeds, maintenance notice, tenant restores and backup.16 min
- 63Billing, Seats & ResellersSeat billing operations for collaboration software: counting seats, proration, true-ups, co-terming, POs, CSP resellers, cloud marketplaces and tax.14 min
- 64From Self-Serve to EnterpriseHow collaboration products go from a free team to an enterprise contract: domain claiming, expansion signals, sales assist, procurement, enterprise asks.11 min
- 65Migrations, Imports & SwitchingMoving collaboration data: Atlassian's Server and Data Center endings, importers between tools, merger tenant moves, export by plan and the EU Data Act.13 min
- 66Accessibility & LocalizationAccessibility and language in workplace software: Section 508, EN 301 549, the EAA, ADA Title II, ACRs, editors and canvases, captions, right-to-left.11 min
- 67Workplace MetricsVendor metrics from filings (ARR, net retention, large customers, DAU) and customer metrics (adoption reports, license reclaim), and what each misses.10 min