You are here:
Data Security
Industries Order Management Plus approaches security from two perspectives: data at rest and data in motion.
Data at Rest
Data at rest refers to inactive data physically stored on a device or network, such as a database.
-
Order Management Plus stores data in a database that has encryption enabled by default. The data is stored in regions that ensure that all country-specific data laws can be adhered to. This is particularly important for EU GDPR, which has strict rules about privacy and the physical location of data.
-
Customers can use the Field Encryption feature to encrypt specific fields that they deem sensitive. This adds another layer of encryption to further secure sensitive data.
Data in Motion
Data in motion can occur over the public internet or private networks. In either case, Vlocity Order Management Plus outbound communication uses secure HTTPS/TLS 1.2.
-
Salesforce to OM Plus and OM Plus to Salesforce Communication:
-
Data communications between Salesforce and AWS uses Secure Sockets Layer (SSL) certificates to encrypt data between platforms. Servers on both sides confirm their identity through signed certificate authority (CA) certificates.
-
Salesforce to AWS RESTful API communications require Single Sign On (SSO).
-
AWS to Salesforce RESTful API communications treat AWS as a Salesforce client. Salesforce client requests use an OAUTH2.0 bearer token, the industry standard protocol for authorization.
-
-
Downstream System Communication: Once a commercial order is decomposed into technical products, Order Management fulfills the order by communicating with several downstream systems over a secure encrypted channel.
