Snapshot 134134
Normalized text
Scripts and page chrome removed; this is what change detection compares.
TRUST & SECURITY Security built for the data your AI acts on. From customer conversations to your CRM, Nektar protects your data with audited security controls and secure OAuth access. Visit the Trust Center Book a security review SOC 2 Type II ISO 27001 GDPR CASA Tier 2 Trusted by teams that take security seriously. Headless by Design. Secure by Default. Nektar runs in the background through an admin-managed connection. No browser extensions to install or client software to patch. Your security team approves one integration and keeps control of it. Admin-level OAuth Connect Salesforce, Google Workspace, Microsoft 365, Zoom and more through OAuth 2.0 and their official APIs. Revoke access whenever you need to. You define what's captured Choose which users, inboxes, and calendars Nektar connects to. Set exclusion rules for internal, HR, or legal threads and block emails & events by address, domain, or keywords in the subject or body. You define what's written Mask subject lines and email bodies to protect sensitive information, and filter by role, engagement, and seniority. We set up your rules and applies them company-wide before writing to CRM. Certifications Trust Starts with Proof. Review the independent assessments behind Nektar’s security. Request our SOC 2 report, penetration test summary, and security policies through the Trust Center under NDA. SOC 2 Type II Independently audited to verify that our security controls work consistently over time. ISO 27001 Nektar's information security management system, audited against the international standard. GDPR Personal data processed under GDPR requirements, with a Data Processing Agreement available to customers. CASA Tier 2 Google's Cloud Application Security Assessment, validated by an authorized lab. Required for restricted Gmail API access. Request the SOC 2 report AI & Data Use Your data doesn’t train our models. Nektar runs two kinds of AI. Our own machine-learning models match activity to the right accounts and opportunities. DAISY AI reads email and meeting content using third-party language models hosted on Microsoft Azure. No model training on customer data Records written to standard Salesforce objects you own Least-privilege access to customer data to Nektar team All customer data purged within 30 days of contract termination Read Privacy Policy Infrastructure & Operations How we Keep your Data safe, everyday. Encryption All data encrypted at rest and in transit. Every connection runs over SSL. Hosting Nektar runs on AWS, whose data centers hold their own SOC 2 and ISO 27001 certifications. AI processing for DAISY runs on Azure. Access & SSO Sign in with Salesforce SSO. Nektar staff have no access to your data by default. Temporary access for troubleshoot needs your approval. Audit logs Logs of data access and processing, available to admins on request and kept for at least 12 months. Backups Critical data is backed up regularly, and backup restoration is tested periodically. Incident response Affected customers are notified within 72 hours and a written summary will be shared within 7 business days. Penetration testing An external firm tests the platform every year. Summary available under NDA. People Background checks for every new hire. Security training several times a year. Read Data Processing Agreement FAQs Questions procurement asks first. What data does Nektar collect? Only customer-facing business communication. Block rules drop personal, internal, HR, or legal emails before anything is processed or stored. You decide which inboxes, calendars, and Salesforce fields Nektar can access, and you can revoke that access at any time. Do you use customer data to train AI models? No. Nektar doesn’t train its own models on customer data, and the third-party models behind DAISY run on Microsoft Azure, which doesn’t use customer data for training. Do reps need to install anything? No. Nektar connects through admin-level OAuth. There's no browser plugin or desktop app on rep devices. Does Nektar support single sign-on? Yes. Users sign in to Nektar through Salesforce SSO, so there's no separate password to manage. What happens to our data when we offboard? Customer data is purged from Nektar systems within 30 days after contract termination. Records already written to your Salesforce stay yours. What Microsoft 365 permissions does Nektar need? Read-only ones: Mail.Read, Calendars.Read, User.Read, and offline_access for background processing. No write permissions, and your IT admin can audit or revoke the app anytime. Can we pilot with a small group first? Yes. Your IT admin can scope Nektar to one security group, such as a team of BDRs. Privacy settings carry over at full rollout, with no re-integration. How do I report a security concern? Email support@nektar.ai. Our security team reviews every report. Bring your security questionnaire. Policies, the SOC 2 report, pentest summary, and DPA are ready in the Trust Center. For more details, reach out to our team. Visit the Trust Center Book a security review Scroll to Top Just one more step