Sapling

Connect Sapling to collect hris evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Sapling:

   1. Sign in to Sapling (Kallidus Sapling) as a user with Super Admin permissions.
   2. Go to the Integrations page and open the API Keys tab.
   3. Click Create New Key.
   4. Name the key descriptively (for example Safeguard) and choose whether it expires after 90 days or select Automatically renew the API key when a call is made to that key.
   5. Click Create, then copy the new API key; once you click Save you can no longer view the key.

   Sapling shows the secret only once, so copy it before you leave the page.

   Sapling's public documentation does not cover every step.

   Source: kallidus.zendesk.com, checked 2026-10-07.

   The permissions Safeguard needs: profiles: read.

2. On Compliance › Connectors, open Sapling, click Connect, choose API token and fill in:

   Field	What to enter
   Subdomain	Required. The part before .saplingapp.io in your address.
   API key	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Sapling and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• HRIS connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks