Set up the DROP integration
This integration requires Astralis Cloud or Astralis Enterprise. For more information, talk to our solutions team. (opens in a new tab)
This guide walks through creating and configuring the California DROP erasure integration. DROP only mints erasure privacy requests, and a single integration is supported per Astralis deployment.
Prerequisites
Before you begin, collect the following:
- DROP API key — issued by the California Privacy Protection Agency when you register as a data broker (opens in a new tab) on the DROP platform. Sandbox keys are issued separately from production keys and are requested from the CPPA through that same registration; a sandbox key only works against the Sandbox environment.
- A Snowflake integration — the DROP match index is built inside your Snowflake warehouse, currently the only supported storage engine for the index, so a working Snowflake integration is required before DROP cycles can run. See Match index & backfill.
- An erasure policy (optional) — the request policy used when minting erasure privacy requests for matched consumers. If omitted, Astralis records matches in the suppression ledger without minting erasure requests.
Required permissions
DROP administration is guarded by dedicated scopes. The built-in Owner and Contributor roles include them; custom roles need:
| Scope | Grants |
|---|---|
drop_connector:create | Create the DROP integration |
drop_connector:read | View the integration, cycles, backfill status, and cycle files |
drop_connector:update | Update configuration; trigger cycles, sweeps, backfills, and replays |
drop_audit:read | Read the DROP audit log |
drop_suppression:read | Read the suppression feed API |
Create the integration
- Navigate to Integrations and click Add integration.
- Select California DROP.
- Provide the connection details:
- API key (required) — your DROP API key. Stored encrypted.
- Environment (optional) —
Production(default) orSandbox. - List types (optional) — the DROP list types to process (
Email,Phone,MAID,CTVID,NDZ,NameVIN). Leave empty to process every list DROP delivers. - Policy (optional) — the erasure policy for minted erasure requests. Leave empty to record suppression decisions in the ledger without creating erasure requests.
- Click Save, then use Test connection to confirm Astralis can authenticate against the DROP API.
Configure and backfill the match index
After the connection test succeeds:
- Open the Mapping tab.
- Select the Snowflake integration and Target schema where Astralis should create the match index.
- Enter the Gather query that resolves your consumer identifiers. See Match index & backfill for the query contract.
- Click Validate & save and resolve any reported validation errors.
- Click Run backfill to build the index.
- Confirm Backfill status shows a successful run. Scheduled DROP cycles can now begin.
What happens next
Once the integration is active and the first backfill has completed, Astralis runs automatically every day (all times Pacific):
| Time (PT) | Job |
|---|---|
| 01:00 | Incremental backfill — refresh the match index with newly resolved identifiers |
| 03:15 | Suppression cycle — download work items, match, mint, and report |
| 04:15 | Completion sweep — report erasures that have finished and finalize cycles |
Monitor runs from the DROP cycles tab on the integration page, and see Suppression cycles for the full lifecycle.