vizrm Security information
measures implemented for data security in the vizrm application and the policies implemented for the maintenance of data security
How we handle your CRM data
The following information from your CRM is always stored in vizrm systems:
Organization CRM IDs (unique identifiers for data points in your CRM system)
Organization names
The following information from your CRM is only stored when not using the manager field setting (learn how to implement the manager field here: https://help.vizrm.com/en/articles/6445699-crm-integration#h_909fe9dae7 )
Person CRM ID
Person Name
Further additional information from your CRM is stored in system logs for error investigation. This data is not used by vizrm unless a customer contacts us for system support in which case our policy requires customers approval and vizrm management approval to analyze the logs.
How we protect your data
With the exception of the above mentioned, vizrm only retrieves data from your CRM and visualizes it in your browser. There are multiple measurements in place to make this process secure:
Authentication with your CRM is done with OAuth 2.0 and under the same permissions / user access rights implemented in your CRM
Encryption of your data in transit is achieved using HTTPS (TLS/SSL)
Authentication toward the vizrm database is enforced with Secure Session Management using signed cookies to access sessions saved on Azure Storage
Data at rest is secured: using mongodb to access database, parameterized queries and contextual escaping.
The vizrm database and servers are hosted on Microsoft Azure (more information on Microsoft security: https://servicetrust.microsoft.com/viewpage/ISOIEC)
How we monitor and improve data security
vizrm employs rate limiters and protection provided by Azure to monitor and limit data transfers. Further we use the API request limits provided by your CRM.