Every sales and marketing interaction — regardless of where it happens — generates data. Every note written on a salesperson’s computer and every contract or presentation that is uploaded into a CRM system produces valuable signals sales teams use to secure leads and close deals.

As with most SaaS applications, within Salesforce it is your organization’s responsibility to determine whether Salesforce’s default security settings meet your specific security and compliance obligations. Read this online guide, for free, to learn about the problem of data exposure in Salesforce and how to ensure compliance with HIPAA, PCI, and other leading industry standards while storing sensitive data in Salesforce.

By design, Salesforce is an environment where customer PII and other sensitive information must be shared and stored. However, compliance regulations like PCI DSS, HIPAA, GDPR, CCPA, and others limit this storage and usage of customer data to only what’s justifiably required for an organization to carry out its duties. Even then, there are requirements for how this data should be stored – like whether it should be encrypted, for example.

Keeping your sales and security teams in sync on the progress of security questionnaires can be painful. Frustration due to lack of transparency can occur, which tends to add friction to the sales process. This is because answering a security questionnaire and going through security reviews is a team sport, and sales people always want to know the latest status.

At Nightfall, our mission is to discover and secure sensitive data in every cloud application through a cloud-native, accurate, and performant platform. Since 2019, Nightfall has partnered with some of the world’s most innovative organizations to proactively eliminate data security risks across a fleet of SaaS applications via our native integrations for Slack, Atlassian Jira, Confluence, Google Drive, and GitHub.