Read-only by design. Metadata purged after every scan.
aprity reads your Salesforce metadata, never writes to it, and does not keep the raw metadata after a scan completes. Analysis is deterministic first; the AI narrates on top. Everything below is stated plainly and verifiable.
Documentation that keeps pace with your audits.
ISO 27001, HDS and SOC 2 all require organizations to keep their documentation continuously up to date. aprity refreshes your Salesforce documentation automatically on every scan, so it directly supports those audits. It enables your compliance and audit-readiness — aprity does not itself hold these certifications.
The LLM narrates. It never decides.
Dependencies, impact and the execution graph are computed deterministically from your metadata — reproducible and verifiable. The model explains results and answers questions with citations; it is never in the path that produces the graph.
Read-only by design.
aprity connects to Salesforce with a read-only integration. It reads metadata to build your documentation and never writes back to your org — it does not request the permissions needed to modify metadata, data or configuration.
Data, residency & purge.
aprity reads metadata, derives the documentation, then purges the raw metadata. Only the derived documentation remains in the portal, encrypted in Azure. aprity runs in both European and United States data regions, so you choose where your data lives.
Hard multi-tenant isolation.
Each tenant's data is isolated at the storage and processing layers. One tenant can never read, query or influence another's documentation, scans or agent context.
Azure-only AI routing.
All AI inference is routed exclusively through Microsoft Azure, in the data region you choose — European or United States. Model traffic stays within that region, and the deterministic analysis runs the same regardless of model.
Sub-processors and incident handling.
aprity runs on Microsoft Azure (EU and US regions). The complete, current sub-processor list is available on request. If a security incident affects your data, we notify you without undue delay and support your own regulatory reporting.
Report a vulnerability.
Found a security issue in aprity? Report it privately to security@aprity.ai. Please do not open a public issue or disclose the details before we have shipped a fix. We acknowledge reports within 2 business days, triage within 5, and target a fix or mitigation plan for High and Critical issues within 30 days. Good-faith research is covered by our safe-harbor policy, and we are happy to credit reporters with their consent.