# Third-party macros

### Rule

Use only vetted, approved marketplace apps and third‑party macros. Ensure configuration aligns with least‑privilege and data residency requirements.

### Why it matters

Manages app sprawl and potential security gaps. Third‑party components can introduce vulnerabilities, untracked data flows, or operational risk.

![image-20260519-061552.png](https://help.gocapable.com/images/5ebeaeb1-76ad-4d3c-b62b-7e4ad199f6e8.webp)