Enterprise-grade security. Zero compromises.

NimeDocs runs 100% inside your Salesforce org. No external servers. No data transfer. No middleware.

Security Architecture

100% Salesforce Native

All code executes within the Salesforce platform. No external servers, no REST calls to third-party services for document generation. Your data never leaves the Salesforce security boundary.

Data Isolation

Each customer's data is isolated within their own Salesforce org. NimeDocs inherits your org's sharing rules, profiles, and permission sets. No multi-tenant data stores.

Authentication & Authorization

NimeDocs uses Salesforce's native authentication. No separate login, no stored credentials. Access controlled through standard Salesforce permission sets.

Compliance

Salesforce Security Review

Passed the Salesforce AppExchange security review process. Code scanned for SOQL injection, XSS, CRUD/FLS enforcement.

SOC 2 Ready

Built on the Salesforce trust platform. Inherits SOC 2 Type II compliance from the underlying platform.

HIPAA Compatible

No PHI stored outside Salesforce. Compatible with HIPAA Business Associate Agreements when used with Health Cloud.

GDPR Ready

No personal data processed outside the EU when used with EU-based Salesforce instances. Data deletion follows Salesforce data lifecycle.

Salesforce Native Architecture
Built on Salesforce Platform
Enterprise-Grade Security

Data Flow

1
User triggers generation

From a Salesforce record page button or automation.

2
Processing inside your org

Apex code merges template + data. All computation happens server-side within Salesforce governor limits.

3
Output stored in Salesforce

Generated document saved as ContentVersion. Linked to source record via ContentDocumentLink. Never touches external storage.

Technical Details

No. All document generation happens within Salesforce Apex. The only exception is optional chart image rendering via QuickChart.io for PDF exports, which sends only chart configuration data (no customer data).
In Salesforce ContentVersion/ContentDocument. NimeDocs creates ContentDocumentLink records to associate documents with source records. Standard Salesforce file storage applies.
NimeDocs uses two custom permission sets: NimeDocs User (read/generate) and NimeDocs Admin (create/edit templates). Both enforce CRUD/FLS at the object and field level.
The managed package code is not open source, but the AppExchange security review ensures code quality. All Apex classes follow Salesforce security best practices including with sharing keywords.
Email security@nimaxiom.com. We follow responsible disclosure practices and aim to acknowledge reports within 24 hours.

Questions about security?

Contact Our Security Team View AppExchange Listing
Pilot program now open — no credit card required. Set up in under 10 minutes.
Apply for Pilot Schedule Demo