Security & data

Your commercial data
never leaves your org.

Revligent is a managed package that installs into your Salesforce org and runs there. There is no external application, no database of ours holding your data, and nothing to synchronise.

Most quoting tools sit outside your CRM and sync data back and forth. That creates two copies of the truth, a processing agreement with another vendor, and usually a conversation with your data protection officer. Revligent avoids all three by not leaving Salesforce.

Where your data lives

Inside your own org

Every object, record and file created by Revligent is stored in your Salesforce instance, under your existing data residency arrangement with Salesforce.

No synchronisation

There is no nightly export, no middleware, and no copy held elsewhere. Nothing can drift out of step because there is only one copy.

Your security model

Access is governed by your existing Salesforce profiles, permission sets and sharing rules. There is no second access layer to audit or maintain.

An auditable record

Every revenue event is written once and never edited or deleted, so any historical figure can be reconstructed and evidenced.

How the product is built

Platform & architecture

DistributionSalesforce 2GP managed package

Runs inYour Salesforce org — no external hosting

Access controlSalesforce profiles & permission sets

Query enforcementUser-mode SOQL and DML as standard

Audit loggingStructured execution log for every job

Code quality gateStatic analysis blocking on every change

Certifications and reviews

Salesforce ISV PartnerActive

Revligent is published by a registered Salesforce ISV partner.

AppExchange security reviewIn progress

Salesforce reviews every managed package before listing. Our submission covers code, sharing model and data handling.

We publish the honest status of each item rather than a badge wall. If something is in progress, it says so.

Third parties

Revligent connects to two external services, and only if you choose to enable them:

DocuSign — used to send quotes for electronic signature. The connection uses your own DocuSign account and credentials.
Slack — used to deliver approval requests and notifications. The connection uses your own Slack workspace.

Neither is required. With both disabled, quotes are sent by email from Salesforce and approvals happen in Salesforce or by email. No commercial data is sent anywhere else.

Because your data stays inside your Salesforce org, Revsolut GmbH does not process your customer data as part of normal operation. Where a support case requires us to look at your org, that access is granted by you, scoped, and time-limited.

A data processing agreement is available on request — contact@revligent.com.

Reporting a vulnerability

If you believe you have found a security issue, please write to security@revligent.com. We will acknowledge within two working days and keep you updated until it is resolved.

Questions from your security team?

Send them over. We would rather answer a long questionnaire early than discover a blocker at contract stage.

Get in touch