Trust & security
Security you can build a business on
We treat your Salesforce data like it’s our own — because your trust is the product.
Trust & security
Your data, handled with care
Security isn’t a feature — it’s the foundation.
Encrypted at rest
Your Salesforce tokens are encrypted with AES-256 before they ever touch our database.
OAuth, never passwords
We connect through Salesforce’s official OAuth flow. We never see or store your credentials.
SOC 2 on the roadmap
We follow least-privilege access and are pursuing SOC 2 Type II as we grow.
Our security practices
Encryption everywhere
Salesforce tokens are encrypted with AES-256-GCM at rest. All traffic is served over TLS.
No data stored
mindZolt runs read-only queries and deploys only the changes you approve — we never keep a copy of your Salesforce records.
OAuth-only, least privilege
We connect via Salesforce OAuth (never your password), request only the scopes we need, and preview every write for your approval.
Revoke anytime
Disconnect Salesforce from your profile at any time — we immediately stop accessing your org.
Data isolation
Row-level security ensures each organization can only ever see its own data.
Trusted infrastructure
Built on Supabase and Vercel, with managed Postgres and audited infrastructure providers.
SOC 2 roadmap
We follow SOC 2-aligned practices today and are pursuing formal Type II certification.
Responsible disclosure
Found a vulnerability? Email security@mindzolt.ai — we investigate every report and coordinate a fix.
AI that speaks Salesforce
Your Salesforce org deserves AI that speaks its language
Join teams who stopped struggling with reports and config changes. Start your free trial with 500⚡.
7-day free trial · Setup in 60 seconds · Cancel anytime