Trust & Security
MultiDatePick runs entirely inside your Salesforce org. Here is exactly how your data and your security are handled.
MultiDatePick is a native Salesforce solution: a managed package of Lightning Web Components and Apex. It has no backend of its own, so there is very little to vet. The short version is below, in plain language.
100% native to Salesforce Nothing leaves your org
MultiDatePick runs completely inside your Salesforce org. It has no external servers, makes no outbound callouts, and sends no data to MultiDatePick or to any third party. Every date, time, booking, and record it touches stays in Salesforce, on your objects.
Because nothing ever leaves your org, MultiDatePick operates under your existing Salesforce compliance and data-residency posture. There is no separate data processor to assess.
- Subprocessors: none.
- Outbound network calls: none.
- Data sent to us: none. No telemetry, no analytics, no usage tracking.
AppExchange Security Review Passed
MultiDatePick has passed Salesforce's AppExchange Security Review, the mandatory assessment every listed solution must clear. It covers static and dynamic code analysis, enforcement of access controls and record sharing, safe data handling, and confirmation that no secrets are hard-coded.
Runs with each user's own permissions
All Apex executes in USER_MODE and validates object and field-level security (FLS) before every query and every write. The components can only read or change data the running user is already allowed to access. Sharing rules, FLS, and profile or permission-set access are always enforced. MultiDatePick never elevates a user's privileges.
You control access
Access is granted through bundled permission sets, so an admin gives each user exactly the object and field permissions the feature needs, and nothing more. Records are created on the standard or custom objects and fields you configure, using each user's own access.
Data handling at a glance
- What it reads and writes: date, time, and booking records on the objects and fields you configure.
- Where that data lives: your Salesforce org, on your objects. It never moves.
- What we collect about you: nothing.
- Saves are additive by default: new records are inserted; existing records are never deleted without an explicit action in the component.
Accessibility
MultiDatePick is built to WCAG 2.1 Level AA with keyboard navigation, screen-reader labels, and visible focus states. See the full VPAT 2.5 conformance report.
Security questions?
Have a vendor-assessment questionnaire, a data-handling question, or a compliance request? Email support@multidatepick.com and we will help.