In April 2016, the General Data Protection Regulation (GDPR) — a joint proposal by the European Commission, European Parliament, and the Council of the EU which provides individuals with even greater control over the collection and use of their personal data- was adopted by the European Union.
Campaign Monitor for Salesforce does not store any customer information (given it’s primarily role is to sync data between the two systems). Customer data is stored in Salesforce and in Campaign Monitor. Below are two links on GDPR compliance for Salesforce and Campaign Monitor.
The Campaign Monitor for Salesforce application never independently calls into your Salesforce environment. This means that we don't use up inbound API calls (typically 15,000 / 24 hours) or access your customer data. The only calls that are made back into the Salesforce environment are to obtain metadata in order to support list view imports and page layout configuration. Both of these actions are driven in real-time by your Salesforce users (i.e. we don't store any of your Salesforce connection details or make calls into your Salesforce environment independently of a direct request coming from your Salesforce environment).
No personally identifiable information (PII) is sent to Campaign Monitor without your permission or action. You can choose not to send any custom data to Campaign Monitor or even any subscribers. Any PII is viewable within the Campaign Monitor application, under subscriber custom fields. There are no other hidden fields which contain PII. More details on what is sent can be seen by viewing the technical Campaign Monitor API documentation api.campaignmonitor.com (which is used by Campaign Monitor for Salesforce).
All data flowing between systems is SSL encrypted.
We are not in a position to disclose what metadata we extract due to commercial confidence, other than to say that no user information is retrieved. You can choose not to even allow us access to that metadata if you choose not to use the import wizard with list views or bulk import from a lead or contact from a list view. Please note that the type of metadata we extract may change as Salesforce and our application evolve.
All data that is held by our application and is stored within your Salesforce environment can be found in objects starting with the namespace wbsendit. To reiterate, we don't connect into Salesforce, all connections are outward bound. This just means Campaign Monitor cannot call back into Salesforce and query your data.