...
We authenticate to Salesforce.com using one username and one password provided by you when you configure our Salesforce.com integration module.
What data do you retrieve and store from Salesforce.com?
We query the following entities in Salesforce.com:
- Account
- Contact
- Campaign
- Opportunity
We ONLY retrieve the fields that you define as "field mappings" during configuration of our Salesforce.com integration module. From these entities we retrieve the following information:
...
- Account name
- A domain to use for targeting the account. This is derived from an Account "website" field or a Contact "email" field.
- Salesforce Account ID
...
- Authentication: Madison Logic use OAuth2 flow to enable login and get the API access token from clients. This token is stored in AWS DynamoDB with encryption at Rest using AWS KMS.
- Meta Data: Madison Logic has clients choose which SFDC fields they would like to map during the integration process in ActivateABM™. Fields are only selected from SFDC Accounts, Contacts and Opportunities objects. Madison Logic stores additional meta data consisting of client’s predefined set of Opportunity stage names and probability.
- Record Data: Madison Logic stores SFDC AccountId, Name and Domain (this is extracted from Client Email or Account Website field). This data is encrypted at rest using AWS KMS and store in AWS S3.
For each of the following objects, Madison Logic stores the following:
| Object | Data Stored | Storage |
|---|---|---|
| Account | ID Name Domain (from website field) | AWS S3, encrypted at Rest |
| Contact | AccountID Name Domain (from email) | AWS S3, encrypted at Rest |
| Campaign | Name Domain (from Campaign member Email) | AWS S3, encrypted at Rest |
| Opportunity | Opportunity id AccountId Name Domain (from Account Website) Stage name Close date Amount | AWS S3, encrypted at Rest and PostgreSql DB – AWS RDS in a private network. |
Where do you physically store my data?
...
- AWS Service Organization Controls (SOC 1, SOC 2, and SOC 3) Reports. You can request a copy of these reports from AWS Compliance.
- PCI DSS Level 1. For more details on PCI DSS compliant services in AWS, you can read the PCI DSS FAQs.
- ISO 27017. For more details on ISO 27017 compliant services in AWS, you can read the ISO-27017 FAQs.
- ISO 27018. For more details on ISO 27018 compliant services in AWS, you can read the ISO-27018 FAQs.
- ISO 9001. For more details on ISO 9001 compliant services in AWS, you can read the ISO-9001 FAQs.
- In evaluation for FIPS 140-2. For more details, you can view the FIPS 140-2 Implementation Under Test List.
What are the minimum requirements needed for the SFDC admin user that is used to authenticate?
- Organization should have API feature enabled.
- User permissions: API Access (Read-only)
References
Salesforce Developer Documentation
...