nFlow aligns Salesforce–Microsoft Teams collaboration with enterprise-grade security: governance-by-design, automated compliance (labels, access, retention), and lifecycle controls—built on the proven nBold foundation while keeping your content in Microsoft 365.
nFlow orchestrates Microsoft Graph and Salesforce APIs—never warehousing your data. Customer content stays in Microsoft 365; CRM data stays in Salesforce. We store only the minimal metadata required to run automations.
Enterprise identity and access: Azure AD SSO with Conditional Access/MFA, least-privilege RBAC, scoped Salesforce OAuth, and minimal Microsoft Graph permissions—documented and auditable.
End-to-end protection for orchestration metadata with secure key handling and a hardened network perimeter.
Governance-by-design for Microsoft 365: templates apply labels and access, lifecycle keeps spaces tidy, retention-aware actions, and full auditability.
We don’t store your collaboration content—only minimal references for orchestration; no passwords are ever kept.
Shared-responsibility model: you own tenant governance; nFlow enforces it consistently across orchestration.
ndependent assurance and transparent vendor management—formal audits plus up-to-date subprocessor disclosures.
Enterprise-grade orchestration for Microsoft 365 and Salesforce: least-privilege access, strong identity, governed lifecycle, and transparent audit—without warehousing your data.
No. Files and conversations stay in your tenant. We orchestrate creation, tabs, membership, and lifecycle.
Orchestration metadata can be hosted in the EU. Customer content remains in Microsoft 365; CRM data remains in Salesforce.
We use the least‑privilege Microsoft Graph and Salesforce scopes necessary to fulfill the rules you configure. A detailed list is available in the Trust Center.
Yes. Use RBAC to limit builders, and templates to enforce labels, naming, and allowed business units.
Revoke OAuth tokens (Salesforce), remove app consent (Azure AD), or disable users via your IdP. nFlow respects these controls immediately.
Yes — request our security package for ISO 27001 and SOC 2 Type II documentation (NDA required).
