Internet Creations' Salesforce Apps are 100% native. By virtue of being listed on the AppExchange, our applications adhere to the security standards set forth by Salesforce. Our applications process data inside of Salesforce itself, never leaving your designated Salesforce instance. We do not transmit or store any of your data on any system external to Salesforce. If you have any concerns regarding the security of your Salesforce org, your internal team can coordinate directly with Salesforce to conduct penetration testing on your organization's production environment.
Frequently Asked Questions
Do you maintain or house customer data on your systems?
No. Customer data remains in the Salesforce environment and is not stored in our internal systems, except when transacting business with Internet Creations for sales, customer service, or similar. You can find more information about Salesforce security and compliance at https://trust.salesforce.com. Questions regarding the security of your data should be addressed with your Salesforce account executive. If you have questions about Salesforce and the General Data Protection Regulation (GDPR), please refer to Salesforce's documentation regarding the GDPR.
Do you maintain or house customer data outside of the United States?
This is dependent on the instance in which your Salesforce org resides. Internet Creations can not influence this.
Do you encrypt any customer data, either at rest or in transit?
This is dependent on your Salesforce configuration because all data resides in Salesforce. Internet Creations can not influence this. Our applications support Salesforce's Shield Platform Encryption, with some limitations as noted in this linked document.
Do you have remote access to customer data for troubleshooting purposes?
We only have access if the customer deliberately grants us access. We use the standard Salesforce method for granting login access, outlined here: https://help.salesforce.com/articleView?id=granting_login_access.htm&type=5
Do you provide customers with separate environments for production and test processes?
Our applications can be installed in Salesforce production, sandbox and developer orgs. For the Salesforce production environment, applications are installed through the Salesforce AppExchange, starting with a 14-day free trial and subsequently purchased through your Internet Creations Account Executive. For the Salesforce sandbox environment, applications are installed through the Salesforce AppExchange and do not require a paid license. For the Salesforce developer environments, applications are installed through the Salesforce AppExchange but require manual provisioning by Internet Creations. However, we do not provide the testing environments themselves as they are provided by Salesforce; whether or not a Salesforce customer has access to sandbox environments will depend on the contract between the customer and Salesforce.
Are upgrades available to test in sandbox environments prior to being pushed to production?
The latest version of all of our products can be installed or updated in a sandbox or production environment at any time. See this Knowledge Article for more information about upgrading an AppExchange app. Several times a year, Internet Creations will schedule a push upgrade to existing customers with current support entitlements. Typically, we notify customers 2-3 weeks in advance of pushing the update to sandbox environments, and then another 2-3 weeks after that before pushing the update to production environments. If you wish to be excluded from push updates to your production org, please contact Internet Creations' support.
Do you conduct background verifications for all all employment candidates, contractors and third parties, pursuant to local laws, regulations, ethics and contractual constraints?
Are requirements for non-disclosure or confidentiality agreements for the protection of data and operational details identified, documented and reviewed at planned intervals?