How does the API impact security and control for the Data Room owner?

The API operates strictly within the permissions of the user who connected the external application. Access rights are inherited directly from Virtual Vaults and end immediately if those rights are revoked. Data Room admins can choose to disable integrations for their entire Data Room.