Data Sync Pro runs entirely within your Salesforce org and uses Salesforce's native security model.

• Data Processing — All processing runs in Apex inside the installed org. No external systems or third-party services are involved.
• Remote Actions — Connections to other Salesforce orgs use Salesforce Named Credentials, fully managed by your admins.
• Record-Based Rule Access — All DSP rules are stored as Executable records, governed by standard Salesforce object-, field-, and record-level security.

DSP ships with three permission sets to manage access:

• DSP: Data Sync Pro Starter — Minimal access. Can run rules (except batches) when given read access to Executable records.
• DSP: Data Sync Pro App User — Can run asynchronous rules like Batch jobs and Data Loaders when given access to the relevant Executable records.
• DSP: Data Sync Pro Administrator — Full administrative control over all DSP records.

Every DSP operation stays inside Salesforce's native security boundaries — fully under your control.