An enterprise computing system comprising: one or more processors; and one or more non-transitory computer-readable media including instructions that, in response to being executed by the one or more processors, cause the enterprise computing system to perform operations comprising: receiving an activity notification from a cloud service that stores data on behalf of an enterprise, the activity notification specifying a file name and indicating an activity performed by the cloud service with respect to a file that corresponds to the file name; verifying the activity notification; queueing the activity notification in the form of a job to be retrieved in response to verifying the activity notification; downloading the file from the cloud service using the file name in response to the activity notification being queued; analyzing the file against one or more data loss prevention rules; selecting a particular action response with respect to the file based on the file satisfying a particular condition of the one or more data loss prevention rules, the particular action response corresponding to the one or more data loss prevention rules that corresponds to the satisfied condition; and communicating a notification response to the cloud service as a response to the activity notification, the notification response including the action response and directing the cloud service to perform an action on the file stored by the cloud service according to the one or more data loss prevention rules, wherein the action includes one or more actions selected from a group of actions consisting of: deleting the file from the cloud service, and notifying a user of improper activity related to the file. one or more processors; and one or more non-transitory computer-readable media including instructions that, in response to being executed by the one or more processors, cause the enterprise computing system to perform operations comprising: receiving an activity notification from a cloud service that stores data on behalf of an enterprise, the activity notification specifying a file name and indicating an activity performed by the cloud service with respect to a file that corresponds to the file name; verifying the activity notification; queueing the activity notification in the form of a job to be retrieved in response to verifying the activity notification; downloading the file from the cloud service using the file name in response to the activity notification being queued; analyzing the file against one or more data loss prevention rules; selecting a particular action response with respect to the file based on the file satisfying a particular condition of the one or more data loss prevention rules, the particular action response corresponding to the one or more data loss prevention rules that corresponds to the satisfied condition; and communicating a notification response to the cloud service as a response to the activity notification, the notification response including the action response and directing the cloud service to perform an action on the file stored by the cloud service according to the one or more data loss prevention rules, wherein the action includes one or more actions selected from a group of actions consisting of: deleting the file from the cloud service, and notifying a user of improper activity related to the file. receiving an activity notification from a cloud service that stores data on behalf of an enterprise, the activity notification specifying a file name and indicating an activity performed by the cloud service with respect to a file that corresponds to the file name; verifying the activity notification; queueing the activity notification in the form of a job to be retrieved in response to verifying the activity notification; downloading the file from the cloud service using the file name in response to the activity notification being queued; analyzing the file against one or more data loss prevention rules; selecting a particular action response with respect to the file based on the file satisfying a particular condition of the one or more data loss prevention rules, the particular action response corresponding to the one or more data loss prevention rules that corresponds to the satisfied condition; and communicating a notification response to the cloud service as a response to the activity notification, the notification response including the action response and directing the cloud service to perform an action on the file stored by the cloud service according to the one or more data loss prevention rules, wherein the action includes one or more actions selected from a group of actions consisting of: deleting the file from the cloud service, and notifying a user of improper activity related to the file.