# Ensure compliant and secure third-party access using GraphOS

DevFeed: [Ensure compliant and secure third-party access using GraphOS](<https://devfeed.tech/articles/ensure-compliant-and-secure-third-party-access-using-graphos-23290.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/ensure-compliant-and-secure-third-party-access-using-graphos>)

Author: Matthew Ratzke

Published: 2023-03-20T09:00:00Z

Content type: tutorial

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphOS](<https://devfeed.tech/topics/graphos.md>), [GraphQL](<https://devfeed.tech/topics/graphql.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [ccpa](<https://devfeed.tech/tags/ccpa.md>), [data-privacy](<https://devfeed.tech/tags/data-privacy.md>), [gdpr](<https://devfeed.tech/tags/gdpr.md>), [graphos](<https://devfeed.tech/tags/graphos.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [security](<https://devfeed.tech/tags/security.md>), [third-party-applications](<https://devfeed.tech/tags/third-party-applications.md>)

## AI overview

This post explains how financial services companies can use Apollo GraphOS to provide compliant and secure third-party access to sensitive data. It describes schema contracts for limiting exposed fields and types, separating customer use cases, supporting data minimization, and applying access controls and authentication through Apollo Studio and Apollo Router.

## Source excerpt

This post is a part of our "How to power modern financial services apps with Apollo GraphOS" series. Also in this series: - Deliver a personalized customer experience with GraphQL - Securing APIs declaratively with GraphQL - Adopt a Customer 360 approach to prevent fraud with GraphQL In recent years, GraphQL has gained popularity as a powerful alternative to REST APIs for building modern web applications.