How does Salesforce handle third party app marketplace security regarding student data privacy, and what red flags should I look out for before installing a free plugin?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
How does Salesforce handle third party app marketplace security regarding student data privacy, and what red flags should I look out for before installing a free plugin?
4 real searches · 1 real-search pass
Salesforce AppExchange security review requirements official security review data privacy third party apps OAuth scopesGoogle ↗
OBSERVEDReason
Salesforce connected apps OAuth policies admin approved users official documentationGoogle ↗
OBSERVEDOther / navigational
US Department Education FERPA third party service providers school official exception direct control redisclosureGoogle ↗
OBSERVEDReason
FTC COPPA school consent educational technology service providers officialGoogle ↗
OBSERVEDOther / navigational
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (4)
Classes come from the query-classifier (a local Laya model). 4 of 4 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT4 real searches · gpt-6
Salesforce AppExchange security review requirements official security review data privacy third party apps OAuth scopes Google ↗
Salesforce connected apps OAuth policies admin approved users official documentation Google ↗
US Department Education FERPA third party service providers school official exception direct control redisclosure Google ↗
FTC COPPA school consent educational technology service providers official Google ↗
- Frequently Asked Questions · studentprivacy.ed.gov
- Are there any limitations as to what education records may be disclosed to a community-based organization to which a school has outsourced an institutional service under the school official exception? · studentprivacy.ed.gov
- Complying with COPPA: Frequently Asked Questions · ftc.gov
- Security_Review · partners.salesforce.com
- Trust - Regulatory Compliance and Audit Patterns | Patterns | Well-Architected Framework · architect.salesforce.com
- Required Materials for Security Review Submission | ISVforce Guide: Build and Distribute AgentExchange Solutions | ISVforce Guide · developer.salesforce.com
- Connected Apps (CAs) and External Client Apps (ECAs) AppExchange Security Review Submission Guidance · help.salesforce.com
- Manage OAuth Access Policies for a Connected App · help.salesforce.com
- Connected App Use Cases · help.salesforce.com
- Manage Third-Party Connected Apps · help.salesforce.com
- Salesforce AppExchange · appexchange.salesforce.com
- U.S. Department of Education: Student Privacy FAQs · studentprivacy.ed.gov
Queries
4 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
Salesforce AppExchange security review requirements official security review data privacy third party apps OAuth scopes OBSERVED | Google ↗ AI Mode ↗ | — | Reason | — | — | 1x of 1 | |
Salesforce connected apps OAuth policies admin approved users official documentation OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
US Department Education FERPA third party service providers school official exception direct control redisclosure OBSERVED | Google ↗ AI Mode ↗ | — | Reason | — | — | 1x of 1 | |
FTC COPPA school consent educational technology service providers official OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 |