Security

Your CRM data never leaves Salesforce

Heeet is a Salesforce-native managed package that has passed the Salesforce Security Review. Attribution and CRM enrichment run where your data already lives, so there's nothing to replicate, nothing to export, and far less for your security team to sign off on.

Book a demo

Built on, and Reviewed by Salesforce

check
check
check
SECURITY BY ARCHITECTURE

Attribution without exposing your CRM data, not even to Heeet

Most attribution tools export data from your CRM data into their own databases. This means validating a new vendor for your team to audit, and another data processing agreement to sign. Heeet was built the other way around. Everything is brought into Salesforce where only you have access to your data.

Other Marketing and Attribution Tools

Requires direct access to your CRM data

Replicates that data into third-party databases

Runs natively inside Salesforce

CRM-Native Attribution

Runs natively inside Salesforce

Keeps every CRM record in Salesforce

Calculates attribution inside Salesforce, where the data already sits

SECURITY BY ARCHITECTURE

A short list of things that never
happen to your data

How the data flows: cookieless site tracking generates attribution metadata, that metadata is processed and written into Salesforce, and you read it in native Salesforce reports. No CRM database replication. No external CRM storage. No customer export.

Heeet does not:

Replicate your CRM into an external database

Store Leads, Contacts, Accounts or Opportunities outside Salesforce

Export your customer records

Heeet Does

Enrich your CRM records natively, in Salesforce

Power attribution and revenue reporting on Salesforce's own reporting layer

Make attribution metadata available inside Salesforce

How the operational side is handled

check

Access management

Principle of least privilege. MFA enforced. Access revoked at offboarding and on role changes.

Access management

Principle of least privilege. MFA enforced. Access revoked at offboarding and on role changes.

check

Endpoint security

Device encryption, antivirus and EDR protection, regular security updates and patching.

Endpoint security

Device encryption, antivirus and EDR protection, regular security updates and patching.

check

Engineering & deployment

Controlled release process, restricted access to production systems, deployment through the Salesforce managed package.

Engineering & deployment

Controlled release process, restricted access to production systems, deployment through the Salesforce managed package.

check

Incident management

Defined escalation process, investigation and remediation procedures, customer communication where applicable.

Incident management

Defined escalation process, investigation and remediation procedures, customer communication where applicable.

check

Data handling

Runs as a native Salesforce package. Attribution data stays inside the org and inherits its existing Salesforce security controls. No external data warehouse or third-party storage.

Data handling

Runs as a native Salesforce package. Attribution data stays inside the org and inherits its existing Salesforce security controls. No external data warehouse or third-party storage.

check

Vulnerability management

Dependency and code scanning, periodic security review, prioritized remediation of identified issues.

Vulnerability management

Dependency and code scanning, periodic security review, prioritized remediation of identified issues.

You don't have to vet a
second infrastructure stack

Heeet operates within Salesforce, using the same enterprise infrastructure and security your org already uses. Heeet owns the attribution logic. You keep control of who sees what.

Security and infrastructure

Control area

Hosting & infrastructure

Salesforce

Encryption, at rest and in transit

Salesforce

Identity & access management

Salesforce

Business continuity & disaster recovery

Salesforce

Perimeter security (WAF, firewall, SOC)

Salesforce

CRM permissions & user access

You, through your existing Salesforce setup

Attribution logic & managed package

Salesforce

Implementing Heeet is quick and straightforward. The process varies slightly depending on your CRM, but the core steps remain the same: install or connect Heeet, link your paid platforms, configure your attribution model, and add the Heeet Javascript to your website

No. Heeet does not have any access to your Salesforce data.

Heeet does not store any personal data.

Yes, Heeet is fully GDPR compliant since we do not track, store or assign any unique ID to your online prospects.

The typical implementation process takes two weeks, but can be completed in under 90 minutes in some instances

Don’t add another vendor. Get attribution that runs inside Salesforce.

Bring your security or RevOps team, we'll walk through the architecture and answer the review questions regarding your unique Salesforce setup.

Talk to us