Salesforce

Publisher Attestation: The information on this page is based on a self-assessment report provided by the app developer on the security, compliance, and data handling practices followed by this app. Microsoft makes no guarantees regarding the accuracy of the information.

Last updated by the developer on: August 24, 2021

General information

Information provided by salesforce.com to Microsoft:

Information Response
App name Salesforce
ID WA104379334
Office 365 clients supported Outlook 2013 or later on Windows, Outlook 2016 or later on Mac, Outlook on the web
Partner company name salesforce.com
URL of partner website https://www.salesforce.com
URL of Privacy Policy https://www.salesforce.com/company/privacy/
URL of Terms of Use https://www.salesforce.com/content/dam/web/en_us/www/docume...

Feedback

Questions or updates to any of the information you see here? Contact us!

How the app handles data

This information has been provided by salesforce.com about how this app collects and stores organizational data and the control that your organization will have over the data the app collects.

Data access using Microsoft Graph

List any Microsoft Graph permissions this app requires.

This application does not use Microsoft Graph.

Data access using other Microsoft APIs

Apps and add-ins built on Microsoft 365 may use additional Microsoft APIs other than Microsoft Graph to collect or process organizational identifiable information (OII). List any Microsoft APIs other than Microsoft Graph this app uses.

API Is OII collected? What OII is Collected? Justification for collecting OII? Is OII stored? Justification for storing OII?
JavaScript API for Office Yes The add-in uses functions from Office.js and EWS to copy content and attachments about an email an Outlook user has decided to log into Salesforce. Similar capabilities are used on the calendar side, to log appointments into Salesforce. The add-in uses functions from Office.js and EWS to copy content and attachments about an email an Outlook user has decided to log into Salesforce. Similar capabilities are used on the calendar side, to log appointments into Salesforce. The add-in uses functions like getUserIdentityTokenAsync to get the current Outlook user identity, GetItem (.js and EWS) to get and set AdditionalProperties and the content of the current email message when saving to Salesforce records, GetAttachment (EWS) to retrieve the attachments from Exchange and add to the paired Salesforce email, UpdateItem (.js), GetFolder (.js) to get the drafts folder, CreateItem (.js), which is used to create a draft message. The add-in uses functions like getUserIdentityTokenAsync to get the current Outlook user identity, GetItem (.js and EWS) to get and set AdditionalProperties and the content of the current email message when saving to Salesforce records, GetAttachment (EWS) to retrieve the attachments from Exchange and add to the paired Salesforce email, UpdateItem (.js), GetFolder (.js) to get the drafts folder, CreateItem (.js), which is used to create a draft message.
Exchange Web Services (EWS) Yes The add-in uses functions from Office.js and EWS to copy content and attachments about an email an Outlook user has decided to log into Salesforce. Similar capabilities are used on the calendar side, to log appointments into Salesforce. The add-in uses functions from Office.js and EWS to copy content and attachments about an email an Outlook user has decided to log into Salesforce. Similar capabilities are used on the calendar side, to log appointments into Salesforce. The add-in uses functions like getUserIdentityTokenAsync to get the current Outlook user identity, GetItem (.js and EWS) to get and set AdditionalProperties and the content of the current email message when saving to Salesforce records, GetAttachment (EWS) to retrieve the attachments from Exchange and add to the paired Salesforce email, UpdateItem (.js), GetFolder (.js) to get the drafts folder, CreateItem (.js), which is used to create a draft message. The add-in uses functions like getUserIdentityTokenAsync to get the current Outlook user identity, GetItem (.js and EWS) to get and set AdditionalProperties and the content of the current email message when saving to Salesforce records, GetAttachment (EWS) to retrieve the attachments from Exchange and add to the paired Salesforce email, UpdateItem (.js), GetFolder (.js) to get the drafts folder, CreateItem (.js), which is used to create a draft message.

Non-Microsoft services used

If the app transfers or shares organizational data with non-Microsoft service, list the non-Microsoft service the app uses, what data is transferred, and include a justification for why the app needs to transfer this information.

Non-Microsoft services are not used.

Telemetry data

Does any organizational identifiable information (OII) or end-user identifiable information (EUII) appear in this application's telemetry or logs? If yes, describe what data is stored and what are the retention and removal policies?

No

Organizational controls for data stored by partner

Describe how organization's administrators can control their information in partner systems? e.g. deletion, retention, auditing, archiving, end-user policy, etc.

Salesforce storage is described in the Security Guide at https://resources.docs.salesforce.com/222/latest/en-us/sfdc/pdf/salesforce_security_impl_guide.pdf

Human review of organizational information

Are humans involved in reviewing or analyzing any organizational identifiable information (OII) data that is collected or stored by this app?

No

Feedback

Questions or updates to any of the information you see here? Contact us!

Identity information

This information has been provided by salesforce.com about how this app handles authentication, authorization, application registration best practices, and other Identity criteria.

Information Response
Do you integrate with Microsoft Identify Platform (Azure AD)? No

Feedback

Questions or updates to any of the information you see here? Contact us!