Skip to content
Notis

Review User Risk After an IP Record Changes

When a record changes, get a fresh risk assessment from its available IP signals and a concise review summary.

Trigger

File Updated

Triggers when a file's metadata or content changes in Google Drive.

Action

User Risk API

Tool to return a risk assessment for a user based on ip signals for fraud prevention. use after initial ip checks to decide whether to bypass or require captcha challenges.

Why this helps

Updated risk records can be missed when teams rely on someone to remember to recheck them.

  • Run an assessment when a relevant Drive record changes.
  • Summarize the risk result for a human review.
  • Reduce the chance that updated records sit without reassessment.

Setup

Build it in a few focused steps.

  • 1Connect Google Drive and Big Data Cloud once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a name.
  • 3Tell Notis to assess the user using IP signals in the updated record and summarize the result for review.
  • 4Choose File Updated as the trigger and select a channel for run reports.
  • 5Test with a real updated record that contains the needed IP signals.

Questions about this workflow

What input does the risk action use?

It assesses a user based on IP signals. The updated record needs to contain relevant signals for the assessment.

Does the workflow make a final fraud decision?

It returns a risk assessment. You can ask Notis to summarize it for review, but a policy decision depends on your process and available context.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Google Drive to Big data cloud. A trigger fires from one place; an action lands in another.

Google Drive triggers

Big data cloud actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Am I Roaming API

Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

ASN Extended Receiving From Info API

Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.

ActionInstant

Comment Added (Docs/Sheets/Slides)

Triggers when a new comment is added to Google Docs, Sheets, or Slides.

TriggerPolling

ASN Extended Transit To Info API

Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.

ActionInstant

File Created

Triggers when a new file is created in Google Drive.

TriggerPolling

ASN Rank List API

Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.

ActionInstant

File Deleted or Trashed

Triggers when a file is moved to trash or permanently deleted in Drive.

TriggerPolling

BGP Active Prefixes API

Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.

ActionInstant

File Shared (Permissions Added)

Triggers when new sharing permissions are granted to a file or folder. Uses Drive's `changes.list` endpoint with inline `permissions` in the `fields` mask so each change carries the file's current permission set provider-atomically. We diff that against `seen_permission_keys` to identify newly added grants. Drive page tokens are the primary cursor; if Drive rejects a stored token, the trigger raises `PollingTriggerError` without clearing state rather than silently re-baselining and dropping events. Limitation: truly ephemeral permissions (added and revoked between two polls without any other file modification in between) are not detected. Drive Activity API would catch those but requires an additional OAuth scope and a different payload contract.

TriggerPolling

Reverse Geocoding With Timezone API

Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.

ActionInstant

File Updated

Triggers when a file's metadata or content changes in Google Drive.

TriggerPolling

Country by IP Address API

Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.

ActionInstant

Google Drive Changes

Triggers when changes are detected in a Google Drive.

TriggerPolling

Country Info API

Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.

ActionInstant

Connect any two apps with Notis in the middle.

Google Drive and Big data cloud, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.