Your Salesforce Data Stays Yours

Every Promise ROI app is designed around these principles. App-specific details, including exactly what data each app uses, are published with each app's AppExchange listing.

• Data minimization: our apps access only the data they need to do their job.
• Your org, your data: we design our apps to keep your data inside Salesforce wherever possible.
• Transparency: before you install, we tell you what an app accesses and why.
• Clean removal: uninstalling an app removes the data it created.
• No selling or sharing: we never sell customer data or use it for anything other than delivering the product.

All app permissions are granted through permission sets, so your admin decides who gets access. Admins can review and revoke access at any time. Promise ROI staff never access customer orgs without explicit, time-limited permission from the customer, for example via Salesforce's Grant Login Access.

• Code follows Salesforce secure coding guidelines and OWASP Top 10 principles
• Automated scanning with Salesforce Code Analyzer on every release
• CRUD and field-level security enforced in code
• No hard-coded credentials; secrets stored in Salesforce Named Credentials or protected settings
• Peer review before release
• Dependencies reviewed and kept up to date

All Promise ROI apps listed on AppExchange go through Salesforce's AppExchange Security Review, which includes code analysis and penetration testing by Salesforce's product security team.

If we become aware of a security incident affecting customer data, we will notify affected customers within [X] hours, share what happened and what we are doing about it, and follow up with a written summary.

We collect and use only what is needed to provide our apps and services. Read the full details in our Privacy Policy ([URL]).

Subprocessors

• [LIST or "We use no subprocessors that handle customer Salesforce data."]