Salesforce API Security

Own leverages the ​Salesforce API​ and ​OAuth 2.0​​ for data security. Access controls for the organization's data are owned and managed by the organization's Salesforce administrator.

• Data is transferred by a ​TLS v1.2​​ encrypted connection.
• Access to organization data is secured by ​Access​ and ​Refresh​​ tokens.
• The Access and Refresh tokens are stored and encrypted in Own's private subnet.
• Own can access fields as necessary for services to function.

For additional control measures, ask a Salesforce Admin team to enable the ​Login IP Allowlist​ feature. This can be used with the ​Own Region Locations and IP Addresses for Allowlisting​​ article to further limit access to organization data.