Security Overview

SECURITY.

KeelCadence provides self-serve Salesforce diagnostic tools and org health reports. This page explains how the tools work, what they access, and what they do not access. For data collection and privacy details, see the Privacy Policy.

Why a bookmarklet instead of OAuth?

KeelCadence uses a browser-session-based connection so admins can run a diagnostic without installing a package, creating a Connected App, granting a long-lived OAuth refresh token, or giving KeelCadence persistent Salesforce access. The session is used only to read the metadata and aggregate signals needed for the diagnostic workbook. It does not create, update, or delete Salesforce records.

KeelCadence is not a Salesforce data export tool.

KeelCadence is designed for metadata-based Salesforce diagnostics. The tools review configuration, metadata, permission structures, automation metadata, and aggregate counts where needed for diagnostic scoring.

KeelCadence does not export customer records, files, attachments, emails, Chatter content, or transactional data. Reports are built to show diagnostic evidence, review candidates, scoring, recommendations, and remediation tracking without exposing individual Salesforce record values.

What KeelCadence reviews and what it does not export

What KeelCadence reviews and what it does not export
Data TypeUsed by KeelCadence?Exported in Reports?Notes
Salesforce metadataYesYes, where relevantUsed for diagnostic structure, fields, objects, automation, and configuration review.
Object and field definitionsYesYesUsed to show schema structure, field labels, field types, and review context.
Profiles and permission setsYesYesUsed for permission and FLS review.
Object permissions and field-level securityYesYesUsed to identify access patterns and review candidates.
Automation metadataYesYesUsed for Flow, Apex, validation rule, approval process, and readiness review where available.
Aggregate countsYes, where neededYes, as summary metricsUsed for fill rates, usage scoring, object counts, and diagnostic scoring. Individual record values are not exported.
Individual Salesforce record valuesNoNoKeelCadence does not export row-level customer record data.
Salesforce Files and AttachmentsNoNoKeelCadence does not download files, attachments, documents, or content bodies.
Emails and Chatter contentNoNoKeelCadence does not export emails, Chatter posts, comments, or message content.
Transactional customer dataNoNoKeelCadence does not export underlying transactional business data.
Salesforce writesNoNoKeelCadence diagnostics do not create, update, or delete Salesforce data or metadata.
OAuth refresh tokensNoNoKeelCadence does not store persistent Salesforce OAuth refresh tokens.
Long-lived Salesforce access tokensNoNoKeelCadence does not store long-lived Salesforce access tokens.

What the workbook contains

KeelCadence workbooks contain diagnostic findings, supporting metadata evidence, review priority, confidence labels where applicable, recommendations, and remediation tracking fields. They are designed to help teams review Salesforce configuration without exposing individual customer record values.

What the workbook does not contain

  • Customer record exports
  • Salesforce Files or Attachments
  • Chatter content
  • Email content
  • Full data backups
  • Record-level transactional datasets
  • End-to-end dependency tracing
  • Automated remediation or Salesforce writes

Shared responsibility

KeelCadence reduces exposure by focusing on metadata and aggregate diagnostic signals, but customers remain responsible for who runs diagnostics, who receives downloaded reports, how reports are stored, and how findings are reviewed before changes are made in Salesforce.

What KeelCadence Does

  • Provides self-serve Salesforce diagnostic tools and org health reports.
  • Runs read-only metadata and aggregate configuration checks inside your active Salesforce session.
  • Generates on-screen findings and optional downloadable full reports.
  • Surfaces permissions, field-level security, object structure, field usage, and configuration risk findings.
  • Reports focus on metadata, configuration findings, aggregate counts, and prioritized recommendations.

What KeelCadence Does Not Do

  • No managed package install required.
  • No Connected App setup required.
  • No OAuth refresh tokens stored. Session IDs are used only during the active audit and discarded after it completes.
  • KeelCadence reviews Salesforce metadata and aggregate configuration signals. It does not export customer records, files, attachments, emails, Chatter content, or transactional data.
  • No individual Salesforce record values are exported. Some audits use aggregate count queries to calculate field population and usage metrics.
  • Audits are read-only and do not modify your org.

Session Model

KeelCadence tools are designed for session-based, read-only diagnostics. Access is tied to your active Salesforce browser session and expires when that session ends.

  • Session-based access expires when your Salesforce session ends.
  • KeelCadence may temporarily hold a Salesforce Session ID while an audit is running to complete read-only diagnostic requests.
  • Session IDs are not stored in the application database, logs, reports, or XLSX files.
  • No OAuth refresh tokens. No long-lived Salesforce access.
  • Read-only metadata and aggregate diagnostics only.

Report Retention & Deletion

Audit reports and related metadata are retained for up to 90 days, then deleted by automated purge jobs. Deletion removes report files and related database records. To request earlier deletion, email support@keelcadence.com with your Report ID.

Frequently Asked Questions

Is KeelCadence a Salesforce data export tool?

No. KeelCadence is a Salesforce metadata diagnostics tool. It reviews configuration, metadata, permission structures, automation metadata, and aggregate counts where needed for scoring. It does not export customer records, files, attachments, emails, Chatter content, or transactional data.

Does KeelCadence export individual Salesforce record values?

No. Field usage and scoring are based on aggregate counts and metadata signals where needed. Individual record values are not exported into KeelCadence workbooks.

Does KeelCadence download Salesforce Files or Attachments?

No. KeelCadence does not download Salesforce Files, Attachments, Documents, ContentVersion bodies, emails, Chatter content, or customer file data.

Does KeelCadence make changes in Salesforce?

No. KeelCadence diagnostics are read-only. The tools do not create, update, delete, or modify Salesforce records, metadata, permissions, fields, automations, or layouts.

Are KeelCadence reports a substitute for admin review?

No. KeelCadence reports are first-pass diagnostic workbooks. They provide findings, evidence, review priority, confidence labels where applicable, and recommendations. Admins or consultants should validate findings before making Salesforce changes.

Does KeelCadence store persistent Salesforce access?

No. KeelCadence runs read-only diagnostics using your active Salesforce session. Session IDs are discarded after the audit completes or fails. No OAuth refresh tokens are stored and no long-lived Salesforce access is retained.

Does KeelCadence require a package install or Connected App?

No. KeelCadence does not require a managed package install or Connected App setup.

Security Contact

For security questions, report deletion requests, or product support, contact:

support@keelcadence.com

KeelCadence uses session cookies and Google Analytics 4 for site usage insights. GA4 does not receive Salesforce credentials, Org IDs, Report IDs, or payment data. You can opt out for this browser.