Who this policy covers
Smart-Tables, Smart-Mass-Update, Smart-Activity-Manager, and DEDUP Manager.
Compliance, security & confidence
Salesforce hosting
ZaapIT's apps are Force.com hosted applications, meaning they run on Salesforce's servers inside the same datacenter. Salesforce manages the data center, including network security, app login, upgrades, change management, system operations, restricted physical access, disaster recovery, availability, processing, and physical security.
Where the code runs
ZaapIT's code is compiled, stored, and runs on Salesforce's servers and on the customer's local machine on the client side, using JavaScript, CSS, and HTML.
Native permissions
ZaapIT's apps respect Salesforce's native object and field data access policies for view, create, update, delete, and sharing permissions, as well as Salesforce's sharing mechanism.
Security review
ZaapIT performs a security review at least once a year and fixes known or reported security issues in a timely manner.
App and license management
ZaapIT manages its apps and licenses using a self-managed Salesforce license instance.
Support access
ZaapIT does not have direct access to your Salesforce organization or your data. You can grant access to ZaapIT support through Salesforce Setup > Grant Access > ZaapIT Support, or My Settings > Grant Access > ZaapIT Support.
Standards and certifications
ZaapIT states that its apps are 100% native Force.com apps and comply with ISO 27001. The original policy says the relevant Salesforce Force.com platform certifications apply to 100% Force.com apps and attached Force.com code.
Additional compliance statements
The original policy states “SAS-70 type II compliant and GDPR compliant.”
Government Cloud
The original policy states “Salesforce Government Cloud + Salesforce Government Cloud Plus certified.” More details from Salesforce.
Data & privacy
Usage statistics
ZaapIT's apps, services, and website collect and store app usage statistics on Salesforce servers and in Google Cloud through Google Analytics.
Data export controls
By default, the apps allow end users to export data to other apps or send data to another app, such as Excel or Outlook. End users and admins can remove unwanted buttons or set permissions to restrict those options.
Sales information
ZaapIT's sales team may collect and store publicly available data or data provided during email communication with a prospect or customer. This data is stored in ZaapIT's dedicated Salesforce organizations and servers and is used during sales and renewal processes.