Security & privacy

Your orgs stay yours

EagleDesk runs on your own computer. Nothing changes in a Salesforce org without passing EagleDesk's checks – and your approval. Here is exactly how it works, in plain words.

💻

It runs on your computer

EagleDesk is an app on your Mac. Its server only listens on your own computer (127.0.0.1) and refuses requests that arrive under any other address, so a web page can't reach it. Issues, attachments, test evidence and backups are kept in your own data folder.

🔑

No passwords stored

Salesforce logins use the official Salesforce CLI on your computer – EagleDesk never sees or stores your Salesforce password. Jira and Azure DevOps tokens are kept in your system's secure password store (Keychain).

📵

Nothing sent to Cloudeation

EagleDesk doesn't send your org data, issues or usage to Cloudeation. License keys are checked on your computer (they are signed), so there's no "phone home". The feature-usage counts EagleDesk keeps stay in your data folder.

Changes to your orgs

Every change goes through EagleDesk's checks

These checks are built into EagleDesk itself – the AI can't skip them.

🚦

A rule for every org

Each org is read, data or deploy – or blocked. New orgs start read-only.

🏭

Production guard

Deploying or loading data to a production org needs its name typed to confirm, and Apex needs tests.

💾

Backups first

The current version is saved before every deploy, and the values of records before an update or delete – so it can be put back.

🧾

Full history

Every deployment, data load, rule change and Apex run is recorded: what, where, when and who.

The AI

The AI proposes. You decide.

  • The AI reads your orgs to find the cause – it works within Salesforce topics only.
  • Code and configuration fixes are proposed for your review; nothing is deployed until you approve and start it.
  • Record changes it suggests wait for your permission.
  • It runs on your own AI subscription, on your computer. What it reads to help you (the issue, code, query results) goes to your AI provider under that subscription's terms – not to Cloudeation.

The AI console

EagleDesk includes an optional console (a terminal on your computer) for advanced users. It's hidden by default – you never need it to use EagleDesk: the AI server starts from its own button.

Companies can lock the console off (Settings › General) so nobody can open or type into it.

Where EagleDesk connects

Only where you point it

Your Salesforce orgsthrough the Salesforce CLI login you made
Jira / Azure DevOpsonly if you connect them, to read and import your stories
Your AI providerthrough your own AI subscription on your computer
Salesforce's public status pageto show whether your org's instance has an incident (only the instance name is sent)

Questions from your security team? Email kona@cloudeation.net – we're happy to go through it.