You are here:
Allow Third-Party Access to a Package
If the package you install contains a remote site setting, you must approve access to websites outside of Salesforce. Remote site settings allow the package to transmit data to and from a third-party website.
In these scenarios, you’ll be notified after you click Install on the package installation page. A popup box displays and lists any website that the package communicates with. You can then choose to grant access, or cancel the package installation.
Before using the package, consider contacting the package developer to understand what data is transmitted and how it's used. If you have an internal security contact, ask the contact to review the package so that you understand its impact before use.

