Service status
Live status, checked around the clock.
We check our own services and every partner platform our integrations connect to. Partner services are measured from Beaufort 12's infrastructure, so you see what our integrations experience. Each provider's own status page is linked alongside.
Beaufort 12 services
Beaufort 12 API
Billing
Support chat
Partner platforms
Mailchimp
Campaign Monitor
Emma
Eventbrite
Dropbox
Each bar is one day, oldest on the left. Green is 99.9% or more, pale green 99% or more, amber 95% or more, red below 95%, grey no data.
Incident history
The last 90 days.
Every period in which a service was degraded, unavailable or under maintenance, including incidents reported by partner platforms. Each entry links to the provider's own notice where there is one.
Open now
Resolved
Security
Native to Salesforce. Nothing in between.
Most integrations run on the vendor's own servers and log in to your Salesforce org with a token they keep. Ours run inside Salesforce itself, so there is no middleware, no copy of your data, and no token of yours on our systems.
A typical middleware integration
- The vendor stores a token that can log in to your Salesforce org.
- Your records pass through, and are often stored on, the vendor's servers.
- Another company's infrastructure for you to assess and trust.
Beaufort 12
- Runs inside your org. Nothing outside Salesforce logs in to it.
- Records travel directly from Salesforce to the partner platform's API.
- We never store your Salesforce or partner tokens. They stay in your org, in protected settings only the package can read.
Reviewed by Salesforce
Our packages pass Salesforce's AppExchange security review before listing. The review combines code analysis with security testing by Salesforce's product security team.
Your permissions apply
The packages follow your org's sharing rules, field-level security and object permissions. You decide who uses each integration through dedicated permission sets.
Encrypted in transit
Every connection between Salesforce, partner platforms and Beaufort 12 services is encrypted with TLS. Salesforce requires TLS 1.2 or higher for every callout.
Minimal licensing data
Our licensing service receives usage counts, such as the number of connected users, so that we bill accurately. It does not receive record data, file contents or personal details.
Secure payments
Card payments are processed by Stripe, a PCI DSS Level 1 certified payment provider. Beaufort 12 does not store card details.
Continuously monitored
We monitor our hosted services around the clock and check daily for security updates and dependency advisories. Our support team is alerted as soon as a service needs attention.
Release management
Every release, checked and staged.
New versions reach customer orgs in stages, not all at once. Each release is security-checked before it ships, announced in our release notes, and reaches sandboxes before most production orgs. When a new version resolves an issue for a customer, we can upgrade that org on demand.
Before release
Checked on every change
Every change is peer reviewed, tested and security scanned: Salesforce Code Analyzer on every build, Checkmarx on each release candidate, and daily checks of third-party dependencies. A build with serious findings cannot ship.
Release day
Release notes published
New features and improvements are listed in the product's release notes.
First Sunday after
Early adopters
Customers who have chosen to be early adopters receive the new version first.
About a week later
Sandboxes
Sandbox orgs are upgraded, so you can test before your production org changes.
About a month later
All customers
The remaining production orgs are upgraded.
Prefer to choose your own timing?
Join our early adopters to get new versions first, or ask us to exclude your org from scheduled upgrades so you install each version when your own change process allows.
Release notes
See what changed in each version, product by product.
Compliance
Assurance you can take to your review board.
Whether you are onboarding a new vendor or renewing an existing one, we provide the documentation your security, privacy and procurement teams need.
AppExchange security review
Each of our listed packages has passed Salesforce's security review and is re-reviewed as Salesforce requires.
- Mailchimp for Salesforce
- Campaign Monitor for Salesforce
- Emma for Salesforce
- Eventbrite for Salesforce
- Dropbox for Salesforce
Data Processing Agreement
Our DPA sets out our obligations as a processor. It covers how we protect personal data, how we engage sub-processors, and how and when we notify you of a personal data breach.
GDPR and data protection
Where we process personal data on your behalf, we act as a processor and follow your documented instructions. Most integration data never leaves your Salesforce org and the partner platforms you connect.
Sub-processors
Processing locations and transfer safeguards are set out in our DPA. The partner platforms you connect, such as Mailchimp or Dropbox, are your own service providers. Data reaches them on your instruction, under your agreement with them.
Supporting your vendor review
Our security pack is free for customers and prospective customers. It includes:
- Our Data Processing Agreement
- Our completed standard security questionnaire
- Details of each package's AppExchange security review
- A description of the data each integration stores and where
Custom security review
US$950
If your organisation needs its own questionnaire completed, we answer it in full, including one round of follow-up questions, within 10 business days.
Further follow-up rounds are US$350 each. Security calls, questionnaires of more than 50 questions, and contract or DPA negotiation are quoted at US$200 an hour. Fees are added to your Beaufort 12 invoice: the next one if you already subscribe, or your first when you sign up.
We confirm the scope and fee before any work begins. Detailed security documentation is shared directly with customers and is never published.
Privacy
Your data stays where you put it.
Our integrations connect your systems rather than copying data into ours. Your existing residency and retention arrangements continue to apply.
Where your data lives
Integration records stay in your Salesforce org. Marketing, event and file data stays with the partner platform you connect. Beaufort 12's hosted services run on AWS in Ireland.
Responsible disclosure
If you believe you have found a security vulnerability in a Beaufort 12 product or service, please tell us privately. We will acknowledge your report and keep you informed. Please allow us reasonable time to resolve the issue before disclosing it.
Policies
Our privacy policy explains how we collect and use personal information. Our terms set out how our products may be used.
VENDOR REVIEWS
Need something for your security review?
Our security pack, with our DPA and completed standard questionnaire, is free. If you need your own questionnaire answered, our custom security review covers it for a one-off fee.
Request the security pack